Warning: Permanently added '[localhost]:32947' (ECDSA) to the list of known hosts. 2024/10/17 22:49:58 fuzzer started 2024/10/17 22:49:58 dialing manager at localhost:45639 syzkaller login: [ 61.680082] cgroup: Unknown subsys name 'net' [ 61.775953] cgroup: Unknown subsys name 'cpuset' [ 61.807918] cgroup: Unknown subsys name 'rlimit' 2024/10/17 22:50:19 syscalls: 2217 2024/10/17 22:50:19 code coverage: enabled 2024/10/17 22:50:19 comparison tracing: enabled 2024/10/17 22:50:19 extra coverage: enabled 2024/10/17 22:50:19 setuid sandbox: enabled 2024/10/17 22:50:19 namespace sandbox: enabled 2024/10/17 22:50:19 Android sandbox: enabled 2024/10/17 22:50:19 fault injection: enabled 2024/10/17 22:50:19 leak checking: enabled 2024/10/17 22:50:19 net packet injection: enabled 2024/10/17 22:50:19 net device setup: enabled 2024/10/17 22:50:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 22:50:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 22:50:19 USB emulation: enabled 2024/10/17 22:50:19 hci packet injection: enabled 2024/10/17 22:50:19 wifi device emulation: enabled 2024/10/17 22:50:19 802.15.4 emulation: enabled 2024/10/17 22:50:19 fetching corpus: 0, signal 0/2000 (executing program) 2024/10/17 22:50:19 fetching corpus: 48, signal 18881/22433 (executing program) 2024/10/17 22:50:19 fetching corpus: 98, signal 30243/35225 (executing program) 2024/10/17 22:50:19 fetching corpus: 148, signal 40925/47092 (executing program) 2024/10/17 22:50:19 fetching corpus: 198, signal 46952/54326 (executing program) 2024/10/17 22:50:19 fetching corpus: 248, signal 53331/61752 (executing program) 2024/10/17 22:50:19 fetching corpus: 298, signal 57862/67331 (executing program) 2024/10/17 22:50:19 fetching corpus: 348, signal 62493/72975 (executing program) 2024/10/17 22:50:20 fetching corpus: 398, signal 65755/77272 (executing program) 2024/10/17 22:50:20 fetching corpus: 448, signal 69924/82283 (executing program) 2024/10/17 22:50:20 fetching corpus: 498, signal 74663/87728 (executing program) 2024/10/17 22:50:20 fetching corpus: 548, signal 77564/91438 (executing program) 2024/10/17 22:50:20 fetching corpus: 598, signal 80011/94712 (executing program) 2024/10/17 22:50:20 fetching corpus: 648, signal 82694/98104 (executing program) 2024/10/17 22:50:20 fetching corpus: 698, signal 84605/100792 (executing program) 2024/10/17 22:50:20 fetching corpus: 748, signal 86208/103207 (executing program) 2024/10/17 22:50:20 fetching corpus: 798, signal 88642/106248 (executing program) 2024/10/17 22:50:21 fetching corpus: 848, signal 90035/108421 (executing program) 2024/10/17 22:50:21 fetching corpus: 898, signal 91876/110892 (executing program) 2024/10/17 22:50:21 fetching corpus: 948, signal 93705/113361 (executing program) 2024/10/17 22:50:21 fetching corpus: 997, signal 95121/115389 (executing program) 2024/10/17 22:50:21 fetching corpus: 1047, signal 95741/116813 (executing program) 2024/10/17 22:50:21 fetching corpus: 1097, signal 96976/118684 (executing program) 2024/10/17 22:50:21 fetching corpus: 1147, signal 98011/120406 (executing program) 2024/10/17 22:50:21 fetching corpus: 1197, signal 99446/122392 (executing program) 2024/10/17 22:50:21 fetching corpus: 1247, signal 100830/124280 (executing program) 2024/10/17 22:50:21 fetching corpus: 1297, signal 101870/125887 (executing program) 2024/10/17 22:50:22 fetching corpus: 1347, signal 103992/128245 (executing program) 2024/10/17 22:50:22 fetching corpus: 1397, signal 104863/129719 (executing program) 2024/10/17 22:50:22 fetching corpus: 1447, signal 105717/131159 (executing program) 2024/10/17 22:50:22 fetching corpus: 1497, signal 106637/132623 (executing program) 2024/10/17 22:50:22 fetching corpus: 1547, signal 107620/134060 (executing program) 2024/10/17 22:50:22 fetching corpus: 1597, signal 109489/136108 (executing program) 2024/10/17 22:50:22 fetching corpus: 1647, signal 111033/137835 (executing program) 2024/10/17 22:50:22 fetching corpus: 1697, signal 112159/139306 (executing program) 2024/10/17 22:50:22 fetching corpus: 1747, signal 113002/140588 (executing program) 2024/10/17 22:50:23 fetching corpus: 1797, signal 113546/141686 (executing program) 2024/10/17 22:50:23 fetching corpus: 1847, signal 115041/143373 (executing program) 2024/10/17 22:50:23 fetching corpus: 1897, signal 115813/144561 (executing program) 2024/10/17 22:50:23 fetching corpus: 1947, signal 116610/145752 (executing program) 2024/10/17 22:50:23 fetching corpus: 1997, signal 117697/147094 (executing program) 2024/10/17 22:50:23 fetching corpus: 2047, signal 119087/148575 (executing program) 2024/10/17 22:50:23 fetching corpus: 2097, signal 119899/149677 (executing program) 2024/10/17 22:50:23 fetching corpus: 2147, signal 121710/151337 (executing program) 2024/10/17 22:50:23 fetching corpus: 2197, signal 122516/152362 (executing program) 2024/10/17 22:50:24 fetching corpus: 2247, signal 123508/153546 (executing program) 2024/10/17 22:50:24 fetching corpus: 2297, signal 124122/154516 (executing program) 2024/10/17 22:50:24 fetching corpus: 2347, signal 125542/155866 (executing program) 2024/10/17 22:50:24 fetching corpus: 2396, signal 126373/156923 (executing program) 2024/10/17 22:50:24 fetching corpus: 2446, signal 127460/158001 (executing program) 2024/10/17 22:50:24 fetching corpus: 2496, signal 127918/158837 (executing program) 2024/10/17 22:50:24 fetching corpus: 2546, signal 129087/159934 (executing program) 2024/10/17 22:50:24 fetching corpus: 2596, signal 129729/160802 (executing program) 2024/10/17 22:50:24 fetching corpus: 2646, signal 130652/161751 (executing program) 2024/10/17 22:50:25 fetching corpus: 2695, signal 131306/162579 (executing program) 2024/10/17 22:50:25 fetching corpus: 2745, signal 131937/163415 (executing program) 2024/10/17 22:50:25 fetching corpus: 2795, signal 132785/164245 (executing program) 2024/10/17 22:50:25 fetching corpus: 2845, signal 133345/164997 (executing program) 2024/10/17 22:50:25 fetching corpus: 2895, signal 134151/165844 (executing program) 2024/10/17 22:50:25 fetching corpus: 2945, signal 134736/166572 (executing program) 2024/10/17 22:50:25 fetching corpus: 2995, signal 135533/167325 (executing program) 2024/10/17 22:50:25 fetching corpus: 3045, signal 136133/168066 (executing program) 2024/10/17 22:50:25 fetching corpus: 3095, signal 136704/168741 (executing program) 2024/10/17 22:50:26 fetching corpus: 3145, signal 137338/169441 (executing program) 2024/10/17 22:50:26 fetching corpus: 3194, signal 137923/170133 (executing program) 2024/10/17 22:50:26 fetching corpus: 3244, signal 138596/170797 (executing program) 2024/10/17 22:50:26 fetching corpus: 3294, signal 139056/171427 (executing program) 2024/10/17 22:50:26 fetching corpus: 3344, signal 139410/171993 (executing program) 2024/10/17 22:50:26 fetching corpus: 3394, signal 140511/172780 (executing program) 2024/10/17 22:50:26 fetching corpus: 3444, signal 141195/173413 (executing program) 2024/10/17 22:50:26 fetching corpus: 3494, signal 141574/173960 (executing program) 2024/10/17 22:50:26 fetching corpus: 3544, signal 142017/174540 (executing program) 2024/10/17 22:50:26 fetching corpus: 3594, signal 142649/175117 (executing program) 2024/10/17 22:50:27 fetching corpus: 3644, signal 143382/175721 (executing program) 2024/10/17 22:50:27 fetching corpus: 3694, signal 143813/176231 (executing program) 2024/10/17 22:50:27 fetching corpus: 3744, signal 144175/176722 (executing program) 2024/10/17 22:50:27 fetching corpus: 3794, signal 144675/177219 (executing program) 2024/10/17 22:50:27 fetching corpus: 3844, signal 145265/177729 (executing program) 2024/10/17 22:50:27 fetching corpus: 3894, signal 145791/178218 (executing program) 2024/10/17 22:50:27 fetching corpus: 3944, signal 146314/178702 (executing program) 2024/10/17 22:50:28 fetching corpus: 3994, signal 147037/179196 (executing program) 2024/10/17 22:50:28 fetching corpus: 4044, signal 147534/179615 (executing program) 2024/10/17 22:50:28 fetching corpus: 4094, signal 148087/180080 (executing program) 2024/10/17 22:50:28 fetching corpus: 4144, signal 149383/180580 (executing program) 2024/10/17 22:50:28 fetching corpus: 4194, signal 149963/181002 (executing program) 2024/10/17 22:50:28 fetching corpus: 4244, signal 150912/181438 (executing program) 2024/10/17 22:50:28 fetching corpus: 4293, signal 151400/181812 (executing program) 2024/10/17 22:50:28 fetching corpus: 4343, signal 151857/182158 (executing program) 2024/10/17 22:50:28 fetching corpus: 4393, signal 152183/182520 (executing program) 2024/10/17 22:50:29 fetching corpus: 4443, signal 152527/182878 (executing program) 2024/10/17 22:50:29 fetching corpus: 4493, signal 152923/183244 (executing program) 2024/10/17 22:50:29 fetching corpus: 4543, signal 153257/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4593, signal 153544/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4643, signal 154038/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4693, signal 154571/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4743, signal 154954/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4793, signal 155282/183486 (executing program) 2024/10/17 22:50:29 fetching corpus: 4843, signal 155596/183486 (executing program) 2024/10/17 22:50:30 fetching corpus: 4893, signal 155924/183496 (executing program) 2024/10/17 22:50:30 fetching corpus: 4942, signal 156387/183496 (executing program) 2024/10/17 22:50:30 fetching corpus: 4992, signal 156673/183496 (executing program) 2024/10/17 22:50:30 fetching corpus: 5041, signal 157008/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5091, signal 157261/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5141, signal 157561/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5191, signal 157861/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5241, signal 158269/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5291, signal 158666/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5341, signal 159105/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5391, signal 159340/183498 (executing program) 2024/10/17 22:50:30 fetching corpus: 5441, signal 159621/183498 (executing program) 2024/10/17 22:50:31 fetching corpus: 5491, signal 159904/183498 (executing program) 2024/10/17 22:50:31 fetching corpus: 5541, signal 160188/183498 (executing program) 2024/10/17 22:50:31 fetching corpus: 5591, signal 160478/183498 (executing program) 2024/10/17 22:50:31 fetching corpus: 5641, signal 161307/183879 (executing program) 2024/10/17 22:50:31 fetching corpus: 5690, signal 161676/183879 (executing program) 2024/10/17 22:50:31 fetching corpus: 5740, signal 162226/183879 (executing program) 2024/10/17 22:50:31 fetching corpus: 5790, signal 162435/183879 (executing program) 2024/10/17 22:50:32 fetching corpus: 5839, signal 162754/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 5889, signal 162996/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 5939, signal 163347/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 5989, signal 163562/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 6039, signal 163852/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 6089, signal 164167/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 6139, signal 164474/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 6189, signal 164692/183881 (executing program) 2024/10/17 22:50:32 fetching corpus: 6239, signal 165051/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6289, signal 165435/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6339, signal 165719/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6389, signal 166026/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6439, signal 166369/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6489, signal 166695/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6539, signal 167008/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6589, signal 167329/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6639, signal 167578/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6689, signal 167777/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6739, signal 168028/183881 (executing program) 2024/10/17 22:50:33 fetching corpus: 6789, signal 168386/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 6839, signal 168605/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 6889, signal 168922/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 6939, signal 169207/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 6989, signal 169680/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 7038, signal 169868/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 7088, signal 170157/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 7138, signal 170470/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 7188, signal 170672/183881 (executing program) 2024/10/17 22:50:34 fetching corpus: 7238, signal 171066/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7288, signal 171409/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7338, signal 171645/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7388, signal 171865/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7438, signal 172057/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7488, signal 172294/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7538, signal 172545/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7588, signal 172830/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7638, signal 173173/183882 (executing program) 2024/10/17 22:50:35 fetching corpus: 7688, signal 173453/183884 (executing program) 2024/10/17 22:50:35 fetching corpus: 7738, signal 173805/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 7788, signal 174111/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 7838, signal 174380/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 7887, signal 174706/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 7937, signal 174948/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 7987, signal 175197/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 8037, signal 175453/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 8087, signal 175631/183884 (executing program) 2024/10/17 22:50:36 fetching corpus: 8136, signal 175842/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8186, signal 176174/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8236, signal 176708/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8286, signal 176957/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8335, signal 177178/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8385, signal 177454/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8435, signal 177654/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8485, signal 177864/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8535, signal 178002/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8585, signal 178189/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8635, signal 178326/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8685, signal 178493/183884 (executing program) 2024/10/17 22:50:37 fetching corpus: 8735, signal 179120/183884 (executing program) 2024/10/17 22:50:38 fetching corpus: 8785, signal 179483/183884 (executing program) 2024/10/17 22:50:38 fetching corpus: 8833, signal 179662/183884 (executing program) 2024/10/17 22:50:38 fetching corpus: 8883, signal 180014/183884 (executing program) 2024/10/17 22:50:38 fetching corpus: 8933, signal 180274/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 8983, signal 180552/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9033, signal 180742/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9082, signal 180941/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9132, signal 181113/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9182, signal 181334/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9232, signal 181573/183886 (executing program) 2024/10/17 22:50:38 fetching corpus: 9282, signal 181752/183886 (executing program) 2024/10/17 22:50:39 fetching corpus: 9332, signal 181934/183886 (executing program) 2024/10/17 22:50:39 fetching corpus: 9382, signal 182085/183886 (executing program) 2024/10/17 22:50:39 