Warning: Permanently added '[localhost]:27086' (ECDSA) to the list of known hosts. 2022/09/21 12:45:10 fuzzer started 2022/09/21 12:45:10 dialing manager at localhost:40289 syzkaller login: [ 44.070471] cgroup: Unknown subsys name 'net' [ 44.146817] cgroup: Unknown subsys name 'rlimit' 2022/09/21 12:45:24 syscalls: 2215 2022/09/21 12:45:24 code coverage: enabled 2022/09/21 12:45:24 comparison tracing: enabled 2022/09/21 12:45:24 extra coverage: enabled 2022/09/21 12:45:24 setuid sandbox: enabled 2022/09/21 12:45:24 namespace sandbox: enabled 2022/09/21 12:45:24 Android sandbox: enabled 2022/09/21 12:45:24 fault injection: enabled 2022/09/21 12:45:24 leak checking: enabled 2022/09/21 12:45:24 net packet injection: enabled 2022/09/21 12:45:24 net device setup: enabled 2022/09/21 12:45:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 12:45:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 12:45:24 USB emulation: enabled 2022/09/21 12:45:24 hci packet injection: enabled 2022/09/21 12:45:24 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 12:45:24 802.15.4 emulation: enabled 2022/09/21 12:45:24 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 12:45:24 fetching corpus: 50, signal 32247/34857 (executing program) 2022/09/21 12:45:25 fetching corpus: 100, signal 43845/47074 (executing program) 2022/09/21 12:45:25 fetching corpus: 150, signal 49824/53625 (executing program) 2022/09/21 12:45:25 fetching corpus: 200, signal 58315/62155 (executing program) 2022/09/21 12:45:25 fetching corpus: 250, signal 62521/66654 (executing program) 2022/09/21 12:45:25 fetching corpus: 300, signal 68022/71916 (executing program) 2022/09/21 12:45:25 fetching corpus: 350, signal 72898/76596 (executing program) 2022/09/21 12:45:25 fetching corpus: 400, signal 76154/79782 (executing program) 2022/09/21 12:45:26 fetching corpus: 450, signal 78457/82002 (executing program) 2022/09/21 12:45:26 fetching corpus: 500, signal 82031/85170 (executing program) 2022/09/21 12:45:26 fetching corpus: 550, signal 85758/88220 (executing program) 2022/09/21 12:45:26 fetching corpus: 600, signal 89240/91248 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92066 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92196 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92303 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92430 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92561 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92688 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92821 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/92946 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93081 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93211 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93342 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93456 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93582 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93715 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93844 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/93974 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94110 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94245 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94369 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94492 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94633 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94759 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/94886 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/95026 (executing program) 2022/09/21 12:45:26 fetching corpus: 632, signal 90190/95160 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95276 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95405 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95517 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95639 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95755 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95888 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95961 (executing program) 2022/09/21 12:45:27 fetching corpus: 632, signal 90190/95961 (executing program) 2022/09/21 12:45:30 starting 8 fuzzer processes 12:45:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 12:45:30 executing program 1: clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240), {}, &(0x7f00000000c0)=""/23, 0x17, &(0x7f0000000300)=""/87, &(0x7f00000002c0)=[0x0, 0x0], 0x4044}, 0x58) 12:45:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:45:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:45:30 executing program 4: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9) 12:45:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000008980)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 12:45:30 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) [ 63.756638] audit: type=1400 audit(1663764330.252:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:45:30 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) [ 