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", 0x1000}], 0x6, &(0x7f0000002500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @broadcast}}}], 0x38}}, {{&(0x7f0000002540)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002580)="dccba6e8b1a5f00ef00191e03f866cbfe53454826d8149229e8fcc4397318591d9cdfc8e74fb1c9ad4da24206c9347b2e77fd8428685941898c037d65e1fca18314cc0d1503a2f9360da279ea0e5e5a511d3c34d3743bab1135e5025c4bfffcf33ba6694a706db7490a0a837fccd5b92cd94209044709db785fb9c689c2b562725cd54ae6e478e154089875b7ed6b24a", 0x90}], 0x1, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010102}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x4, "239e"}, {0x7, 0x5, "ebebee"}]}, @timestamp_addr={0x44, 0x24, 0xa9, 0x1, 0x2, [{@multicast1, 0x870}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x22}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0xd8}}, {{&(0x7f00000027c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002800), 0x0, &(0x7f0000002840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @end, @end, @generic={0x7, 0x12, "cb6bb57a51c5023df9a7c3408c49ea95"}, @timestamp={0x44, 0x8, 0xeb, 0x0, 0x4, [0x3]}, @cipso={0x86, 0x23, 0x3, [{0x7, 0xfffffffffffffeeb, "fe42a9be6c3f6dacbf205c47"}, {0x0, 0x5, "acbf64"}, {0x0, 0xa, "3766fea6ee649381"}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x9, [{@multicast1, 0xcd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@local, 0x10000}, {@rand_addr=0x64010101, 0x80000001}, {@empty, 0x1}, {@rand_addr=0x64010100, 0xbfcb}, {@remote, 0xff}]}]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)="eb1d5c2ec46eab28cc711e71568caad731d5863b8fdb20675f41480e672c4602dab86df24bac016887c188bf6bbde56a360511195c38bf7a2ba5e47c7779ba968a351e760797a0a5e4f1807bb2d05641e9cb2e7bca43b220fc4de53b0ff8e6962eff", 0x62}, {&(0x7f0000002980)="9b0fd9b3a7952e0fd06915917d19aabb66f96e8ab31ca96c7e7fcbb18a348dee1efeba8d7f84b22fa9dd9c513c733dc558411991cd2bb3a3f9288a631466dc91c558255de846828b6ebe8426cff6289326e27161f46f3c0d6d8ebfa92a5410d824682b", 0x63}], 0x2, &(0x7f0000002a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x18}}], 0x4, 0x80) 02:03:45 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000919000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000a8e000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ea0000/0x3000)=nil, 0x3000) mlock(&(0x7f0000cb6000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f25000/0x3000)=nil, 0x3000) mlock(&(0x7f0000db0000/0x3000)=nil, 0x3000) mlock(&(0x7f0000c0e000/0x3000)=nil, 0x3000) mlock(&(0x7f0000e73000/0x4000)=nil, 0x4000) mlock(&(0x7f00007be000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000dec000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 02:03:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) 02:03:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8) 02:03:45 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000823000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 02:03:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r3, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x7800) vmsplice(r0, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) 02:03:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x1) r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) symlinkat(&(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file1\x00') [ 162.741907] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 162.748284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4103 comm=syz-executor.0 [ 162.753547] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 162.784912] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 162.806548] netlink: 'syz-executor.7': attribute type 8 has an invalid length. [ 162.818994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4114 comm=syz-executor.7 [ 162.823291] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:03:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) 02:03:45 executing program 6: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) syz_io_uring_setup(0x22f0, &(0x7f0000000c80)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 02:03:45 executing program 4: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000400)=""/31, 0x1f}], 0x2, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="101724d30f7d37b4d256395140e421cf5121f2f7af5d2f006e239af13dfb7fcebac67f2c40d6a1cd865ca7", 