fetching corpus: 9432, signal 182374/183886 (executing program) 2024/10/17 22:50:39 fetching corpus: 9482, signal 182556/183886 (executing program) 2024/10/17 22:50:39 fetching corpus: 9532, signal 182757/183889 (executing program) 2024/10/17 22:50:39 fetching corpus: 9543, signal 182781/183889 (executing program) 2024/10/17 22:50:39 fetching corpus: 9543, signal 182781/183889 (executing program) 2024/10/17 22:50:42 starting 8 fuzzer processes 22:50:42 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x1269, &(0x7f0000000480)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:50:42 executing program 1: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) 22:50:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc0189436, 0x0) [ 105.046472] audit: type=1400 audit(1729205442.396:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:50:42 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r0, 0xc020660b, &(0x7f0000000180)) 22:50:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 22:50:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:50:42 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r0, 0x0) 22:50:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2e, &(0x7f0000000000)={0x77359400}, 0x10) [ 106.485001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.492171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.494842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.501610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.506036] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.508332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.560785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.566784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.571907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.581275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.584927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.588771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.609952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.617053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.619959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.633003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.637721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.643043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.648508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.650395] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.653717] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.656659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.658623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.662017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.689004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.699340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.709061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.712260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.714357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.718908] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.721940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.724500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.754594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.761843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.764986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.771137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.774960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.780757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.784969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.787769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.790946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.793207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.798408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.800309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.841811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.869055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.874963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.886048] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.570023] Bluetooth: hci0: command tx timeout [ 108.633707] Bluetooth: hci1: command tx timeout [ 108.697634] Bluetooth: hci2: command tx timeout [ 108.761614] Bluetooth: hci3: command tx timeout [ 108.825644] Bluetooth: hci4: command tx timeout [ 108.826344] Bluetooth: hci6: command tx timeout [ 108.826452] Bluetooth: hci5: command tx timeout [ 108.953694] Bluetooth: hci7: command tx timeout [ 110.619614] Bluetooth: hci0: command tx timeout [ 110.683590] Bluetooth: hci1: command tx timeout [ 110.746083] Bluetooth: hci2: command tx timeout [ 110.810565] Bluetooth: hci3: command tx timeout [ 110.873816] Bluetooth: hci4: command tx timeout [ 110.874311] Bluetooth: hci5: command tx timeout [ 110.874563] Bluetooth: hci6: command tx timeout [ 111.001599] Bluetooth: hci7: command tx timeout [ 112.665840] Bluetooth: hci0: command tx timeout [ 112.731593] Bluetooth: hci1: command tx timeout [ 112.795575] Bluetooth: hci2: command tx timeout [ 112.859707] Bluetooth: hci3: command tx timeout [ 112.921631] Bluetooth: hci6: command tx timeout [ 112.922086] Bluetooth: hci5: command tx timeout [ 112.923128] Bluetooth: hci4: command tx timeout [ 113.049589] Bluetooth: hci7: command tx timeout [ 114.714601] Bluetooth: hci0: command tx timeout [ 114.778767] Bluetooth: hci1: command tx timeout [ 114.842652] Bluetooth: hci2: command tx timeout [ 114.906626] Bluetooth: hci3: command tx timeout [ 114.970549] Bluetooth: hci4: command tx timeout [ 114.970996] Bluetooth: hci5: command tx timeout [ 114.971429] Bluetooth: hci6: command tx timeout [ 115.098716] Bluetooth: hci7: command tx timeout [ 164.640551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.641286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.909623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.910274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.320966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.324887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.327292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.335990] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.340989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.348897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.401311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.404910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.407070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.411946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.415927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.420712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.522427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.529236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.543436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.550132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.553730] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.559928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.657783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.659659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.666962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.680195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.686002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.691925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.710388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.716089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.726815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.729224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.731336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.733454] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.735222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.739829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.742375] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.744314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.750657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.751948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.753656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.767950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.796046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.813143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.818944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.824254] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.849919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.855033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.858668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.862018] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.864112] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.874956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.418725] Bluetooth: hci0: command tx timeout [ 171.545591] Bluetooth: hci1: command tx timeout [ 171.610584] Bluetooth: hci2: command tx timeout [ 171.803602] Bluetooth: hci3: command tx timeout [ 171.803631] Bluetooth: hci6: command tx timeout [ 171.866650] Bluetooth: hci4: command tx timeout [ 171.994668] Bluetooth: hci7: command tx timeout [ 172.058707] Bluetooth: hci5: command tx timeout [ 173.466612] Bluetooth: hci0: command tx timeout [ 173.595551] Bluetooth: hci1: command tx timeout [ 173.658590] Bluetooth: hci2: command tx timeout [ 173.849595] Bluetooth: hci6: command tx timeout [ 173.850741] Bluetooth: hci3: command tx timeout [ 173.913584] Bluetooth: hci4: command tx timeout [ 174.041601] Bluetooth: hci7: command tx timeout [ 174.105645] Bluetooth: hci5: command tx timeout [ 175.513839] Bluetooth: hci0: command tx timeout [ 175.641582] Bluetooth: hci1: command tx timeout [ 175.705926] Bluetooth: hci2: command tx timeout [ 175.897658] Bluetooth: hci3: command tx timeout [ 175.897706] Bluetooth: hci6: command tx timeout [ 175.963610] Bluetooth: hci4: command tx timeout [ 176.089764] Bluetooth: hci7: command tx timeout [ 176.155617] Bluetooth: hci5: command tx timeout [ 177.563610] Bluetooth: hci0: command tx timeout [ 177.689632] Bluetooth: hci1: command tx timeout [ 177.753637] Bluetooth: hci2: command tx timeout [ 177.945712] Bluetooth: hci6: command tx timeout [ 177.945760] Bluetooth: hci3: command tx timeout [ 178.010579] Bluetooth: hci4: command tx timeout [ 178.139551] Bluetooth: hci7: command tx timeout [ 178.202603] Bluetooth: hci5: command tx timeout [ 227.330387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.331529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.687575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.688240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.975684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.976340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.727477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.735162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.741268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.752115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.755245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.758159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.040670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.045876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.047845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.053605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.056322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.060155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.180881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.186882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.190171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.191897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.196472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.203548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.205332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.215072] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.215113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.218394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.224962] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.251887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.253772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.258913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.261718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.278708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.295109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.311774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.368733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.379453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.384587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.387265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.392982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.398743] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.401261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.414063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.459533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.484966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.502947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.517027] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.545830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.568841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.599420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.644876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.673907] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.721361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.817604] Bluetooth: hci0: command tx timeout [ 234.137598] Bluetooth: hci1: command tx timeout [ 234.329637] Bluetooth: hci2: command tx timeout [ 234.330447] Bluetooth: hci3: command tx timeout [ 234.457572] Bluetooth: hci5: command tx timeout [ 234.458589] Bluetooth: hci4: command tx timeout [ 234.713602] Bluetooth: hci7: command tx timeout [ 234.842543] Bluetooth: hci6: command tx timeout [ 235.865564] Bluetooth: hci0: command tx timeout [ 236.185571] Bluetooth: hci1: command tx timeout [ 236.377729] Bluetooth: hci3: command tx timeout [ 236.378236] Bluetooth: hci2: command tx timeout [ 236.506526] Bluetooth: hci4: command tx timeout [ 236.507023] Bluetooth: hci5: command tx timeout [ 236.763570] Bluetooth: hci7: command tx timeout [ 236.889577] Bluetooth: hci6: command tx timeout [ 237.913779] Bluetooth: hci0: command tx timeout [ 238.233569] Bluetooth: hci1: command tx timeout [ 238.425673] Bluetooth: hci2: command tx timeout [ 238.426144] Bluetooth: hci3: command tx timeout [ 238.553953] Bluetooth: hci5: command tx timeout [ 238.555095] Bluetooth: hci4: command tx timeout [ 238.810576] Bluetooth: hci7: command tx timeout [ 238.937939] Bluetooth: hci6: command tx timeout [ 239.961794] Bluetooth: hci0: command tx timeout [ 240.281921] Bluetooth: hci1: command tx timeout [ 240.474670] Bluetooth: hci2: command tx timeout [ 240.475648] Bluetooth: hci3: command tx timeout [ 240.601663] Bluetooth: hci4: command tx timeout [ 240.602628] Bluetooth: hci5: command tx timeout [ 240.857758] Bluetooth: hci7: command tx timeout [ 240.987351] Bluetooth: hci6: command tx timeout [ 286.718604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.719228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.951371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.952201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.952704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.953441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.210639] audit: type=1400 audit(1729205625.558:8): avc: denied { open } for pid=10706 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 288.215873] audit: type=1400 audit(1729205625.559:9): avc: denied { kernel } for pid=10706 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 288.361224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.362143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:53:45 executing program 2: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) 22:53:45 executing program 2: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) [ 