65.119140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.122900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.124390] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.125802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.127090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.128427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.133228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.134749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.136566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.138207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.139306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.141312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.155961] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.173758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.176805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.178785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.178854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.180284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.181000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.191256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.194465] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.196276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.198114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.199443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.200955] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.202364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.203860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.208224] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.213993] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.215404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.235848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.242995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.244118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.247377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.252459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.254851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.255878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.260918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.262493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.264058] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.265432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.268124] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.278025] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.278584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.281318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.295991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.301253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.308016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.318661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.329804] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.356041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.364136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.379338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.392054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.400069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.412372] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.254247] Bluetooth: hci7: command 0x0409 tx timeout [ 67.254279] Bluetooth: hci6: command 0x0409 tx timeout [ 67.255474] Bluetooth: hci0: command 0x0409 tx timeout [ 67.256268] Bluetooth: hci1: command 0x0409 tx timeout [ 67.319515] Bluetooth: hci2: command 0x0409 tx timeout [ 67.320568] Bluetooth: hci4: command 0x0409 tx timeout [ 67.382879] Bluetooth: hci5: command 0x0409 tx timeout [ 67.445838] Bluetooth: hci3: command 0x0409 tx timeout [ 69.301859] Bluetooth: hci1: command 0x041b tx timeout [ 69.302445] Bluetooth: hci0: command 0x041b tx timeout [ 69.302993] Bluetooth: hci6: command 0x041b tx timeout [ 69.303488] Bluetooth: hci7: command 0x041b tx timeout [ 69.365946] Bluetooth: hci4: command 0x041b tx timeout [ 69.366533] Bluetooth: hci2: command 0x041b tx timeout [ 69.430765] Bluetooth: hci5: command 0x041b tx timeout [ 69.493748] Bluetooth: hci3: command 0x041b tx timeout [ 71.350789] Bluetooth: hci7: command 0x040f tx timeout [ 71.351268] Bluetooth: hci6: command 0x040f tx timeout [ 71.351680] Bluetooth: hci0: command 0x040f tx timeout [ 71.352135] Bluetooth: hci1: command 0x040f tx timeout [ 71.413754] Bluetooth: hci2: command 0x040f tx timeout [ 71.414237] Bluetooth: hci4: command 0x040f tx timeout [ 71.477761] Bluetooth: hci5: command 0x040f tx timeout [ 71.542820] Bluetooth: hci3: command 0x040f tx timeout [ 73.397777] Bluetooth: hci1: command 0x0419 tx timeout [ 73.398257] Bluetooth: hci0: command 0x0419 tx timeout [ 73.398676] Bluetooth: hci6: command 0x0419 tx timeout [ 73.399141] Bluetooth: hci7: command 0x0419 tx timeout [ 73.462762] Bluetooth: hci4: command 0x0419 tx timeout [ 73.463251] Bluetooth: hci2: command 0x0419 tx timeout [ 73.526765] Bluetooth: hci5: command 0x0419 tx timeout [ 73.590756] Bluetooth: hci3: command 0x0419 tx timeout 12:46:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:46:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000008980)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 12:46:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) [ 124.842676] syz-executor.4 (302) used greatest stack depth: 24736 bytes left [ 125.006414] syz-executor.6 (301) used greatest stack depth: 24256 bytes left [ 127.378228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.380617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.381645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.385467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.389885] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.390741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.394580] Bluetooth: hci4: HCI_REQ-0x0c1a [ 