0x2b, 0x9}, {&(0x7f0000000100)="c1432b29873db37a8adf749d09c3b790dbcd5e9e41f21fdc98cbf79b9451bbd301cdd50de5123f2d638c93f2533f7d3e4d61d1c3087c55dd2c175bf9055d957b71b2e4e5ffccd137d7a9d39434ed9a44f513e2ed3ca84b5d8cb28289787c5dec7e2da051f7379859f06b5619f5b37e3f38318fefc71d828b9735d60b03117ea2ce32253f29cf3b08a4a0b740637154376fa3ae4306e39704676f68305bcc111a12822b1a9b27e65f179fd846ff14152d54da414a344b5cf6416a658f98f107a5231c5ca520396e94a667bde4d4", 0xcd, 0xd1}], 0x10000, &(0x7f0000000640)={[{@huge_within_size}, {@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x3f}}, {@huge_always}, {@size={'size', 0x3d, [0x36, 0x2d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x70, 0x67, 0x37]}}], [{@measure}, {@uid_gt={'uid>', r2}}]}) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 162.942290] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:03:45 executing program 2: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x140241, 0x0) io_submit(r0, 0x0, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='3', 0x1}]) [ 163.022999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4114 comm=syz-executor.7 02:03:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) [ 163.151326] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 163.159642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4103 comm=syz-executor.0 [ 163.195017] PM: Enabling pm_trace changes system date and time during resume. [ 163.195017] PM: Correct system time has to be restored manually after resume. 02:03:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3080, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x12e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8, 0x3a, 0x0, @empty, @local, {[@hopopts={0x16, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0xf9, 0x40, [0x8, 0x4, 0xfffffffffffffffe, 0x2, 0x3]}}]}, @routing={0x6c, 0xa, 0x0, 0x0, 0x0, [@private0, @remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x88, 0xa, 0x0, 0xfd, 0x0, [@remote, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}], @echo_request}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x20, 0x7, 0x7, 0x8, 0x0, 0x8, 0x202, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x6}, 0x4, 0xfff, 0x0, 0x4, 0x9, 0x9, 0x5d2, 0x0, 0x40, 0x0, 0x3000}, r0, 0x10, r1, 0x8) 02:03:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000340)=[{&(0x7f0000010000)="200000008000000006000000600000000f00000000000000010000000100000000400000004000000200000000000000d2f4655f467cb96c53ef", 0x3a, 0x2}, {&(0x7f0000010400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}, {&(0x7f0000000240)="bcf0a0c6513eec77b0b6e1e4e063c8e60ad7ff6413eef8b624f1cdbce2b4ff7f0000ce853f3fe99061f94ccfdc9e3790781c00004b98abb20f137078e6443a72b59449205950bc4482f29cdd7ad94971a575529e3d7e6e7643b4f54e18104cb5a8aa1d1079196d2cfad25771499581ed698c2d85a893418943c3b68111055eef5f828e1f4ea93f95efce49a0ef731c2d7920aa348fd6752300"/165, 0xa5, 0xfff}, {&(0x7f00000000c0)="6c3222af7b6d2830eb3aa231", 0xc, 0xffffffffffffff51}, {&(0x7f00000001c0)="a2df0dff2412f7f54481042c952a507706a795bb604eda2096b412a32a3864d6975e9261cd7dc729bb2959193817456e4c2d6e85631351ae670cafcd869292e3b448b16e8e65d9e6109236b9c5e9894126fa2ccc8aa57685d7db1010ed2a71baebcb8c46c3a4faba649fc0f2bf304087e3", 0x71, 0xb}, {&(0x7f0000000400)="4ac336c07dc78616fefc9ce0d28ffa32f4bbcfc947997130081bb51648ac9a0d7105428356b0e6dbf4c1ce0091c4773751c07c7cc75ec1f70e976a176e38eae812b068e92e34cb8514892dee52863692b9fd4a4e848005ba16a1bffccab88cc08c5527d991bba712e649e9e80c082160b2ab8e3167a8d53c69f5361f2c30c1baae6808c95ae3a59b677dbe7f12aec3e7da9f736596dc2d6f5f4b67798a8592ea287f776eb072c04b01a027c034d3981670458762bd89245d70dfd40ac20831e7c1d7f0bce369460345193dd24c07c85ee6f11414bdb5a12dfc6d4a01669e945674d6fb44c08ba737fdf28e739a", 0xed, 0x3}], 0x21c000, &(0x7f0000013c00)=ANY=[]) 02:03:46 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="0f677fd759ac"}, 0x14) [ 163.365494] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 163.384828] loop6: detected capacity change from 0 to 16383 02:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="880052bd049b", 