288.705531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.706215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:53:46 executing program 2: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) [ 288.926268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.927077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:53:46 executing program 2: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) 22:53:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x6, 0xa}) 22:53:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 22:53:47 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5452, &(0x7f0000000040)={{0x1}}) 22:53:47 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) [ 290.154422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.234420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.235402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.352132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.352823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.739648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.742671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.745045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.750182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.754162] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.756385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.997040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.002965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.005042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.010457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.013662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.015460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.046238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.064410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.070364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.080317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.087458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.089717] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.094090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.096146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.103087] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.129108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.135586] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.142322] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.180649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.185041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.187421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.225003] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.231865] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.240969] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.769881] Bluetooth: hci0: command tx timeout [ 296.091543] Bluetooth: hci3: command tx timeout [ 296.218592] Bluetooth: hci6: command tx timeout [ 296.281716] Bluetooth: hci4: command tx timeout [ 296.346247] Bluetooth: hci7: command tx timeout [ 297.818669] Bluetooth: hci0: command tx timeout [ 298.137699] Bluetooth: hci3: command tx timeout [ 298.265596] Bluetooth: hci6: command tx timeout [ 298.331507] Bluetooth: hci4: command tx timeout [ 298.393549] Bluetooth: hci7: command tx timeout [ 299.865722] Bluetooth: hci0: command tx timeout [ 300.185600] Bluetooth: hci3: command tx timeout [ 300.313529] Bluetooth: hci6: command tx timeout [ 300.378521] Bluetooth: hci4: command tx timeout [ 300.441766] Bluetooth: hci7: command tx timeout [ 301.913737] Bluetooth: hci0: command tx timeout [ 302.233695] Bluetooth: hci3: command tx timeout [ 302.361527] Bluetooth: hci6: command tx timeout [ 302.425542] Bluetooth: hci4: command tx timeout [ 302.489832] Bluetooth: hci7: command tx timeout [ 329.806590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.807231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.028245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.028942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.029877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.031354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.201524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.202154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.282191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.282843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.350306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.351016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.573050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.574567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.722190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.722881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.809370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.810207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.888158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.888987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:54:29 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x0) 22:54:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8531) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0x8531}], 0x2, 0x0, 0x0, 0x0) 22:54:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:54:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e23, @dev}, 0x10, 0x0}, 0x8800) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1}}], 0x1, 0x4000800) 22:54:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "b42f282d522c981a"}}}}, 0x0) 22:54:29 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940b, 0x0) 22:54:29 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:29 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setpriority(0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) fchown(0xffffffffffffffff, r0, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x20000000, &(0x7f0000000340)={0x0, 0x3938700}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) r2 = clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r2, 0x0) [ 332.536477] hrtimer: interrupt took 29015 ns 22:54:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:54:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a76d88d2006c4bf630210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 22:54:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x228}]]}, 0x30}}, 0x0) 22:54:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x1, &(0x7f0000000c00)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000bc0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x8004) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="cd", 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001400)='D', 0x1}], 0x300}}], 0x2, 0x4048000) 22:54:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "b42f282d522c981a"}}}}, 0x0) [ 333.468823] audit: type=1400 audit(1729205670.818:10): avc: denied { write } for pid=13153 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:54:30 executing program 0: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff865c6000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "b42f282d522c981a"}}}}, 0x0) 22:54:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlockall(0x7) 22:54:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:54:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000011300)) 22:54:30 executing program 1: r0 = epoll_create(0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) r3 = getpgid(0x0) r4 = getpgid(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000080)={r0}) 22:54:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:30 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:31 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "b42f282d522c981a"}}}}, 0x0) [ 333.800915] loop4: detected capacity change from 0 to 184 [ 333.843341] isofs_fill_super: root inode is not a directory. Corrupted media? [ 333.887029] loop4: detected capacity change from 0 to 184 [ 333.905333] isofs_fill_super: root inode is not a directory. Corrupted media? 22:54:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000011300)) 22:54:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 22:54:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8923, &(0x7f0000000040)="1317c19ecad4f63a") 22:54:31 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:31 executing program 2: r0 = syz_io_uring_setup(0x74df, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 22:54:31 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:31 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 22:54:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000180), 0x4) [ 334.431253] loop4: detected capacity change from 0 to 184 [ 334.443953] isofs_fill_super: root inode is not a directory. Corrupted media? 22:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1=0xe000000a}}, {{0x3, 0x0, @private}}}, 0x108) 22:54:31 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:54:32 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x40085203, 0x0) 22:54:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000011300)) 22:54:32 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) 22:54:32 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2202, 0x0) 22:54:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{}, 0x0, @in6=@private2}}, 0xe8) [ 335.030342] loop4: detected capacity change from 0 to 184 [ 335.047884] isofs_fill_super: root inode is not a directory. Corrupted media? 22:54:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000011300)) 22:54:32 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) close(r2) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) gettid() r6 = dup(0xffffffffffffffff) sendmmsg$inet(r6, &(0x7f0000009ac0)=[{{&(0x7f0000003500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd3}]}}}], 0x18}}], 0x2, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddb5f250300000006000a004e20000006000a004e24000014000900fc020000000000000000000000000001050002000a000000060001004e2200000500030062000000050003003c00000008000000ac1414aa14000900fe8000000000000000000000000000bbfc9461dd8ffbf6"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) [ 335.550178] loop4: detected capacity change from 0 to 184 [ 335.644694] isofs_fill_super: root inode is not a directory. Corrupted media? 22:54:33 executing program 5: ioperm(0x0, 0x6d1f, 0x3) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:54:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:54:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) 22:54:33 executing program 2: r0 = epoll_create(0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) ioctl$TCXONC(r1, 0x540a, 0x2) 22:54:33 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 22:54:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:54:33 executing program 2: ioperm(0x0, 0x7ff, 0x7) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 22:54:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:54:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/150, 0x96}}], 0x1, 0x0, 0x0) 22:54:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) 22:54:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/232, 0xe8}], 0x1) 22:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{:\x00'}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) 22:54:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0x12, 0x0, &(0x7f0000000280)) 22:54:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) [ 336.417440] loop1: detected capacity change from 0 to 10 [ 336.425875] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 336.534142] loop1: detected capacity change from 0 to 10 22:54:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:54:33 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000400)=[{0x5, 0x0, 0x1000}], 0x1) 22:54:33 executing program 6: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 22:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x509764) 22:54:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:54:33 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2, 0xf0ff1f00000000) [ 336.715092] loop1: detected capacity change from 0 to 10 22:54:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x3, 0x8502}, 0x8000, 0x5, 0xfff, 0x8, 0x0, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, r0, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000400)=0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) memfd_secret(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) [ 337.022363] loop1: detected capacity change from 0 to 10 [ 337.028041] loop7: detected capacity change from 0 to 40 [ 337.029984] loop4: detected capacity change from 0 to 4096 22:54:34 executing program 4: [ 337.099953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31343338373338393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="200000003c66c62a3c66c62a00000000d5f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000d6f4655fd6f4655fd6f4655f00000000000002008000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000429f33c7000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000652a4c1d000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000d6f4655fd6f4655fd6f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3134333837333839372f66696c65302f66696c653000000000000000000000000000000000000000000000d6db46a3000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="ed8100000a000000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000116ea814000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000d6f4655fd6f4655fd6f4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000080000000020000000100000082000000020000000180000082000000000000000000000000000000cc766ded000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000256c47f5000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) 22:54:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 22:54:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 22:54:34 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000180), 0x200000000000000}], 0x1) 22:54:34 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:54:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000040)) 22:54:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 344.979492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:54:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 22:54:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 22:54:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='asymmetric\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000480)='ceph\x00', 0x0, 0x0, 0x0, 0x0) 22:54:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:42 executing program 1: timer_create(0x7, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)) 22:54:42 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x94, 0x0, 0x0, "6095cfddb12450f2a962d0a3158596c5", "d1dfc6138ea791ed1263bb235db1cf97ae50a2b5634a041cc876a3f6bcd07940fbbcf1a228b56c173467488f7abb4411960718a86b2fff213253a8c617493f7b678452ac211e31d6dcf90c437036c1cffd1b18ec199f1fc00acf130043bec51f1dcea4886a4b5a2971edc2891fd00122d9354d11f36573156987b3e99e0602"}, 0x94, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='trusted.overlay.upper\x00', &(0x7f00000008c0)=""/147, 0x93) 22:54:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) [ 345.591159] loop7: detected capacity change from 0 to 40 22:54:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:43 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x94, 0x0, 0x0, "6095cfddb12450f2a962d0a3158596c5", "d1dfc6138ea791ed1263bb235db1cf97ae50a2b5634a041cc876a3f6bcd07940fbbcf1a228b56c173467488f7abb4411960718a86b2fff213253a8c617493f7b678452ac211e31d6dcf90c437036c1cffd1b18ec199f1fc00acf130043bec51f1dcea4886a4b5a2971edc2891fd00122d9354d11f36573156987b3e99e0602"}, 0x94, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='trusted.overlay.upper\x00', &(0x7f00000008c0)=""/147, 0x93) 22:54:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 22:54:43 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) 22:54:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) [ 345.934641] loop7: detected capacity change from 0 to 40 22:54:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:43 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x94, 0x0, 