127.396865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.400992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.402086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.404583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.405629] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.406457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.410137] Bluetooth: hci1: HCI_REQ-0x0c1a [ 129.397772] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 129.399319] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 129.461811] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 129.461976] Bluetooth: hci4: command 0x0409 tx timeout [ 129.462867] Bluetooth: hci1: command 0x0409 tx timeout [ 129.463465] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 131.509799] Bluetooth: hci1: command 0x041b tx timeout [ 131.510864] Bluetooth: hci4: command 0x041b tx timeout [ 131.968104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.972107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.973873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.979343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.980875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.982228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.986734] Bluetooth: hci2: HCI_REQ-0x0c1a [ 132.424168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 132.428020] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 132.431803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 132.445485] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 132.447803] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 132.448563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.452754] Bluetooth: hci7: HCI_REQ-0x0c1a [ 133.557938] Bluetooth: hci4: command 0x040f tx timeout [ 133.557962] Bluetooth: hci1: command 0x040f tx timeout [ 134.006874] Bluetooth: hci2: command 0x0409 tx timeout [ 134.070823] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 134.134749] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 134.517771] Bluetooth: hci7: command 0x0409 tx timeout [ 135.605751] Bluetooth: hci4: command 0x0419 tx timeout [ 135.606911] Bluetooth: hci1: command 0x0419 tx timeout [ 136.053798] Bluetooth: hci2: command 0x041b tx timeout [ 136.534156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.535157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.536805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.539087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.540586] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 136.541405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.544649] Bluetooth: hci5: HCI_REQ-0x0c1a [ 136.565731] Bluetooth: hci7: command 0x041b tx timeout [ 136.602771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.604551] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.606498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.612860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.616349] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 136.618131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.623769] Bluetooth: hci6: HCI_REQ-0x0c1a [ 138.101740] Bluetooth: hci2: command 0x040f tx timeout [ 138.614778] Bluetooth: hci7: command 0x040f tx timeout [ 138.615263] Bluetooth: hci5: command 0x0409 tx timeout [ 138.678052] Bluetooth: hci6: command 0x0409 tx timeout [ 140.149740] Bluetooth: hci2: command 0x0419 tx timeout [ 140.662786] Bluetooth: hci5: command 0x041b tx timeout [ 140.663240] Bluetooth: hci7: command 0x0419 tx timeout [ 140.727720] Bluetooth: hci6: command 0x041b tx timeout [ 142.710912] Bluetooth: hci5: command 0x040f tx timeout [ 142.773740] Bluetooth: hci6: command 0x040f tx timeout [ 144.758848] Bluetooth: hci5: command 0x0419 tx timeout [ 144.822913] Bluetooth: hci6: command 0x0419 tx timeout [ 164.519842] loop2: detected capacity change from 0 to 256 [ 164.543787] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 164.586790] audit: type=1400 audit(1663764431.082:7): avc: denied { open } for pid=6113 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 164.591913] audit: type=1400 audit(1663764431.082:8): avc: denied { kernel } for pid=6113 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 164.604416] ------------[ cut here ]------------ [ 164.604440] [ 164.604444] ====================================================== [ 164.604448] WARNING: possible circular locking dependency detected [ 164.604452] 6.0.0-rc6-next-20220921 #1 Not tainted [ 164.604460] ------------------------------------------------------ [ 164.604463] syz-executor.2/6114 is trying to acquire lock: [ 164.604470] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 164.604515] [ 164.604515] but task is already holding lock: [ 164.604518] ffff88800ea52420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 164.604549] [ 164.604549] which lock already depends on the new lock. [ 164.604549] [ 164.604552] [ 164.604552] the existing dependency chain (in reverse order) is: [ 164.604556] [ 164.604556] -> #3 (&ctx->lock){....