0x0, "6095cfddb12450f2a962d0a3158596c5", "d1dfc6138ea791ed1263bb235db1cf97ae50a2b5634a041cc876a3f6bcd07940fbbcf1a228b56c173467488f7abb4411960718a86b2fff213253a8c617493f7b678452ac211e31d6dcf90c437036c1cffd1b18ec199f1fc00acf130043bec51f1dcea4886a4b5a2971edc2891fd00122d9354d11f36573156987b3e99e0602"}, 0x94, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='trusted.overlay.upper\x00', &(0x7f00000008c0)=""/147, 0x93) 22:54:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000000)) 22:54:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 22:54:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) 22:54:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$KDFONTOP_SET(r1, 0x4b30, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:54:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006080)=ANY=[], 0xc8}}], 0x2, 0x0) [ 346.318324] loop7: detected capacity change from 0 to 40 22:54:43 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) 22:54:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) write(r1, &(0x7f0000000200)='E', 0x140000) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 22:54:43 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x94, 0x0, 0x0, "6095cfddb12450f2a962d0a3158596c5", "d1dfc6138ea791ed1263bb235db1cf97ae50a2b5634a041cc876a3f6bcd07940fbbcf1a228b56c173467488f7abb4411960718a86b2fff213253a8c617493f7b678452ac211e31d6dcf90c437036c1cffd1b18ec199f1fc00acf130043bec51f1dcea4886a4b5a2971edc2891fd00122d9354d11f36573156987b3e99e0602"}, 0x94, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='trusted.overlay.upper\x00', &(0x7f00000008c0)=""/147, 0x93) 22:54:43 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 22:54:43 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="11", 0x1}, {&(0x7f0000000040)="b2", 0x1}], 0x2, 0x0, 0x0) 22:54:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0eef13cec4d116d3c6c21793bfa51c68e7d9f5"}) 22:54:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x7) 22:54:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) connect(r0, &(0x7f0000002100)=@un=@file={0x1, './file0\x00'}, 0x80) 22:54:44 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) 22:54:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x7, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 22:54:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x24499204}) 22:54:44 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="11", 0x1}, {&(0x7f0000000040)="b2", 0x1}], 0x2, 0x0, 0x0) 22:54:44 executing program 7: r0 = epoll_create1(0x0) r1 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)) 22:54:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x7, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 22:54:44 executing program 6: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 22:54:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x530e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018", @ANYBLOB]) move_mount(r0, &(0x7f0000000140)='\x00', 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x12000, &(0x7f0000000600)={[{'/dev/sr0\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x53}]}, 0x1c}}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 22:54:44 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="11", 0x1}, {&(0x7f0000000040)="b2", 0x1}], 0x2, 0x0, 0x0) 22:54:44 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) 22:54:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) write(r1, &(0x7f0000000200)='E', 0x140000) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 22:54:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x1, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000040)=0x1, 0x3) 22:54:44 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="11", 0x1}, {&(0x7f0000000040)="b2", 0x1}], 0x2, 0x0, 0x0) 22:54:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:54:44 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 22:54:44 executing program 6: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 22:54:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x7, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 22:54:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x530e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018", @ANYBLOB]) move_mount(r0, &(0x7f0000000140)='\x00', 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x12000, &(0x7f0000000600)={[{'/dev/sr0\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x53}]}, 0x1c}}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 22:54:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40086604) 22:54:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r0, &(0x7f0000000080)=0xffffffffffffffc0, r0, 0x0, 0x9b, 0x0) 22:54:48 executing program 6: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 22:54:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) write(r1, &(0x7f0000000200)='E', 0x140000) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 22:54:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:54:48 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 22:54:48 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x7, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 22:54:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 22:54:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x530e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018", @ANYBLOB]) move_mount(r0, &(0x7f0000000140)='\x00', 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x12000, &(0x7f0000000600)={[{'/dev/sr0\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x53}]}, 0x1c}}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 22:54:49 executing program 7: semget(0x3, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) semget(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000005c0)=""/35) geteuid() semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pause() semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 22:54:49 executing program 6: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 22:54:49 executing program 3: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000640), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x410482, 0x0) 22:54:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 22:54:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:54:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) write(r1, &(0x7f0000000200)='E', 0x140000) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 22:54:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x530e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018", @ANYBLOB]) move_mount(r0, &(0x7f0000000140)='\x00', 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x12000, &(0x7f0000000600)={[{'/dev/sr0\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x53}]}, 0x1c}}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 22:54:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:system_r:kernel_t:s0\x00', 0x1e) 22:54:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) close(r1) 22:54:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:54:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000014c0)={0x14, 0x1a, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 22:54:49 executing program 6: getresgid(&(0x7f0000000080), &(0x7f0000000040), &(0x7f0000001940)) 22:54:50 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) setxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{}], {}, [{0x8, 0x5}], {0x10, 0x4}}, 0x34, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 22:54:50 executing program 5: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 22:54:50 executing program 6: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x8}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x9, 0x80, 0x3f, 0x0, 0x59, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x208}, 0x100, 0x1, 0x0, 0x0, 0x1, 0x4, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:54:50 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 22:54:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 22:54:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x5}]) 22:54:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) 22:54:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x182, 0x0) fallocate(r0, 0x8, 0x0, 0x81) 22:54:50 executing program 5: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:50 executing program 3: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:50 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x800, 0x0) syz_open_procfs(0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 22:54:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x12, 0x0, 0xff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x12, 0x0, 0xff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) ioctl$CDROM_GET_MCN(r0, 0x5311, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') pread64(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000000)) ioprio_set$pid(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fork() ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x2002, 0x3e) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000140)) 22:54:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x0, 0x0) 22:54:50 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x0, 0x7fffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x0) 22:54:50 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0)="aa", 0x1}], 0x0, &(0x7f0000000380)={[], [{@obj_user={'obj_user', 0x3d, '!-^:]'}}]}) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 22:54:50 executing program 3: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:50 executing program 5: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:50 executing program 1: accept$inet(0xffffffffffffffff, 0x0, 0x0) geteuid() accept$inet(0xffffffffffffffff, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x1000002, &(0x7f0000000480)) 22:54:50 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x0, 0x7fffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x0) 22:54:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0)="aa", 0x1}], 0x0, &(0x7f0000000380)={[], [{@obj_user={'obj_user', 0x3d, '!-^:]'}}]}) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 22:54:51 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @empty}}}}}, 0x0) 22:54:51 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) setpriority(0x1, 0x0, 0x0) 22:54:51 executing program 5: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:51 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0)="aa", 0x1}], 0x0, &(0x7f0000000380)={[], [{@obj_user={'obj_user', 0x3d, '!-^:]'}}]}) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 22:54:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x88, 0x1, &(0x7f0000000000), 0x4) 22:54:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000340)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 22:54:51 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x0, 0x7fffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x0) 22:54:51 executing program 3: unshare(0xa040000) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:54:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0)="aa", 0x1}], 0x0, &(0x7f0000000380)={[], [{@obj_user={'obj_user', 0x3d, '!-^:]'}}]}) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 22:54:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 0: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) 22:54:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 3: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') fspick(r1, &(0x7f0000000040)='./file1\x00', 0x8) 22:54:51 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) acct(&(0x7f0000000400)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) 22:54:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:51 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x0, 0x7fffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x0) 22:54:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 22:54:51 executing program 5: syz_emit_ethernet(0x1d8, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x1a2, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1d, "e92be8780a45ffa66d230cd728d90e5c4ab3716bd8272bd40b7378977ee7f1ee6966cd3905008cacb7bbc2f21cfd68aebed2dca4f8e97bba88eb3621a470bc74f5fd80ec0f2366e4d4870e91feb2a275385a0a96026498914e6a95123d9924990f9bcbb693bcac6dc51dfe339c138d33fa233db0195db327ae27a6ee70818b380682e1ce5a8db4e3bd38c1bfee9294717279f479899cfcdeb67ed47e9694e405b38bea08b12e8ab8751d2b4123d9f4a623fae98210ca9ce809b978360f5bad0c6ff46f5bc3201145c362d7ce6fcfaae2097d019d4c65b5147bd23c1bd1d422b88343f71fa33d64154dce0f3635"}, {0x0, 0x1, "88a537d9b23e358e"}, {0x0, 0x9, "df754c0ab8820ee0dd7794d9c1c96c6127436ed0bb344fec2439ce4e18d7cb957a4485d605901e112ac7d4e28be5dc17ec3ce84fc04c1772e2f06991e58c49ce1acee4dafc9bd0bd"}, {0x0, 0x9, "d3db8acd52ffb4363fa6978abab42e84bc982cb2ffc625b41322df87f7e0b2fad59c45c55b3d4a66d0b5b2250837680036561d12265b8c57995a5ab80e7113bb67412ad052a909d44241b76adc"}]}}}}}}, 0x0) [ 354.551267] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.635155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.645088] Process accounting resumed [ 354.695522] Process accounting resumed 22:54:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x42) setsockopt$inet6_group_source_req(r0, 0x29, 0x1a, 0x0, 0x0) 22:54:52 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 22:54:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac14147b1f13000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff"], 0xb8}}, 0x0) 22:54:52 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) 22:54:52 executing program 0: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) 22:54:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 22:54:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$IPC_SET(0x0, 0x1, 0x0) getpriority(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 355.041590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:54:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100)="8e01cb2e", 0x4) 22:54:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 22:54:52 executing program 0: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) 22:54:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) [ 355.288388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:54:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100)="8e01cb2e", 0x4) 22:54:52 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 22:54:52 executing program 3: r0 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)='\x00') 22:54:52 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=';', 0x1, 0x0, 0x8000}], 0x0) 22:54:52 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0xffffffffffff116c}) 22:54:52 executing program 0: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) [ 355.544876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.738607] Bluetooth: hci5: command 0x0406 tx timeout [ 355.741683] Bluetooth: hci2: command 0x0406 tx timeout [ 355.742019] Bluetooth: hci1: command 0x0406 tx timeout 22:54:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100)="8e01cb2e", 0x4) 22:54:53 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=';', 0x1, 0x0, 0x8000}], 0x0) 22:54:53 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 22:54:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 22:54:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b537000000000000000005", @ANYRES32, @ANYBLOB="080099"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:54:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 22:54:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:54:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@loopback=0x7f000008, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 356.101384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:53 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=';', 0x1, 0x0, 0x8000}], 0x0) 22:54:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100)="8e01cb2e", 0x4) [ 356.142169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:53 executing program 3: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0xffffffffffffffff) 22:54:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:54:53 executing program 5: perf_event_open$cgroup(&(0x7f0000005880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:54:53 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 22:54:53 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 22:54:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x1be78817, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 22:54:53 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000005400)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:54:53 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=';', 0x1, 0x0, 0x8000}], 0x0) 22:54:53 executing program 1: setrlimit(0x9, &(0x7f0000000000)) io_setup(0x3f, &(0x7f0000000200)) 22:54:53 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:54:53 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r0) keyctl$read(0xb, r1, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:54:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_int(r1, 0x88, 0x1, 0x0, &(0x7f00000001c0)) 22:54:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x10001}) 22:54:54 executing program 0: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:55 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:54:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001500)='Q', 0x1}], 0x1}}], 0x2, 0x20008000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000002c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001500)='Q', 0x1}], 0x1}}], 0x2, 0x20008000) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='M', 0x1}], 0x1}, 0x0) 22:54:55 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x42000) fcntl$setstatus(r1, 0x4, 0x42000) 22:54:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x1f) 22:54:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x8008662c, &(0x7f0000000340)=0x1) 22:54:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 22:54:55 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:54:55 executing program 0: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:55 executing program 5: setreuid(0x0, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) 22:54:55 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:54:55 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xa4, @none, 0x0, 0x1}, 0xe) 22:54:55 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:54:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x17f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0x40}, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)=ANY=[@ANYBLOB="53b1eaa391d6ff74302866696c74657200000000000000c2d537396758d0c24954be000000000000000000000000000042000000008000000000000002f02776b8c3713a92f9fd564fd55500000000000000000000000005000000008cc4e0790000f2770e8e2e79763254f09080ca3a08e92fe2bcde18fa711bce02734d6aa08450ff27b0048fa6263b438bfdadc55970b4b28b845d6f13f65ede585f3ea0d3"], 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)=0x4, 0x4) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x10890) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x0, @mcast2, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc02000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200c, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="2c646629ee1e8c4ccb", @ANYRESDEC=r2, @ANYBLOB=',\x00']) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000440)="5d01fb49fe44fc4f500900d7f1617d2cd4010000000000000091264e45ff3dc67c418a14144ecab44e59580a4d1fc2e9c3c8953e2c8b222471d235e59a57da8edbb51e3eb6fc28a29ff99cc708155568cb0e399e79") perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x0, 0x8, 0x2, 0x0, 0x4, 0x8014, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0xffff, 0x3}, 0x0, 0x682800000000, 0x5, 0x7, 0x0, 0x2, 0x0, 0x0, 0xfb07, 0x0, 0x6}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) 22:54:55 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xa4, @none, 0x0, 0x1}, 0xe) 22:54:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 358.676914] audit: type=1326 audit(1729205696.022:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13769 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358a342b19 code=0x0 22:54:56 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xa4, @none, 0x0, 0x1}, 0xe) [ 374.914571] rcu_tasks_wait_gp: rcu_tasks grace period number 21 (since boot) is 16045 jiffies old. 22:55:13 executing program 4: syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x4, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000300)=@generic={0x0, 0x0, 0x0, 'o3:\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x13, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80001) 22:55:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250000000000000000004f5f000008000300", @ANYRES32=r2], 0x50}}, 0x0) 22:55:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}}], 0x1, 0x0) 22:55:13 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:55:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x401c5820, &(0x7f0000000000)=0x800f0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6611, 0x0) 22:55:13 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:55:13 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xa4, @none, 0x0, 0x1}, 0xe) 22:55:13 executing program 0: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 376.612186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.733870] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.810068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.397271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.068115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:55:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 22:55:15 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000300)="c045", 0x2}, {&(0x7f0000000400)="90ce7c3726f26c3b2c7326e643a0355effda2c882c1ba7bbd83d1df6574ee49f92f221d87262860d3763921d209a21e9eb9adf7ebe6714ffede8a5de938baa173a82f656c91b814c7e46c294ab5772547da441b1d524792f706b559128954caa66a57fd5fdad83e8b8f54fb509748e6ca2b10a1237eae27e5ab2fec17c2d9af98fbc4c322fbcde5f66454128b14ef151259d8c73b6", 0x69}, {&(0x7f00000004c0)="1a8602e79c98faa699b0a36343bdff6b3319fdbf06e5465dd90c101a53dcd989ca8af171c562c8f7fd82b0b3b4ba47fa816b014c07faf3c6860dd0abc31e48eab0d2135e1447767318f3935f543596c26643a663f981c14b9273185a4e1829052545c7646ff3d22831a4466a65585584d511f495613f214a119d11b5b26c11ba71a9462f5fafb9bc624f49d2b2f7f0d038fe0538c00d87a91b49b15a4430acd0c890cc5d8800d1e47ab875b7ced631855df255d0d2e589e716e50f", 0xbb}, {&(0x7f0000000580)="89a6f5fb2c90794f5319642d495bb5db8584187a4e35fa58bb807783cfab0cf1bdfe270ac90506d66432482cf515ad3f8c3a292fbbc42f49748accb9c15b02ad6061a46c652df8d88acb5ddf128c3ea6e79f64cb212f74c9074a0a568f1bcae534c19e67d90bb4", 0x67}, {&(0x7f00000009c0)="7b60d8849135b9fa46c2353cefd159ef56a28041eaf2c035387e864cf5f880f323b9e475ad4fc298a09dc333d4806344b8967e270c59cd2eb842915db12760c69d52efd6c26efeab81d687496c708f60178f72d7ecb0faf47a455fbf8be7ff8ba729528831af94590d941afca50d4fed6859437da7b98809b40fac17838d2c06ce74da0fa588871ab453c7df7a106b38531f13649b2f42936ba20d1323d1babc37ea97479a022f54142717f9a4d5ce9dcba702c4e44b90558547bd2491e38ab130d01f216f14fae6f830485110772f6b7e34e81dfe1e6fc9d345a5b4577cf1e8938346b17da0d4a9d01f2ef669ca930669891eb07d3c"}, {&(0x7f0000000640)="9830cf8d6b8f289f10aff3780ab25370ab94b6440cbc4327290e2b7822ea2f72a45994fe2442ff73359acdb5844e0243cc7c7aaeb02169934b7a3441d5fa761563dd3d56a38db29492f72e34cf6958a43c3c70051728714b087ff74761ffe65b39adde5425cdd925d802e1c776dc88bdc8134d777904e20bea8e7556b3a2f390073f6ba526969cf70599e4897a701c3aaf1c66111c31a66bd9da69fbc4cbb7ba5e5a6c4daab330a3e0016ccf74e0a2be698e8d3aa3c3eb", 0x8}, {&(0x7f0000000ac0)="66b6a7f998781c4a5c76b53ce1cff8c937e679e2f2aee872ce898198ea23f0e3d73035490123f07b9e94753912bd2899ca44258c908bdae54344278d818979216dcb8b886145d6a30f77353210d28d8a859334a7cf43e33bac00c8ce1316c08a3cab405281f6526aa916a457fe6211951fcdb586529ddad227f0c69374b27fbdae64da77ef75fd304300ddc8d2530558b53d83b67301c4ab7aaacf426ee76d546fc450"}, {&(0x7f0000000b80)="a5672c4bda0ea3d2248c102c005b45a891769cb0ad15247ba61aedd387ab140643140945f76d279bef603cc4184b4290543a13ec096b4f33762da63e57a9295ecb0ccd8e72e3cef95ab0"}, {&(0x7f0000000c00)="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"}], 0x4, &(0x7f0000000700)=[@ip_tos_u8], 0x20}, 0x0) 22:55:15 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:55:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) ioprio_get$pid(0x3, 0x0) 22:55:15 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000500)={0x24, 0x24, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="dd2f7f9798"]}]}, 0x24}], 0x1}, 0x0) 22:55:15 executing program 0: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:55:15 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xdf, 0x8, 0x6, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x189e1758, 0x4, @perf_config_ext={0x2, 0x2}, 0x800, 0xc3, 0xfffffff8, 0x0, 0x9, 0x6, 0x10, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) ptrace(0x4208, r0) r2 = fork() tkill(r0, 0x11) ptrace(0x10, r2) r3 = fork() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 22:55:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 22:55:16 executing program 6: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 22:55:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x27, 0x4) 22:55:16 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003b80)={0x14, 0x14, 0x0, 0x801, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22:55:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 22:55:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 22:55:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 22:55:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) 22:55:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) [ 379.997087] audit: type=1326 audit(1729205717.345:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13862 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25618c9b19 code=0x0 22:55:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) acct(0x0) 22:55:17 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) [ 380.182705] loop2: detected capacity change from 0 to 40 22:55:17 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x4) [ 380.476989] kworker/u9:7: attempt to access beyond end of device [ 380.476989] loop2: rw=1, sector=124, nr_sectors = 4 limit=40 [ 380.479145] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 380.823935] audit: type=1326 audit(1729205718.172:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13862 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25618c9b19 code=0x0 22:55:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r2, 0x1) 22:55:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 22:55:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x42, 0x0, 0x101}, 0x14}}, 0x0) 22:55:18 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x7, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8135b6", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}}, 0x0) 22:55:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) acct(0x0) 22:55:18 executing program 7: clone3(&(0x7f0000001900)={0x88004580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:55:18 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:55:18 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:55:18 executing program 7: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) [ 381.055855] loop2: detected capacity change from 0 to 40 22:55:18 executing program 1: ioperm(0x0, 0x7ff, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) [ 381.362355] kworker/u9:1: attempt to access beyond end of device [ 381.362355] loop2: rw=1, sector=124, nr_sectors = 4 limit=40 [ 381.363928] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:55:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8531) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c000, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0xfdef}], 0x2, 0x0, 0x0, 0x8) 22:55:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x42, 0x0, 0x101}, 0x14}}, 0x0) 22:55:18 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x7, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8135b6", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}}, 0x0) 22:55:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) acct(0x0) 22:55:18 executing program 1: ioperm(0x0, 0x7ff, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 22:55:18 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:55:18 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) [ 381.625397] Process accounting resumed 22:55:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x42, 0x0, 0x101}, 0x14}}, 0x0) 22:55:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0), 0x8) 22:55:19 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x7, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8135b6", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}}, 0x0) 22:55:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) acct(0x0) 22:55:19 executing program 1: ioperm(0x0, 0x7ff, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 22:55:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x0) [ 381.950800] loop2: detected capacity change from 0 to 40 22:55:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x42, 0x0, 0x101}, 0x14}}, 0x0) 22:55:19 executing program 1: ioperm(0x0, 0x7ff, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) [ 382.126697] Process accounting resumed [ 382.184123] kworker/u10:3: attempt to access beyond end of device [ 382.184123] loop2: rw=1, sector=124, nr_sectors = 4 limit=40 [ 382.185992] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:55:19 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:55:19 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5863, &(0x7f0000000000), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000034}) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r8}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev, r8}, 0xc) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa, 0x34f1e136}) shutdown(r5, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], 0x4) 22:55:19 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x7, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8135b6", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}}, 0x0) 22:55:19 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) 22:55:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000018003f05000000000000000002000000d8c93106"], 0x1c}], 0x1}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 22:55:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 22:55:19 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 22:55:19 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x4b30) 22:55:20 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000940)=ANY=[], 0x0) 22:55:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) [ 382.939668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.956334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:55:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x8}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) 22:55:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x5, 0x0, r0, 0x0, 0x0) 22:55:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x19, 0x0, 0x0) 22:55:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x6) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6, 0x7, 0x3, 0x4, 0x0, 0x4, 0x200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x480000000000000, 0x6, 0x4, 0x1, 0x52f, 0x9, 0x0, 0x6, 0x0, 0x3f}, 0x0, 0x7, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000015c0)) mq_open(&(0x7f0000000000)='@\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x7ffd, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1}, 0x4) 22:55:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256-neon\x00'}}}]}, 0x180}}, 0x0) 22:55:20 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffff13b, 0x80143) 22:55:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x0, 0x200, 0x512}) [ 383.322260] audit: type=1400 audit(1729205720.632:14): avc: denied { read } for pid=13971 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 383.370983] audit: type=1400 audit(1729205720.719:15): avc: denied { block_suspend } for pid=13975 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 383.399134] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 22:55:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) 22:55:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) 22:55:21 executing