}-{2:2}: [ 164.604571] _raw_spin_lock+0x2a/0x40 [ 164.604592] __perf_event_task_sched_out+0x53b/0x18d0 [ 164.604605] __schedule+0xedd/0x2470 [ 164.604619] schedule+0xda/0x1b0 [ 164.604633] exit_to_user_mode_prepare+0x114/0x1a0 [ 164.604645] syscall_exit_to_user_mode+0x19/0x40 [ 164.604658] do_syscall_64+0x48/0x90 [ 164.604676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.604691] [ 164.604691] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 164.604706] _raw_spin_lock_nested+0x30/0x40 [ 164.604726] raw_spin_rq_lock_nested+0x1e/0x30 [ 164.604740] task_fork_fair+0x63/0x4d0 [ 164.604759] sched_cgroup_fork+0x3d0/0x540 [ 164.604775] copy_process+0x4183/0x6e20 [ 164.604786] kernel_clone+0xe7/0x890 [ 164.604796] user_mode_thread+0xad/0xf0 [ 164.604807] rest_init+0x24/0x250 [ 164.604819] arch_call_rest_init+0xf/0x14 [ 164.604837] start_kernel+0x4c1/0x4e6 [ 164.604852] secondary_startup_64_no_verify+0xe0/0xeb [ 164.604867] [ 164.604867] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 164.604882] _raw_spin_lock_irqsave+0x39/0x60 [ 164.604902] try_to_wake_up+0xab/0x1930 [ 164.604917] up+0x75/0xb0 [ 164.604931] __up_console_sem+0x6e/0x80 [ 164.604949] console_unlock+0x46a/0x590 [ 164.604967] vt_ioctl+0x2822/0x2ca0 [ 164.604981] tty_ioctl+0x7c4/0x1700 [ 164.604994] __x64_sys_ioctl+0x19a/0x210 [ 164.605011] do_syscall_64+0x3b/0x90 [ 164.605028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.605040] [ 164.605040] -> #0 ((console_sem).lock){....}-{2:2}: [ 164.605055] __lock_acquire+0x2a02/0x5e70 [ 164.605074] lock_acquire+0x1a2/0x530 [ 164.605092] _raw_spin_lock_irqsave+0x39/0x60 [ 164.605111] down_trylock+0xe/0x70 [ 164.605126] __down_trylock_console_sem+0x3b/0xd0 [ 164.605144] vprintk_emit+0x16b/0x560 [ 164.605162] vprintk+0x84/0xa0 [ 164.605180] _printk+0xba/0xf1 [ 164.605191] report_bug.cold+0x72/0xab [ 164.605209] handle_bug+0x3c/0x70 [ 164.605226] exc_invalid_op+0x14/0x50 [ 164.605244] asm_exc_invalid_op+0x16/0x20 [ 164.605255] group_sched_out.part.0+0x2c7/0x460 [ 164.605267] ctx_sched_out+0x8f1/0xc10 [ 164.605277] __perf_event_task_sched_out+0x6d0/0x18d0 [ 164.605290] __schedule+0xedd/0x2470 [ 164.605303] schedule+0xda/0x1b0 [ 164.605317] exit_to_user_mode_prepare+0x114/0x1a0 [ 164.605328] syscall_exit_to_user_mode+0x19/0x40 [ 164.605340] do_syscall_64+0x48/0x90 [ 164.605357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.605369] [ 164.605369] other info that might help us debug this: [ 164.605369] [ 164.605372] Chain exists of: [ 164.605372] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 164.605372] [ 164.605388] Possible unsafe locking scenario: [ 164.605388] [ 164.605391] CPU0 CPU1 [ 164.605393] ---- ---- [ 164.605396] lock(&ctx->lock); [ 164.605402] lock(&rq->__lock); [ 164.605409] lock(&ctx->lock); [ 164.605416] lock((console_sem).lock); [ 164.605422] [ 164.605422] *** DEADLOCK *** [ 164.605422] [ 164.605424] 2 locks held by syz-executor.2/6114: [ 164.605432] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 164.605462] #1: ffff88800ea52420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 164.605492] [ 164.605492] stack backtrace: [ 164.605495] CPU: 0 PID: 6114 Comm: syz-executor.2 Not tainted 6.0.0-rc6-next-20220921 #1 [ 164.605508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 164.605518] Call Trace: [ 164.605522] [ 164.605527] dump_stack_lvl+0x8b/0xb3 [ 164.605546] check_noncircular+0x263/0x2e0 [ 164.605565] ? format_decode+0x26c/0xb50 [ 164.605582] ? print_circular_bug+0x450/0x450 [ 164.605601] ? enable_ptr_key_workfn+0x20/0x20 [ 164.605618] ? format_decode+0x26c/0xb50 [ 164.605638] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 164.605660] __lock_acquire+0x2a02/0x5e70 [ 164.605684] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 164.605708] lock_acquire+0x1a2/0x530 [ 164.605726] ? down_trylock+0xe/0x70 [ 164.605744] ? lock_release+0x750/0x750 [ 164.605766] ? vprintk+0x84/0xa0 [ 164.605786] _raw_spin_lock_irqsave+0x39/0x60 [ 164.605806] ? down_trylock+0xe/0x70 [ 164.605823] down_trylock+0xe/0x70 [ 164.605839] ? vprintk+0x84/0xa0 [ 164.605857] __down_trylock_console_sem+0x3b/0xd0 [ 164.605876] vprintk_emit+0x16b/0x560 [ 164.605897] vprintk+0x84/0xa0 [ 164.605916] _printk+0xba/0xf1 [ 164.605927] ? record_print_text.cold+0x16/0x16 [ 164.605943] ? report_bug.cold+0x66/0xab [ 164.605961] ? group_sched_out.part.0+0x2c7/0x460 [ 164.605974] report_bug.cold+0x72/0xab [ 164.605993] handle_bug+0x3c/0x70 [ 164.606011] exc_invalid_op+0x14/0x50 [ 164.606030] asm_exc_invalid_op+0x16/0x20 [ 164.606042] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 164.606057] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 164.606069] RSP: 0018:ffff888035807c48 EFLAGS: 00010006 [ 164.606078] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 164.606087] RDX: ffff88800f219ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 164.606095] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 164.606103] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800ea52400 [ 164.606111] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 164.606123] ? group_sched_out.part.0+0x2c7/0x460 [ 164.606137] ? group_sched_out.part.0+0x2c7/0x460 [ 164.606151] ctx_sched_out+0x8f1/0xc10 [ 164.606164] __perf_event_task_sched_out+0x6d0/0x18d0 [ 164.606181] ? lock_is_held_type+0xd7/0x130 [ 164.606194] ? __perf_cgroup_move+0x160/0x160 [ 164.606207] ? set_next_entity+0x304/0x550 [ 164.606226] ? update_curr+0x267/0x740 [ 164.606246] ? lock_is_held_type+0xd7/0x130 [ 164.606260] __schedule+0xedd/0x2470 [ 164.606277] ? io_schedule_timeout+0x150/0x150 [ 164.606294] ? rcu_read_lock_sched_held+0x3e/0x80 [ 164.606316] schedule+0xda/0x1b0 [ 164.606331] exit_to_user_mode_prepare+0x114/0x1a0 [ 164.606344] syscall_exit_to_user_mode+0x19/0x40 [ 164.606357] do_syscall_64+0x48/0x90 [ 164.606375] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.606388] RIP: 0033:0x7fe3e4cf9b19 [ 164.606396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 