program 1: r0 = epoll_create(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r1, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) 22:55:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x0, 0x200, 0x512}) 22:55:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000000) 22:55:21 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) 22:55:21 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7ff, 0x1ff, 0x6, 0x7, 0x90cc, 0x8}, {0xfb, 0x7ff, 0x1, 0x0, 0x657856c6, 0x7}], ['\x00']}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000080)="ee35", 0x2, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) dup(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r2, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x40510, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:55:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x8}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) [ 384.480704] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.507817] audit: type=1400 audit(1729205721.857:16): avc: denied { module_load } for pid=13996 comm="syz-executor.7" path=2F6D656D66643A42DB2F89036CDE62CBB534EDBE4C59B55AE11253F547CCF3E902680BCA2896E143DF1CEA8543FB1013FA0316CD17A280A17AB47295C3409DA6F192237D67D360F7CE7ACBB31ABBC438658EB126D18AE6217F8DEA2C7178A238BF22C765064CB036EB3C24D7BAE501039472ABD44A0373AFF641BF56FA1E778DBF994997D8D2E811C404202864656C6574656429 dev="tmpfs" ino=1037 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 384.510272] Invalid ELF header len 9 22:55:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) 22:55:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x0, 0x200, 0x512}) 22:55:21 executing program 6: timerfd_settime(0xffffffffffffffff, 0x51337e489b6c38e2, &(0x7f0000001300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 22:55:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) [ 384.804335] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 22:55:22 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) [ 385.011633] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.053596] lo: entered promiscuous mode [ 385.053989] lo: entered allmulticast mode 22:55:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x0, 0x200, 0x512}) 22:55:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) [ 385.282868] audit: type=1400 audit(1729205722.366:17): avc: denied { watch_reads } for pid=14022 comm="syz-executor.6" path="/dev/bsg" dev="devtmpfs" ino=113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 [ 385.466494] ======================================================= [ 385.466494] WARNING: The mand mount option has been deprecated and [ 385.466494] and is ignored by this kernel. Remove the mand [ 385.466494] option from the mount to silence this warning. [ 385.466494] ======================================================= 22:55:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8502}, 0x8000, 0x5, 0xfff, 0x8, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, r0, 0xa) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file1\x00', 0x40000, 0x1) write(r1, &(0x7f0000000100)="456d2ba3eea592ab99ca63e2274da2c13955a4b6b0e3b37d4c53639577ac0a6f3d6d428bdaff30b951eb44670bcc5c4787bae0c7d1a077d206316e39477d422e9414b4150828d4dedbf9d2346fdc577680f2a8f62e", 0x55) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r2, r4, 0x0, 0x10000027f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x5444, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@access_client}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r6}}]}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 22:55:22 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) 22:55:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) 22:55:30 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) 22:55:30 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dd02a6", 0x8, 0x11, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 22:55:30 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) 22:55:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 22:55:30 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) 22:55:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x8}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) 22:55:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) [ 393.693041] lo: left promiscuous mode [ 393.693829] lo: left allmulticast mode [ 393.758003] Invalid ELF header len 9 [ 393.899555] lo: entered promiscuous mode [ 393.906154] lo: entered allmulticast mode 22:55:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0) 22:55:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 22:55:31 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) 22:55:31 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000002600)=[{&(0x7f0000000040)="d0", 0x1}, {0x0}], 0x2, 0x0, 0x0) 22:55:31 executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0x12000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount_setattr(0xffffffffffffffff, &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0) [ 394.146560] lo: entered promiscuous mode [ 394.147119] lo: entered allmulticast mode [ 394.227865] Invalid ELF header len 9 22:55:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001900)="f7", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000240)) 22:55:31 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) [ 394.414684] lo: left promiscuous mode [ 394.415150] lo: left allmulticast mode [ 394.434523] lo: entered promiscuous mode [ 394.438491] lo: entered allmulticast mode 22:55:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x8}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) 22:55:31 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) 22:55:31 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(r0, &(0x7f0000000040), r1, &(0x7f0000000140), 0x0, 0x0) 22:55:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {}, 0x2b713bea2488111c, {0x2, 0x0, @empty}}) 22:55:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) 22:55:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 394.629128] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 395.234266] lo: left promiscuous mode [ 395.234719] lo: left allmulticast mode [ 397.624571] lo: entered promiscuous mode [ 397.625525] lo: entered allmulticast mode 22:55:35 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 22:55:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 22:55:35 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) lseek(r0, 0x0, 0x3) 22:55:35 executing program 7: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000640)={0x0, 0x5eb0}, 0x0) 22:55:35 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) 22:55:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) flistxattr(r3, &(0x7f0000000040)=""/32, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000009) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000009) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000009) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xf801, 0xffffffffffffffff, &(0x7f0000000080)="c7c2e2ca430b5a87016613bfd1e771e845a06fb1867c4e51c8197d68411a844f63fa36ef54f1fb52653f5674c5a46bc733c088e39e79f11cc13ecbcc0812ae64952bd20a1ce01e509a575eeedd65cd69cd73129f2d443da32c4bb72a00e6077cb350a6658a0b09884e28432ee2a458fa323fad394062c4900b6ee1fbe25f707fd7bd59a3", 0x84, 0x24, 0x0, 0x0, r5}]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="dd4a0e5d008a91c5430000000000000000000000000000000000e3ffffff0000020009b50000f8000000000173eb543dff5537bb0000000000000001000000000008000000000000797695ffec17cab09532"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000880)) 22:55:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {}, 0x2b713bea2488111c, {0x2, 0x0, @empty}}) [ 397.814163] lo: left promiscuous mode [ 397.814618] lo: left allmulticast mode 22:55:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {}, 0x2b713bea2488111c, {0x2, 0x0, @empty}}) 22:55:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x4000000) 22:55:35 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x40000004, 0xa7, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 22:55:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x7, 0x2}, [@generic="3e749eb091"]}, 0x1c}}, 0x0) [ 398.638436] lo: entered promiscuous mode [ 398.639666] lo: entered allmulticast mode [ 398.666031] lo: left promiscuous mode [ 398.667685] lo: left allmulticast mode [ 398.754049] lo: entered promiscuous mode [ 398.754813] lo: entered allmulticast mode 22:55:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000040)) 22:55:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) 22:55:36 executing program 0: ioperm(0x0, 0x7ff, 0x401) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:55:36 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x40000004, 0xa7, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 22:55:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {}, 0x2b713bea2488111c, {0x2, 0x0, @empty}}) 22:55:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x7, 0x2}, [@generic="3e749eb091"]}, 0x1c}}, 0x0) 22:55:36 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x40000004, 0xa7, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 22:55:36 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x9) 22:55:36 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001a80), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 22:55:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) read(r0, &(0x7f0000000200)=""/79, 0x4f) 22:55:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) open_tree(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0x7f, 0x0, 0x7f, 0x0, 0x8, 0xac100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0xd11aa89bc448b884}, 0x800, 0x1, 0x4, 0x2, 0x1000, 0xc00a, 0xfffc, 0x0, 0x8, 0x0, 0x100000000}, r2, 0x10, 0xffffffffffffffff, 0x8) 22:55:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x7, 0x2}, [@generic="3e749eb091"]}, 0x1c}}, 0x0) 22:55:36 executing program 5: clock_adjtime(0x0, &(0x7f0000000a00)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) 22:55:36 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x9) 22:55:36 executing program 7: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x40000004, 0xa7, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 22:55:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x1e, 0x0, 0x101, 0x0, 0x0, {0x7, 0x2}, [@generic="3e749eb091"]}, 0x1c}}, 0x0) 22:55:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff8000, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:55:43 executing program 5: syz_80211_inject_frame(&(0x7f0000000500)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@data_frame={@qos_no_ht={{@type01={{}, {}, @broadcast, @initial, @broadcast, {0x9, 0x8f}}, {0x1}}, {@type00={{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, {0x0, 0x1, 0x2, 0x1, 0x5}}}, @a_msdu}, 0x34) 22:55:43 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x9) 22:55:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}], 0x1}, 0x0) 22:55:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) open_tree(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0x7f, 0x0, 0x7f, 0x0, 0x8, 0xac100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0xd11aa89bc448b884}, 0x800, 0x1, 0x4, 0x2, 0x1000, 0xc00a, 0xfffc, 0x0, 0x8, 0x0, 0x100000000}, r2, 0x10, 0xffffffffffffffff, 0x8) 22:55:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x7, 0x0, 0x0) 22:55:43 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) [ 406.180743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.202556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.252829] ------------[ cut here ]------------ [ 406.254039] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 406.255585] WARNING: CPU: 0 PID: 14202 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 406.257124] Modules linked in: [ 406.257751] CPU: 0 UID: 0 PID: 14202 Comm: syz-executor.2 Not tainted 6.12.0-rc3-next-20241016 #1 [ 406.259181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 406.261646] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 406.262991] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 406.271693] RSP: 0018:ffff888042caf930 EFLAGS: 00010286 [ 406.275566] RAX: 0000000000000000 RBX: ffff88800bbbdc80 RCX: ffffc90002a04000 [ 406.276817] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 406.278030] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1008595ed7 [ 406.279247] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800dc7f380 [ 406.280484] R13: 0000000000020018 R14: ffff888042cafa10 R15: ffff888042cafa50 22:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getgid() r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 406.281700] FS: 00007f833cc7e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 406.283574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.284606] CR2: 0000000020001000 CR3: 00000000132cc000 CR4: 0000000000350ef0 [ 406.285804] Call Trace: [ 406.286259] 22:55:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 406.286714] ? __warn+0xea/0x370 [ 406.287867] ? __kmem_cache_create_args+0xaf/0x370 [ 406.288762] ? report_bug+0x2f5/0x3f0 [ 406.289508] ? __kmem_cache_create_args+0xaf/0x370 [ 406.290345] ? __kmem_cache_create_args+0xb0/0x370 [ 406.291237] ? handle_bug+0xe5/0x180 [ 406.291948] ? exc_invalid_op+0x35/0x80 [ 406.292704] ? asm_exc_invalid_op+0x1a/0x20 [ 406.293547] ? __warn_printk+0x17f/0x220 [ 406.294271] ? __kmem_cache_create_args+0xaf/0x370 [ 406.295208] p9_client_create+0xde4/0x11a0 [ 406.296032] ? lock_acquire+0x32/0xc0 [ 406.296794] ? __pfx_p9_client_create+0x10/0x10 [ 406.297667] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 406.298628] ? srso_return_thunk+0x5/0x5f [ 406.299871] ? __kasan_kmalloc+0x7f/0x90 [ 406.302587] ? srso_return_thunk+0x5/0x5f [ 406.303394] ? trace_kmalloc+0x24/0xc0 [ 406.304143] ? lockdep_init_map_type+0x2cb/0x7b0 [ 406.305026] ? vfs_get_tree+0x97/0x380 [ 406.305785] ? path_mount+0x13b2/0x1ec0 [ 406.306572] ? srso_return_thunk+0x5/0x5f [ 406.307366] ? __raw_spin_lock_init+0x3a/0x110 [ 406.308247] v9fs_session_init+0x1e0/0x17b0 [ 406.309076] ? srso_return_thunk+0x5/0x5f [ 406.309900] ? lock_acquire+0x32/0xc0 [ 406.310664] ? __pfx_v9fs_session_init+0x10/0x10 [ 406.311544] ? srso_return_thunk+0x5/0x5f [ 406.312326] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 406.313316] ? srso_return_thunk+0x5/0x5f [ 406.314138] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 406.315088] ? srso_return_thunk+0x5/0x5f [ 406.315920] ? __create_object+0x59/0x80 [ 406.316687] ? srso_return_thunk+0x5/0x5f [ 406.317507] ? trace_kmalloc+0x24/0xc0 [ 406.318201] ? srso_return_thunk+0x5/0x5f [ 406.319023] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 406.319931] ? srso_return_thunk+0x5/0x5f [ 406.320750] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 406.321732] ? srso_return_thunk+0x5/0x5f [ 406.322575] v9fs_mount+0xbd/0x9b0 [ 406.323256] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 406.324243] ? __pfx_v9fs_mount+0x10/0x10 [ 406.325055] ? srso_return_thunk+0x5/0x5f [ 406.325875] ? cap_capable+0x1b5/0x220 [ 406.326661] ? __pfx_v9fs_mount+0x10/0x10 [ 406.327402] legacy_get_tree+0x109/0x220 [ 406.328229] vfs_get_tree+0x97/0x380 [ 406.328951] ? srso_return_thunk+0x5/0x5f [ 406.329779] path_mount+0x13b2/0x1ec0 [ 406.330537] ? srso_return_thunk+0x5/0x5f [ 406.331308] ? kmem_cache_free+0x138/0x470 [ 406.332110] ? __pfx_path_mount+0x10/0x10 [ 406.332886] ? getname_flags.part.0+0x1c6/0x550 [ 406.333773] ? srso_return_thunk+0x5/0x5f [ 406.334566] ? putname+0x12a/0x170 [ 406.335253] __x64_sys_mount+0x283/0x300 [ 406.336021] ? __pfx___x64_sys_mount+0x10/0x10 [ 406.336884] do_syscall_64+0xbf/0x1d0 [ 406.337590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.338504] RIP: 0033:0x7f833f708b19 22:55:43 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x9) [ 406.339122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 406.342373] RSP: 002b:00007f833cc7e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.343702] RAX: ffffffffffffffda RBX: 00007f833f81bf60 RCX: 00007f833f708b19 [ 406.344861] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 406.346012] RBP: 00007f833f762f6d R08: 00000000200004c0 R09: 0000000000000000 [ 