164.606408] RSP: 002b:00007fe3e226f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.606420] RAX: 0000000000000001 RBX: 00007fe3e4e0cf68 RCX: 00007fe3e4cf9b19 [ 164.606428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3e4e0cf6c [ 164.606436] RBP: 00007fe3e4e0cf60 R08: 000000000000000e R09: 0000000000000000 [ 164.606443] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe3e4e0cf6c [ 164.606451] R13: 00007ffda359f5ff R14: 00007fe3e226f300 R15: 0000000000022000 [ 164.606464] [ 164.660729] WARNING: CPU: 0 PID: 6114 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 164.661424] Modules linked in: [ 164.661724] CPU: 0 PID: 6114 Comm: syz-executor.2 Not tainted 6.0.0-rc6-next-20220921 #1 [ 164.662501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 164.663616] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 164.664124] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 164.665900] RSP: 0018:ffff888035807c48 EFLAGS: 00010006 [ 164.666267] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 164.666747] RDX: ffff88800f219ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 164.667222] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 164.667701] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800ea52400 [ 164.668173] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 164.668645] FS: 00007fe3e226f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 164.669181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.669574] CR2: 00007fd0c2e64028 CR3: 000000003a486000 CR4: 0000000000350ef0 [ 164.670055] Call Trace: [ 164.670235] [ 164.670398] ctx_sched_out+0x8f1/0xc10 [ 164.670668] __perf_event_task_sched_out+0x6d0/0x18d0 [ 164.671029] ? lock_is_held_type+0xd7/0x130 [ 164.671328] ? __perf_cgroup_move+0x160/0x160 [ 164.671634] ? set_next_entity+0x304/0x550 [ 164.671938] ? update_curr+0x267/0x740 [ 164.672218] ? lock_is_held_type+0xd7/0x130 [ 164.672511] __schedule+0xedd/0x2470 [ 164.672782] ? io_schedule_timeout+0x150/0x150 [ 164.673099] ? rcu_read_lock_sched_held+0x3e/0x80 [ 164.673437] schedule+0xda/0x1b0 [ 164.673679] exit_to_user_mode_prepare+0x114/0x1a0 [ 164.674011] syscall_exit_to_user_mode+0x19/0x40 [ 164.674340] do_syscall_64+0x48/0x90 [ 164.674606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.674954] RIP: 0033:0x7fe3e4cf9b19 [ 164.675226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 164.676409] RSP: 002b:00007fe3e226f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.676913] RAX: 0000000000000001 RBX: 00007fe3e4e0cf68 RCX: 00007fe3e4cf9b19 [ 164.677380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3e4e0cf6c [ 164.677850] RBP: 00007fe3e4e0cf60 R08: 000000000000000e R09: 0000000000000000 [ 164.678316] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe3e4e0cf6c [ 164.678788] R13: 00007ffda359f5ff R14: 00007fe3e226f300 R15: 0000000000022000 [ 164.679271] [ 164.679435] irq event stamp: 4468 [ 164.679670] hardirqs last enabled at (4467): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 164.680291] hardirqs last disabled at (4468): [] __schedule+0x1225/0x2470 [ 164.680841] softirqs last enabled at (4330): [] __irq_exit_rcu+0x11b/0x180 [ 164.681418] softirqs last disabled at (4325): [] __irq_exit_rcu+0x11b/0x180 [ 164.681991] ---[ end trace 0000000000000000 ]--- [ 164.890907] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 12:47:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000008980)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 12:47:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:47:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) 12:47:16 executing program 1: clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240), {}, &(0x7f00000000c0)=""/23, 0x17, &(0x7f0000000300)=""/87, &(0x7f00000002c0)=[0x0, 0x0], 0x4044}, 0x58) 12:47:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 4: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9) 12:47:16 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) [ 169.686502] loop2: detected capacity change from 0 to 256 [ 169.689155] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 4: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9) 12:47:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000008980)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 12:47:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x51}}) 12:47:16 executing program 1: clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240), {}, &(0x7f00000000c0)=""/23, 0x17, &(0x7f0000000300)=""/87, &(0x7f00000002c0)=[0x0, 0x0], 0x4044}, 0x58) [ 169.777150] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 12:47:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) 12:47:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 12:47:16 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 12:47:16 executing program 4: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9) 12:47:16 executing program 1: clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240), {}, &(0x7f00000000c0)=""/23, 0x17, &(0x7f0000000300)=""/87, &(0x7f00000002c0)=[0x0, 0x0], 0x4044}, 0x58) [ 169.838439] loop2: detected capacity change from 0 to 256 12:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 169.867365] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 169.874218] loop5: detected capacity change from 0 to 256 12:47:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) [ 169.884778] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 12:47:16 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) [ 169.936858] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 169.967676] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 169.991783] loop4: detected capacity change from 0 to 256 [ 169.995107] loop1: detected capacity change from 0 to 256 [ 169.997041] loop2: detected capacity change from 0 to 256 [ 169.998154] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 169.999256] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.002136] loop5: detected capacity change from 0 to 256 [ 170.004166] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.013278] loop0: detected capacity change from 0 to 256 [ 170.015123] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.018177] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.045067] loop7: detected capacity change from 0 to 256 12:47:16 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 12:47:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 12:47:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 170.058533] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.074991] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.076343] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.084553] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 3: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={0x0, 0x0, 0x3}) io_setup(0xff, &(0x7f0000000b80)) 12:47:16 executing program 6: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.100701] hrtimer: interrupt took 18725 ns 12:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 170.114938] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.132418] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 6: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.173614] loop0: detected capacity change from 0 to 256 [ 170.174603] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.184934] loop1: detected capacity change from 0 to 256 [ 170.186770] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.190810] loop4: detected capacity change from 0 to 256 12:47:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 3: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.209137] loop5: detected capacity change from 0 to 256 [ 170.210434] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.211928] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.213606] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 6: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.242475] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:16 executing program 2: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.286490] loop7: detected capacity change from 0 to 256 12:47:16 executing program 3: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) 12:47:16 executing program 6: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.306824] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.307542] loop0: detected capacity change from 0 to 256 [ 170.319407] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.358569] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:16 executing program 2: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) 12:47:16 executing program 3: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) [ 170.406722] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.407621] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.449136] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:17 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 12:47:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x41, 0x0, 0x4) 12:47:17 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) [ 170.686042] loop4: detected capacity change from 0 to 256 12:47:17 executing program 2: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) 12:47:17 executing program 6: prctl$PR_SET_IO_FLUSHER(0x3a, 0x1) 12:47:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 12:47:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 170.690195] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.693047] loop1: detected capacity change from 0 to 256 [ 170.698358] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.717855] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.728557] loop7: detected capacity change from 0 to 256 12:47:17 executing program 6: prctl$PR_SET_IO_FLUSHER(0x3a, 0x1) [ 170.740444] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x41, 0x0, 0x4) 12:47:17 executing program 6: prctl$PR_SET_IO_FLUSHER(0x3a, 0x1) [ 171.680181] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 171.686817] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 171.859559] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:47:18 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x41, 0x0, 0x4) 12:47:18 executing program 2: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 6: prctl$PR_SET_IO_FLUSHER(0x3a, 0x1) 12:47:18 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 4: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 2: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x41, 0x0, 0x4) 12:47:18 executing program 6: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 2: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 6: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 2: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:18 executing program 4: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:18 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 6: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 12:47:19 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 