406.347155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.348311] R13: 00007ffc4e68f56f R14: 00007f833cc7e300 R15: 0000000000022000 [ 406.349529] [ 406.349936] irq event stamp: 4377 [ 406.350530] hardirqs last enabled at (4389): [] __up_console_sem+0x78/0x80 [ 406.352031] hardirqs last disabled at (4400): [] __up_console_sem+0x5d/0x80 [ 406.353492] softirqs last enabled at (4278): [] handle_softirqs+0x50c/0x770 [ 406.354896] softirqs last disabled at (4241): [] irq_exit_rcu+0x94/0xc0 [ 406.356229] ---[ end trace 0000000000000000 ]--- [ 406.479413] ------------[ cut here ]------------ [ 406.480249] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 406.482174] WARNING: CPU: 0 PID: 14206 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 406.483699] Modules linked in: [ 406.484483] CPU: 0 UID: 0 PID: 14206 Comm: syz-executor.3 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 406.486342] Tainted: [W]=WARN [ 406.487127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 406.488611] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 406.489587] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 406.492555] RSP: 0018:ffff8880419b7930 EFLAGS: 00010286 [ 406.493424] RAX: 0000000000000000 RBX: ffff88800b3ab640 RCX: ffffc90003c0d000 [ 406.494751] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 406.496142] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1008336ed7 [ 406.497309] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800dc7f5c0 [ 406.498492] R13: 0000000000020018 R14: ffff8880419b7a10 R15: ffff8880419b7a50 [ 406.499820] FS: 00007f2491ef3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 406.501358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.502581] CR2: 00007f1d4d84c718 CR3: 00000000156c4000 CR4: 0000000000350ef0 [ 406.503976] Call Trace: [ 406.504420] [ 406.505077] ? __warn+0xea/0x370 [ 406.505990] ? __kmem_cache_create_args+0xaf/0x370 [ 406.506887] ? report_bug+0x2f5/0x3f0 [ 406.507663] ? __kmem_cache_create_args+0xaf/0x370 [ 406.508562] ? __kmem_cache_create_args+0xb0/0x370 [ 406.509395] ? handle_bug+0xe5/0x180 [ 406.510109] ? exc_invalid_op+0x35/0x80 [ 406.510856] ? asm_exc_invalid_op+0x1a/0x20 [ 406.511888] ? __warn_printk+0x17f/0x220 [ 406.512869] ? __kmem_cache_create_args+0xaf/0x370 [ 406.513798] p9_client_create+0xde4/0x11a0 [ 406.514622] ? lock_acquire+0x32/0xc0 [ 406.515622] ? __pfx_p9_client_create+0x10/0x10 [ 406.516675] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 406.517647] ? srso_return_thunk+0x5/0x5f [ 406.518694] ? __kasan_kmalloc+0x7f/0x90 [ 406.519694] ? srso_return_thunk+0x5/0x5f [ 406.520722] ? trace_kmalloc+0x24/0xc0 [ 406.521419] ? lockdep_init_map_type+0x2cb/0x7b0 [ 406.522259] ? vfs_get_tree+0x97/0x380 [ 406.522998] ? path_mount+0x13b2/0x1ec0 [ 406.523770] ? srso_return_thunk+0x5/0x5f [ 406.524576] ? __raw_spin_lock_init+0x3a/0x110 [ 406.525639] v9fs_session_init+0x1e0/0x17b0 [ 406.526649] ? srso_return_thunk+0x5/0x5f [ 406.527654] ? lock_acquire+0x32/0xc0 [ 406.528622] ? __pfx_v9fs_session_init+0x10/0x10 [ 406.529664] ? srso_return_thunk+0x5/0x5f [ 406.530487] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 406.531702] ? srso_return_thunk+0x5/0x5f [ 406.532720] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 406.533849] ? srso_return_thunk+0x5/0x5f [ 406.534821] ? __create_object+0x59/0x80 [ 406.535577] ? srso_return_thunk+0x5/0x5f [ 406.536338] ? trace_kmalloc+0x24/0xc0 [ 406.537067] ? srso_return_thunk+0x5/0x5f [ 406.537865] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 406.538740] ? srso_return_thunk+0x5/0x5f [ 406.539562] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 406.540717] ? srso_return_thunk+0x5/0x5f [ 406.541797] v9fs_mount+0xbd/0x9b0 [ 406.542497] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 406.543779] ? __pfx_v9fs_mount+0x10/0x10 [ 406.544800] ? srso_return_thunk+0x5/0x5f [ 406.545792] ? cap_capable+0x1b5/0x220 [ 406.546563] ? __pfx_v9fs_mount+0x10/0x10 [ 406.547548] legacy_get_tree+0x109/0x220 [ 406.548671] vfs_get_tree+0x97/0x380 [ 406.549353] ? srso_return_thunk+0x5/0x5f [ 406.550180] path_mount+0x13b2/0x1ec0 [ 406.550919] ? srso_return_thunk+0x5/0x5f [ 406.551731] ? kmem_cache_free+0x138/0x470 [ 406.552531] ? __pfx_path_mount+0x10/0x10 [ 406.553270] ? getname_flags.part.0+0x1c6/0x550 [ 406.554156] ? srso_return_thunk+0x5/0x5f [ 406.554962] ? putname+0x12a/0x170 [ 406.555756] __x64_sys_mount+0x283/0x300 [ 406.556517] ? __pfx___x64_sys_mount+0x10/0x10 [ 406.557335] do_syscall_64+0xbf/0x1d0 [ 406.558045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.558980] RIP: 0033:0x7f249497db19 [ 406.559657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 406.562404] RSP: 002b:00007f2491ef3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.563700] RAX: ffffffffffffffda RBX: 00007f2494a90f60 RCX: 00007f249497db19 [ 406.564847] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 406.566020] RBP: 00007f24949d7f6d R08: 00000000200004c0 R09: 0000000000000000 [ 406.567167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.568330] R13: 00007ffcb57c778f R14: 00007f2491ef3300 R15: 0000000000022000 [ 406.569549] [ 406.569952] irq event stamp: 2919 [ 406.570547] hardirqs last enabled at (2931): [] __up_console_sem+0x78/0x80 [ 406.575693] hardirqs last disabled at (3402): [] __up_console_sem+0x5d/0x80 [ 406.579946] softirqs last enabled at (3836): [] handle_softirqs+0x50c/0x770 [ 406.581383] softirqs last disabled at (3849): [] irq_exit_rcu+0x94/0xc0 [ 406.582750] ---[ end trace 0000000000000000 ]--- 22:55:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) open_tree(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0x7f, 0x0, 0x7f, 0x0, 0x8, 0xac100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0xd11aa89bc448b884}, 0x800, 0x1, 0x4, 0x2, 0x1000, 0xc00a, 0xfffc, 0x0, 0x8, 0x0, 0x100000000}, r2, 0x10, 0xffffffffffffffff, 0x8) 22:55:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x8a) r3 = fsmount(r1, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x103) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) 22:55:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280), 0x8000) sendfile(r1, r2, 0x0, 0x10000027f) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000200)='attr/fscreate\x00') fsopen(&(0x7f0000000340)='tmpfs\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) tee(0xffffffffffffffff, r4, 0x8, 0x9) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat(0xffffffffffffffff, &(0x7f00000007c0)='./file3\x00', 0x43042, 0x0) 22:55:44 executing program 6: setreuid(0x0, 0xee01) timerfd_create(0x9, 0x0) [ 406.676080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 22:55:44 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:44 executing program 5: shmctl$SHM_INFO(0x0, 0x3, &(0x7f0000000000)=""/76) 22:55:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="24000000100001"], 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 22:55:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) [ 407.094895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 407.109293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 407.174806] syz-executor.4: attempt to access beyond end of device [ 407.174806] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 407.178954] FAT-fs (loop4): unable to read boot sector 22:55:44 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) 22:55:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xe59d, 0x5}, 0x0, 0x54ec, 0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2c2) shmctl$IPC_RMID(0x0, 0x8000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040), 0x4) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000001800000031a0484f5f71fd62748870e9323dd817a2133e8ed98ae3", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) tkill(0x0, 0x7) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2284, &(0x7f0000002340)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 407.272085] ------------[ cut here ]------------ [ 407.272802] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 407.273991] WARNING: CPU: 0 PID: 14252 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 407.275255] Modules linked in: [ 407.275307] CPU: 0 UID: 0 PID: 14252 Comm: syz-executor.2 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 407.275381] Tainted: [W]=WARN [ 407.275400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 407.275460] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 407.275535] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 407.275588] RSP: 0018:ffff888040f97930 EFLAGS: 00010286 [ 407.275632] RAX: 0000000000000000 RBX: ffff88800b3ab780 RCX: ffffc90002a04000 [ 407.275670] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 407.275707] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10081f2ed7 [ 407.275743] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888009c59140 [ 407.275780] R13: 0000000000020018 R14: ffff888040f97a10 R15: ffff888040f97a50 [ 407.275820] FS: 00007f833cc7e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 407.275871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.275911] CR2: 0000000020001000 CR3: 00000000132cc000 CR4: 0000000000350ef0 [ 407.275948] Call Trace: [ 407.275963] [ 407.275983] ? __warn+0xea/0x370 [ 407.276063] ? __kmem_cache_create_args+0xaf/0x370 [ 407.276137] ? report_bug+0x2f5/0x3f0 [ 407.276222] ? __kmem_cache_create_args+0xaf/0x370 [ 407.276293] ? __kmem_cache_create_args+0xb0/0x370 [ 407.276362] ? handle_bug+0xe5/0x180 [ 407.276426] ? exc_invalid_op+0x35/0x80 [ 407.276520] ? asm_exc_invalid_op+0x1a/0x20 [ 407.276621] ? __warn_printk+0x17f/0x220 [ 407.298131] ? __kmem_cache_create_args+0xaf/0x370 [ 407.298742] p9_client_create+0xde4/0x11a0 [ 407.299260] ? lock_acquire+0x32/0xc0 [ 407.299773] ? __pfx_p9_client_create+0x10/0x10 [ 407.300308] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 407.300954] ? srso_return_thunk+0x5/0x5f [ 407.301502] ? __kasan_kmalloc+0x7f/0x90 [ 407.301999] ? srso_return_thunk+0x5/0x5f [ 407.302533] ? trace_kmalloc+0x24/0xc0 [ 407.302994] ? lockdep_init_map_type+0x2cb/0x7b0 [ 407.303564] ? vfs_get_tree+0x97/0x380 [ 407.304028] ? path_mount+0x13b2/0x1ec0 [ 407.304536] ? srso_return_thunk+0x5/0x5f [ 407.305045] ? __raw_spin_lock_init+0x3a/0x110 [ 407.305612] v9fs_session_init+0x1e0/0x17b0 [ 407.306131] ? srso_return_thunk+0x5/0x5f [ 407.306675] ? lock_acquire+0x32/0xc0 [ 407.307150] ? __pfx_v9fs_session_init+0x10/0x10 [ 407.307721] ? srso_return_thunk+0x5/0x5f [ 407.308241] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 407.308888] ? srso_return_thunk+0x5/0x5f [ 407.309392] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 407.309995] ? srso_return_thunk+0x5/0x5f [ 407.310525] ? __create_object+0x59/0x80 [ 407.310987] ? srso_return_thunk+0x5/0x5f [ 407.311520] ? trace_kmalloc+0x24/0xc0 [ 407.311962] ? srso_return_thunk+0x5/0x5f [ 407.312484] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 407.313024] ? srso_return_thunk+0x5/0x5f [ 407.313547] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 407.314137] ? srso_return_thunk+0x5/0x5f [ 407.314671] v9fs_mount+0xbd/0x9b0 [ 407.315099] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 407.315731] ? __pfx_v9fs_mount+0x10/0x10 [ 407.316214] ? srso_return_thunk+0x5/0x5f [ 407.316736] ? cap_capable+0x1b5/0x220 [ 407.317215] ? __pfx_v9fs_mount+0x10/0x10 [ 407.317738] legacy_get_tree+0x109/0x220 [ 407.318243] vfs_get_tree+0x97/0x380 [ 407.318722] ? srso_return_thunk+0x5/0x5f [ 407.319237] path_mount+0x13b2/0x1ec0 [ 407.319745] ? srso_return_thunk+0x5/0x5f [ 407.320249] ? kmem_cache_free+0x138/0x470 [ 407.320783] ? __pfx_path_mount+0x10/0x10 [ 407.321294] ? getname_flags.part.0+0x1c6/0x550 [ 407.321893] ? srso_return_thunk+0x5/0x5f [ 407.322401] ? putname+0x12a/0x170 [ 407.322888] __x64_sys_mount+0x283/0x300 [ 407.323381] ? __pfx___x64_sys_mount+0x10/0x10 [ 407.323959] do_syscall_64+0xbf/0x1d0 [ 407.324401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.325092] RIP: 0033:0x7f833f708b19 [ 407.325607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 407.327542] RSP: 002b:00007f833cc7e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.328339] RAX: ffffffffffffffda RBX: 00007f833f81bf60 RCX: 00007f833f708b19 [ 407.329114] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 407.329880] RBP: 00007f833f762f6d R08: 00000000200004c0 R09: 0000000000000000 [ 407.330642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.331387] R13: 00007ffc4e68f56f R14: 00007f833cc7e300 R15: 0000000000022000 [ 407.332184] [ 407.332482] irq event stamp: 3941 [ 407.332852] hardirqs last enabled at (3951): [] __up_console_sem+0x78/0x80 [ 407.333796] hardirqs last disabled at (3962): [] __up_console_sem+0x5d/0x80 [ 407.334738] softirqs last enabled at (3878): [] handle_softirqs+0x50c/0x770 [ 407.335669] softirqs last disabled at (3873): [] irq_exit_rcu+0x94/0xc0 [ 407.336541] ---[ end trace 0000000000000000 ]--- [ 407.424231] syz-executor.4: attempt to access beyond end of device [ 407.424231] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 407.430497] FAT-fs (loop4): unable to read boot sector 22:55:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) open_tree(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0x7f, 0x0, 0x7f, 0x0, 0x8, 0xac100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0xd11aa89bc448b884}, 0x800, 0x1, 0x4, 0x2, 0x1000, 0xc00a, 0xfffc, 0x0, 0x8, 0x0, 0x100000000}, r2, 0x10, 0xffffffffffffffff, 0x8) 22:55:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:46 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x78, r2}) 22:55:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x8a) r3 = fsmount(r1, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x103) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) 22:55:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f00000002c0)) 22:55:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280), 0x8000) sendfile(r1, r2, 0x0, 0x10000027f) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000200)='attr/fscreate\x00') fsopen(&(0x7f0000000340)='tmpfs\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) tee(0xffffffffffffffff, r4, 0x8, 0x9) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat(0xffffffffffffffff, &(0x7f00000007c0)='./file3\x00', 0x43042, 0x0) 22:55:46 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) 22:55:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb1}, 0x1c) r3 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c6673757562302d323000622d376538342d39e365332d00333663000032002c00000000000000000000d6e951519f72211c99ee111f74e62e849c4a0000044000000000000f9e72adf889ec01e90624a194e5dc693a53dad758d13f60dc99ecccf8c2f2aea38e286eda282802ba5d35efb3bc7ff5a43ae7baa71d1be588ca3fc286062d591c88245ae78c392e2612b055a2211c9ffdac10cff9f68ef29cd39807e76109a5a3721654f852413349a14b8a0f8d58be7d1a79df5c6e035b491a64240ead0a6c3032246e00"/222]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1, 0x400) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', r5, &(0x7f00000006c0)='./file1\x00', 0x12) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, 0x0, r4}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x88}, {0x4, 0x8, 0x6, 0x2fb, 0x80000000, 0x69a61580, 0x1ff, 0x2}, {0x9b9, 0xca5, 0xfffffffffffffff7, 0xdd30}, 0x10000, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@local, 0x34ff, 0x1, 0x2, 0x81, 0x6, 0x4, 0xfffffffc}}, 0xe8) [ 409.621721] ------------[ cut here ]------------ [ 409.622245] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 409.623292] WARNING: CPU: 0 PID: 14277 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 409.624375] Modules linked in: [ 409.624869] CPU: 0 UID: 0 PID: 14277 Comm: syz-executor.7 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 409.626044] Tainted: [W]=WARN [ 409.626382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.627305] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 409.628023] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 409.629880] RSP: 0018:ffff88803fa2f930 EFLAGS: 00010286 [ 409.630538] RAX: 0000000000000000 RBX: ffff88800b3ab8c0 RCX: ffffc90003208000 [ 409.631226] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 409.631981] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1007f45ed7 [ 409.632705] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800dcd8e80 [ 409.633339] R13: 0000000000020018 R14: ffff88803fa2fa10 R15: ffff88803fa2fa50 [ 409.634010] FS: 00007fcb1b375700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 409.634772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.635360] CR2: 00007f358a3c2545 CR3: 0000000015b32000 CR4: 0000000000350ef0 [ 409.636089] Call Trace: [ 409.636366] [ 409.636643] ? __warn+0xea/0x370 [ 409.637038] ? __kmem_cache_create_args+0xaf/0x370 [ 409.637605] ? report_bug+0x2f5/0x3f0 [ 409.638037] ? __kmem_cache_create_args+0xaf/0x370 [ 409.638601] ? __kmem_cache_create_args+0xb0/0x370 [ 409.639128] ? handle_bug+0xe5/0x180 [ 409.639578] ? exc_invalid_op+0x35/0x80 [ 409.640016] ? asm_exc_invalid_op+0x1a/0x20 [ 409.640545] ? __warn_printk+0x17f/0x220 [ 409.641000] ? __kmem_cache_create_args+0xaf/0x370 [ 409.641585] p9_client_create+0xde4/0x11a0 [ 409.642056] ? lock_acquire+0x32/0xc0 [ 409.642532] ? __pfx_p9_client_create+0x10/0x10 [ 409.643042] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 409.645717] ? srso_return_thunk+0x5/0x5f [ 409.646195] ? __kasan_kmalloc+0x7f/0x90 [ 409.648300] ? srso_return_thunk+0x5/0x5f [ 409.648802] ? trace_kmalloc+0x24/0xc0 [ 409.649223] ? lockdep_init_map_type+0x2cb/0x7b0 [ 409.649750] ? vfs_get_tree+0x97/0x380 [ 409.650172] ? path_mount+0x13b2/0x1ec0 [ 409.650653] ? srso_return_thunk+0x5/0x5f [ 409.651124] ? __raw_spin_lock_init+0x3a/0x110 [ 409.651661] v9fs_session_init+0x1e0/0x17b0 [ 409.652136] ? srso_return_thunk+0x5/0x5f [ 409.652641] ? lock_acquire+0x32/0xc0 [ 409.653082] ? __pfx_v9fs_session_init+0x10/0x10 [ 409.653612] ? srso_return_thunk+0x5/0x5f [ 409.654088] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 409.654694] ? srso_return_thunk+0x5/0x5f [ 409.655187] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.655770] ? srso_return_thunk+0x5/0x5f [ 409.656255] ? __create_object+0x59/0x80 [ 409.656722] ? srso_return_thunk+0x5/0x5f [ 409.657185] ? trace_kmalloc+0x24/0xc0 [ 409.657630] ? srso_return_thunk+0x5/0x5f [ 409.658087] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 409.658632] ? srso_return_thunk+0x5/0x5f [ 409.659094] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 409.659691] ? srso_return_thunk+0x5/0x5f [ 409.660172] v9fs_mount+0xbd/0x9b0 [ 409.660601] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 409.661168] ? __pfx_v9fs_mount+0x10/0x10 [ 409.661658] ? srso_return_thunk+0x5/0x5f [ 409.662122] ? cap_capable+0x1b5/0x220 [ 409.662588] ? __pfx_v9fs_mount+0x10/0x10 [ 409.663033] legacy_get_tree+0x109/0x220 [ 409.663546] vfs_get_tree+0x97/0x380 [ 409.663957] ? srso_return_thunk+0x5/0x5f [ 409.664471] path_mount+0x13b2/0x1ec0 [ 409.664898] ? srso_return_thunk+0x5/0x5f [ 409.665367] ? kmem_cache_free+0x138/0x470 [ 409.665866] ? __pfx_path_mount+0x10/0x10 [ 409.666325] ? getname_flags.part.0+0x1c6/0x550 [ 409.666880] ? srso_return_thunk+0x5/0x5f [ 409.667355] ? putname+0x12a/0x170 [ 409.667801] __x64_sys_mount+0x283/0x300 [ 409.668238] ? __pfx___x64_sys_mount+0x10/0x10 [ 409.668790] do_syscall_64+0xbf/0x1d0 [ 409.669202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.669791] RIP: 0033:0x7fcb1ddffb19 [ 409.670183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.671929] RSP: 002b:00007fcb1b375188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.672711] RAX: ffffffffffffffda RBX: 00007fcb1df12f60 RCX: 00007fcb1ddffb19 [ 409.673503] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 409.674315] RBP: 00007fcb1de59f6d R08: 00000000200004c0 R09: 0000000000000000 [ 409.675031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.675757] R13: 00007fff22b6544f R14: 00007fcb1b375300 R15: 0000000000022000 [ 409.676509] [ 409.676767] irq event stamp: 3615 [ 409.677118] hardirqs last enabled at (3625): [] __up_console_sem+0x78/0x80 [ 409.677987] hardirqs last disabled at (3636): [] __up_console_sem+0x5d/0x80 [ 409.678854] softirqs last enabled at (3008): [] handle_softirqs+0x50c/0x770 [ 409.679724] softirqs last disabled at (2571): [] irq_exit_rcu+0x94/0xc0 [ 409.680547] ---[ end trace 0000000000000000 ]--- [ 409.702059] syz-executor.4: attempt to access beyond end of device [ 409.702059] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 409.722496] FAT-fs (loop4): unable to read boot sector 22:55:47 executing program 3: get_mempolicy(0x0, &(0x7f0000000180), 0x800, &(0x7f0000ffc000/0x3000)=nil, 0x3) 22:55:47 executing program 6: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000020000000b"], 0x81020000) 22:55:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:55:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x8a) r3 = fsmount(r1, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x103) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) 22:55:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0xc5, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 22:55:47 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) [ 410.315341] syz-executor.4: attempt to access beyond end of device [ 410.315341] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 410.331326] FAT-fs (loop4): unable to read boot sector 22:55:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0xfffffe01, 0x800}, 0x1c) 22:55:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') tee(r0, r1, 0x1000, 0x0) 22:55:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x2d, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0xffffffff00000000}}]}, 0x24}], 0x1}, 0x0) 22:55:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x48, 0x0, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf000}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic='W']}]}, 0x1c}}, 0x0) [ 411.473407] tmpfs: Bad value for 'mpol' [ 411.528603] tmpfs: Bad value for 'mpol' 22:55:48 executing program 6: r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x2) getdents64(r0, 0x0, 0x0) 22:55:49 executing program 7: recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/80, 0x50, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "f0954c846c2c39f1ee62b41010ce3fc32b86c6cccc993707eb21279314b6a05152bc409a43948252cbee45445bd5ec675ba4af7b4611fdfc63b99dfa0f4f6b56", 0x3d}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffc) 22:55:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280), 0x8000) sendfile(r1, r2, 0x0, 0x10000027f) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000200)='attr/fscreate\x00') fsopen(&(0x7f0000000340)='tmpfs\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) tee(0xffffffffffffffff, r4, 0x8, 0x9) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat(0xffffffffffffffff, &(0x7f00000007c0)='./file3\x00', 0x43042, 0x0) [ 412.012676] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 22:55:49 executing program 7: recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/80, 0x50, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "f0954c846c2c39f1ee62b41010ce3fc32b86c6cccc993707eb21279314b6a05152bc409a43948252cbee45445bd5ec675ba4af7b4611fdfc63b99dfa0f4f6b56", 0x3d}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffc) 22:55:49 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) ftruncate(r0, 0x2000000) lseek(r0, 0x0, 0x3) 22:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) 22:55:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pread64(r1, &(0x7f00000002c0)=""/210, 0xd2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x890001, &(0x7f00000001c0)=ANY=[@ANYRES32]) 22:55:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x8a) r3 = fsmount(r1, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x103) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) 22:55:49 executing program 5: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x4) 22:55:49 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 22:55:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='mpol=interleave,huge']) 22:55:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x560c, 0x0) [ 412.129064] tmpfs: Bad value for 'huge' [ 412.130412] tmpfs: Bad value for 'huge' 22:55:49 executing program 3: ioperm(0x0, 0x6d1f, 0x8) clock_gettime(0x0, &(0x7f00000001c0)) 22:55:49 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@remote, @mcast2, @remote}) 22:55:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000ac0)='ext3\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={[{@journal_dev}, {@abort}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}) [ 412.309984] EXT4-fs: quotafile must be on filesystem root [ 412.311407] EXT4-fs: quotafile must be on filesystem root 22:55:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000140)) 22:55:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x290) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) r3 = fork() ptrace(0x10, r3) ptrace(0x11, r3) [ 412.641980] syz-executor.4: attempt to access beyond end of device [ 412.641980] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 412.649525] FAT-fs (loop4): unable to read boot sector 22:55:50 executing program 6: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000001300)="cd", 0x80000, r0) [ 413.285842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.288683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 22:55:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280), 0x8000) sendfile(r1, r2, 0x0, 0x10000027f) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000200)='attr/fscreate\x00') fsopen(&(0x7f0000000340)='tmpfs\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) tee(0xffffffffffffffff, r4, 0x8, 0x9) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat(0xffffffffffffffff, &(0x7f00000007c0)='./file3\x00', 0x43042, 0x0) 22:55:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x127c, &(0x7f0000002340)) 22:55:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x290) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) r3 = fork() ptrace(0x10, r3) ptrace(0x11, r3) 22:55:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) dup2(r1, r0) 22:55:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001100)={0x3, 0x0, 0x8, {}, 0x7fffffff}) 22:55:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pread64(r1, &(0x7f00000002c0)=""/210, 0xd2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x890001, &(0x7f00000001c0)=ANY=[@ANYRES32]) 22:55:50 executing program 7: recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/80, 0x50, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "f0954c846c2c39f1ee62b41010ce3fc32b86c6cccc993707eb21279314b6a05152bc409a43948252cbee45445bd5ec675ba4af7b4611fdfc63b99dfa0f4f6b56", 0x3d}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffc) 22:55:50 executing program 6: iopl(0x3) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 22:55:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001100)={0x3, 0x0, 0x8, {}, 0x7fffffff}) 22:55:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x8800) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000280)=""/219, 0xdb}], 0x1) 22:55:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9204, 0x0) 22:55:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x32, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 22:55:51 executing program 7: recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/80, 0x50, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "f0954c846c2c39f1ee62b41010ce3fc32b86c6cccc993707eb21279314b6a05152bc409a43948252cbee45445bd5ec675ba4af7b4611fdfc63b99dfa0f4f6b56", 0x3d}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffc) 22:55:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x290) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) r3 = fork() ptrace(0x10, r3) ptrace(0x11, r3) 22:55:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001100)={0x3, 0x0, 0x8, {}, 0x7fffffff}) 22:55:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67, 0x20000000000006}}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) [ 414.426083] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.601093] syz-executor.5 (14421) used greatest stack depth: 23424 bytes left 22:55:51 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046629, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="1f", 0x1}], 0x1}}, {{0xfffffffffffffffd, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="c3", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001100)={0x3, 0x0, 0x8, {}, 0x7fffffff}) 22:55:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 22:55:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67, 0x20000000000006}}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) 22:55:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pread64(r1, &(0x7f00000002c0)=""/210, 0xd2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x890001, &(0x7f00000001c0)=ANY=[@ANYRES32]) 22:55:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9204, 0x0) 22:55:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x290) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) r3 = fork() ptrace(0x10, r3) ptrace(0x11, r3) 22:55:51 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0xfffffdef}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x97b) 22:55:52 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0xfffffdef}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x97b) 22:55:53 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat2(r0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x40000, 0x80, 0x1}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40286608, 0x0) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x40086602, &(0x7f0000001500)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x120000) preadv(r4, &(0x7f0000001400)=[{&(0x7f0000001480)=""/4111, 0x7ffff000}], 0x1, 0x3700, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xf9, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x800, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0x4, 0x3, 0x7, 0x0, 0x400, 0x400, 0x1, 0x0, 0xfffffffe, 0x0, 0xd081}, r3, 0x2, r4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 22:55:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)="03ab", 0x2}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18}}], 0x2, 0x0) 22:55:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67, 0x20000000000006}}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) 22:55:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pread64(r1, &(0x7f00000002c0)=""/210, 0xd2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000080), 0x890001, &(0x7f00000001c0)=ANY=[@ANYRES32]) 22:55:53 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0xfffffdef}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x97b) 22:55:53 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) recvmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001080)) 22:55:53 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9204, 0x0) 22:55:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67, 0x20000000000006}}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) 22:55:53 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9204, 0x0) 22:55:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 22:55:53 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0xfffffdef}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x97b) 22:55:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) VM DIAGNOSIS: 22:55:43 Registers: info registers vcpu 0 RAX=ffffffff867b3d31 RBX=0000000000000001 RCX=ffffffff867b3d2c RDX=0000000000000000 RSI=1ffffffff0cf67a6 RDI=ffffffff8646a770 RBP=ffff88806ce095f0 RSP=ffff88806ce09528 R8 =ffffffff867b3d2c R9 =ffff88806ce095d8 R10=000000000003c001 R11=000000000000e98a R12=ffff88806ce095f8 R13=ffff88806ce095e0 R14=ffff88806ce095d9 R15=ffff88806ce09598 RIP=ffffffff81149321 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f833cc7e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=00000000132cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffea0000667080 RCX=ffffffff817e9606 RDX=fffff940000cce17 RSI=0000000000000004 RDI=ffffea00006670b0 RBP=0000000000000001 RSP=ffff88801c107658 R8 =0000000000000001 R9 =fffff940000cce16 R10=ffffea00006670b3 R11=00000000eac0c6e6 R12=ffffea0000667080 R13=0000000000000000 R14=ffff88800d2f7380 R15=ffff88801c107ad0 RIP=ffffffff817e960d RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffed1024c18 CR3=000000003be4c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000