4: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 6: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:19 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 6: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 12:47:20 executing program 1: clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) sched_getparam(r0, &(0x7f0000000240)) 12:47:20 executing program 4: syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x840010, &(0x7f0000000a80)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) syz_mount_image$nfs4(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0xd3e, 0x2, &(0x7f0000001180)=[{&(0x7f0000001000)="dfe93274b5eece0d1110bdd50d3efab2202cebee4f0c50eb4fcef4e24dfecd73a4ecce5b68cf1515ec73a7fabb077bededf0f3105f26b104e039fc2962f3f7ae49f8144f2a6c523e9254d7c77f0e770fe55fd484e4eb948580133b0384a434e0c2eb07e8f0d38e96e7260cfd6a48b4c5633f7d62a7110c912034169394b54574c78af2dc326672737fab53162a27653a373ea304f84920ad95b642c39e8179a37c404cabafb4f259b0eb6eb4c911ed0612051bbf7dfc9008ade4f6a9", 0xbc, 0xc8e}, {&(0x7f00000010c0)="5bb7a05b9802b12259900d00c7c2163c44c796856466ea456b16cba3a2bcdb48afd302cb88334878e6bdeaa9765302d7a2d73e68af96f56059d5f28ed4f3aeafdfae3d017dda540fdf2e7483fea95e0a38c9531b1db2a5da4f7fe0db78c93e8940cd8592a65dbe39e34c6f683a34ee53b753a32ae805c988ed29e068efefee1dc8303916e65ae226419c460712770fdcf1a3ffc11581f8aa5c960bb3150a85a34ad7a9003dc5e964", 0xa8, 0x7ff}], 0x800, &(0x7f00000011c0)={[{'mask'}, {}, {}, {'#'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'MAY_READ'}}]}) 12:47:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) [ 174.072876] loop4: detected capacity change from 0 to 12 [ 174.077904] nfs4: Unknown parameter 'mask' 12:47:20 executing program 6: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 7: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 12:47:20 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 12:47:20 executing program 4: syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x840010, &(0x7f0000000a80)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) syz_mount_image$nfs4(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0xd3e, 0x2, &(0x7f0000001180)=[{&(0x7f0000001000)="dfe93274b5eece0d1110bdd50d3efab2202cebee4f0c50eb4fcef4e24dfecd73a4ecce5b68cf1515ec73a7fabb077bededf0f3105f26b104e039fc2962f3f7ae49f8144f2a6c523e9254d7c77f0e770fe55fd484e4eb948580133b0384a434e0c2eb07e8f0d38e96e7260cfd6a48b4c5633f7d62a7110c912034169394b54574c78af2dc326672737fab53162a27653a373ea304f84920ad95b642c39e8179a37c404cabafb4f259b0eb6eb4c911ed0612051bbf7dfc9008ade4f6a9", 0xbc, 0xc8e}, {&(0x7f00000010c0)="5bb7a05b9802b12259900d00c7c2163c44c796856466ea456b16cba3a2bcdb48afd302cb88334878e6bdeaa9765302d7a2d73e68af96f56059d5f28ed4f3aeafdfae3d017dda540fdf2e7483fea95e0a38c9531b1db2a5da4f7fe0db78c93e8940cd8592a65dbe39e34c6f683a34ee53b753a32ae805c988ed29e068efefee1dc8303916e65ae226419c460712770fdcf1a3ffc11581f8aa5c960bb3150a85a34ad7a9003dc5e964", 0xa8, 0x7ff}], 0x800, &(0x7f00000011c0)={[{'mask'}, {}, {}, {'#'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'MAY_READ'}}]}) 12:47:20 executing program 1: clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) sched_getparam(r0, &(0x7f0000000240)) 12:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 12:47:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/254, 0xfe}, {&(0x7f0000000140)=""/97, 0x61}], 0x2}, 0x8}, {{&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/42, 0x2a}], 0x3, &(0x7f0000000580)=""/114, 0x72}, 0x3}, {{&(0x7f0000000600), 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/208, 0xd0}], 0x3, &(0x7f00000008c0)=""/221, 0xdd}}, {{&(0x7f00000009c0)=@caif=@rfm, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)=""/63, 0x3f}, {&(0x7f0000000a80)=""/175, 0xaf}, {&(0x7f0000000b40)=""/154, 0x9a}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000cc0)=""/190, 0xbe}, {&(0x7f0000000d80)=""/170, 0xaa}, {&(0x7f0000000e40)=""/32, 0x20}], 0x7, &(0x7f0000000f00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001f00)=@nfc_llcp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/22, 0x16}], 0x1, &(0x7f0000002000)=""/208, 0xd0}, 0xaa6}, {{&(0x7f0000002100)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002180)=""/217, 0xd9}, {&(0x7f0000002280)=""/120, 0x78}, {&(0x7f0000002300)=""/63, 0x3f}], 0x3, &(0x7f0000002380)=""/210, 0xd2}, 0xff}, {{&(0x7f0000002480)=@sco, 0x80, &(0x7f0000003680)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/209, 0xd1}, {0x0}, {&(0x7f0000003640)=""/64, 0x40}], 0x4, &(0x7f00000036c0)=""/142, 0x8e}, 0x377}, {{&(0x7f0000003780)=@phonet, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003800)=""/132, 0x84}], 0x1, &(0x7f0000003900)=""/190, 0xbe}, 0x20}, {{&(0x7f00000039c0)=@xdp, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003a40)=""/254, 0xfe}, {&(0x7f0000003b40)=""/46, 0x2e}, {&(0x7f0000003b80)=""/156, 0x9c}, {&(0x7f0000003c40)=""/133, 0x85}, {&(0x7f0000003d00)=""/138, 0x8a}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x6}, 0xe0}, {{&(0x7f0000004e40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004ec0)=""/229, 0xe5}], 0x1, &(0x7f0000005000)=""/167, 0xa7}, 0x6}], 0xa, 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005a80)={{{@in6=@initdev, @in6=@private0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000005b80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) 12:47:20 executing program 5: syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x840010, &(0x7f0000000a80)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) syz_mount_image$nfs4(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0xd3e, 0x2, &(0x7f0000001180)=[{&(0x7f0000001000)="dfe93274b5eece0d1110bdd50d3efab2202cebee4f0c50eb4fcef4e24dfecd73a4ecce5b68cf1515ec73a7fabb077bededf0f3105f26b104e039fc2962f3f7ae49f8144f2a6c523e9254d7c77f0e770fe55fd484e4eb948580133b0384a434e0c2eb07e8f0d38e96e7260cfd6a48b4c5633f7d62a7110c912034169394b54574c78af2dc326672737fab53162a27653a373ea304f84920ad95b642c39e8179a37c404cabafb4f259b0eb6eb4c911ed0612051bbf7dfc9008ade4f6a9", 0xbc, 0xc8e}, {&(0x7f00000010c0)="5bb7a05b9802b12259900d00c7c2163c44c796856466ea456b16cba3a2bcdb48afd302cb88334878e6bdeaa9765302d7a2d73e68af96f56059d5f28ed4f3aeafdfae3d017dda540fdf2e7483fea95e0a38c9531b1db2a5da4f7fe0db78c93e8940cd8592a65dbe39e34c6f683a34ee53b753a32ae805c988ed29e068efefee1dc8303916e65ae226419c460712770fdcf1a3ffc11581f8aa5c960bb3150a85a34ad7a9003dc5e964", 0xa8, 0x7ff}], 0x800, &(0x7f00000011c0)={[{'mask'}, {}, {}, {'#'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'MAY_READ'}}]}) 12:47:20 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:47:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f00000001c0)) [ 174.402037] loop5: detected capacity change from 0 to 12 [ 174.403067] nfs4: Unknown parameter 'mask' 12:47:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) [ 174.433206] loop4: detected capacity change from 0 to 12 [ 174.434009] nfs4: Unknown parameter 'mask' 12:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 12:47:20 executing program 5: syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x840010, &(0x7f0000000a80)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) syz_mount_image$nfs4(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0xd3e, 0x2, &(0x7f0000001180)=[{&(0x7f0000001000)="dfe93274b5eece0d1110bdd50d3efab2202cebee4f0c50eb4fcef4e24dfecd73a4ecce5b68cf1515ec73a7fabb077bededf0f3105f26b104e039fc2962f3f7ae49f8144f2a6c523e9254d7c77f0e770fe55fd484e4eb948580133b0384a434e0c2eb07e8f0d38e96e7260cfd6a48b4c5633f7d62a7110c912034169394b54574c78af2dc326672737fab53162a27653a373ea304f84920ad95b642c39e8179a37c404cabafb4f259b0eb6eb4c911ed0612051bbf7dfc9008ade4f6a9", 0xbc, 0xc8e}, {&(0x7f00000010c0)="5bb7a05b9802b12259900d00c7c2163c44c796856466ea456b16cba3a2bcdb48afd302cb88334878e6bdeaa9765302d7a2d73e68af96f56059d5f28ed4f3aeafdfae3d017dda540fdf2e7483fea95e0a38c9531b1db2a5da4f7fe0db78c93e8940cd8592a65dbe39e34c6f683a34ee53b753a32ae805c988ed29e068efefee1dc8303916e65ae226419c460712770fdcf1a3ffc11581f8aa5c960bb3150a85a34ad7a9003dc5e964", 0xa8, 0x7ff}], 0x800, &(0x7f00000011c0)={[{'mask'}, {}, {}, {'#'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'MAY_READ'}}]}) 12:47:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f00000001c0)) 12:47:20 executing program 4: syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x840010, &(0x7f0000000a80)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) syz_mount_image$nfs4(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0xd3e, 0x2, &(0x7f0000001180)=[{&(0x7f0000001000)="dfe93274b5eece0d1110bdd50d3efab2202cebee4f0c50eb4fcef4e24dfecd73a4ecce5b68cf1515ec73a7fabb077bededf0f3105f26b104e039fc2962f3f7ae49f8144f2a6c523e9254d7c77f0e770fe55fd484e4eb948580133b0384a434e0c2eb07e8f0d38e96e7260cfd6a48b4c5633f7d62a7110c912034169394b54574c78af2dc326672737fab53162a27653a373ea304f84920ad95b642c39e8179a37c404cabafb4f259b0eb6eb4c911ed0612051bbf7dfc9008ade4f6a9", 0xbc, 0xc8e}, {&(0x7f00000010c0)="5bb7a05b9802b12259900d00c7c2163c44c796856466ea456b16cba3a2bcdb48afd302cb88334878e6bdeaa9765302d7a2d73e68af96f56059d5f28ed4f3aeafdfae3d017dda540fdf2e7483fea95e0a38c9531b1db2a5da4f7fe0db78c93e8940cd8592a65dbe39e34c6f683a34ee53b753a32ae805c988ed29e068efefee1dc8303916e65ae226419c460712770fdcf1a3ffc11581f8aa5c960bb3150a85a34ad7a9003dc5e964", 0xa8, 0x7ff}], 0x800, &(0x7f00000011c0)={[{'mask'}, {}, {}, {'#'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'MAY_READ'}}]}) [ 174.521352] loop5: detected capacity change from 0 to 12 [ 174.522385] nfs4: Unknown parameter 'mask' 12:47:21 executing program 1: clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) sched_getparam(r0, &(0x7f0000000240)) [ 174.554615] loop4: detected capacity change from 0 to 12 [ 174.556512] nfs4: Unknown parameter 'mask' 12:47:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f00000001c0)) 12:47:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f00000001c0)) 12:47:21 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x160140, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="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"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open(0x0, 0x40, 0x5e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x24, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc4ee871c650108390"]}, 0x24}], 0x1}, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) VM DIAGNOSIS: 12:47:11 Registers: info registers vcpu 0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff888035807698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe3e226f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd0c2e64028 CR3=000000003a486000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff81781047 RBP=ffff888007c4f780 RSP=ffff88800f377788 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000200 R14=ffff88803d963580 R15=0000000000000246 RIP=ffffffff814cf4c5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5889a46610 CR3=000000000d14a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000