0x6}, {&(0x7f00000001c0)="51afcaccdd79e024cdf983f34cc6cfff7518aecb5d39fb0e33f7174003ae08b5ee21a4050c47abca26c95c08f3c28e4767053f862e63b44e8e34390478c141571ab02cafefad5374a22319b70a6307f2b969762e509f28bfc7fc8a0a0ca7f592174f5b6830c59b0efc889e92f11d089e38573acaad38c6c3856b7e2f3008ace9f696d57c5be1f9e24b0480f7976149d5cc50a75e4a99731b92b1c52fefacb208007287914bc3ce6163dc0cf740e1d9df", 0xb0}, {&(0x7f0000000280)="37e12ef10cd816395bc25e3ca671c58cbb4108a3fb6c549bb1fe0ec210dab6651def245119be350888b57da0d3f47811d337ae943e3ce3af7ca43469ab338d4fbd05576cbdc284cc10e6c5e0361df500c95a2ee8a700869362fb497dc6e7aca0626262d5c246397c23557acc8597ef3c522c407821504d6deae571ef86fa2a65072f6f1baebfd9f0167114e2bc65dd0269fd912c6ac6a4aca254", 0x9a}, {&(0x7f0000000340)="fc45882d5ecb5f4159be6e219de3bbdfdd8f21aa8da21ad4efe4cb37f5e69c70b148b29f962e99b4bb175ebce8adeedb432fad5815da47336daae463813c0320cd92827fbe58e92d4bed19bc94d335c7affe2115d3964ce32453ab5f54774bbd30a3cfcf33f3475220df499da96c83acc3d7f7f0b3441591906be6291f25c04350e583804206d31b225d4c5e9bff41957a70f27ba12d82d6716240d1ec6892ea718ea342161898298d462d0b974aab2078f8697dde2015b82e462fce3a3c693d298b7da5702e95f557d9c0283d785226921919f62382bc3594b183f3c9443f044231f49b1242faf0158e", 0xea}], 0x4, 0xf1b, 0x2, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100010300", @ANYRES32=r1, @ANYBLOB="080026008a0900000800270003000000"], 0x2c}}, 0x0) r5 = signalfd4(r2, &(0x7f0000004a40)={[0x4]}, 0x8, 0x100000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r7, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000004b40)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)={0x3c, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x403}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) 02:03:46 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x4000, 0x0) r2 = geteuid() r3 = getegid() r4 = pidfd_open(0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)) r6 = inotify_init() r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000000c0)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000780)=0x0) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="a0020000180000012bbd8a00fd0900000001428008007600", @ANYRES32, @ANYBLOB="08001500", @ANYRES32=0x0, @ANYBLOB="08004e00e000000205001e000000000055435abe3887d598a4a37fac103a85a663b9abca34ce9bca96430ed0559b472b47ce102d2dcdb6b6aedb58558dd02e524575e9efa7153e648ecbd579c9510eea2f28bcf37b1e68a1939e951b289b3706dd12c7e278f3d3b6105b8d39e7f9f1fede4fea26b75d7398747ba982be3381649020b3d8277459bf18ca34d2978923c109aa844cfeb7a302ea435b251db83a858c005a5892def0f843d8e7463df205b7ce2613dead6b58cb1be29894c95229148fcb3b8725f55e94c3557e5597b22f3ea22d8dbf7dd4e81c74b5cd08000e00", @ANYRES32, @ANYBLOB="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"], 0x2a0}], 0x1, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r3}}}, @rights={{0x34, 0x1, 0x1, [r4, r0, r5, r6, r0, r0, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x170, 0xcbc00a8a32a23a7b}, 0x4000) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x5}], {0x4, 0x4}, [{}, {0x8, 0x6, 0xee01}, {0x8, 0x4}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4, r3}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="024b593ab59aaca0bb8a000000010000000000000004000000000000000000009a906dbdcb12f6ea15eaec8c0520691d5c8190afafcc4c6c380c5a9884c61f3af08fc850ebcd6bf01a88b7a34db9467572a3cbd23694744d2b880a6be1b6a2d32765343f4d21ea54f9a942647c50d2ff631a17630d461ee41f146a306717559ea3331d7d30b1428bcba1c50494"], 0x24, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1, 0x0, &(0x7f0000000280), 0x40, &(0x7f0000000300)={[{'tmpfs\x00'}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) 02:03:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) [ 163.452072] loop6: detected capacity change from 0 to 16383 02:03:46 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x9, 0x3f, 0x9, 0x0, 0x11da000, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xaa, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x4802, 0x1000000, 0x1ff, 0x6, 0x8, 0x9, 0x4, 0x0, 0xb, 0x0, 0x80}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000f6ff00002e2f66696c5e3000"]) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x9) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000280), &(0x7f00000002c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r6, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r8) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r9}], 0x1, 0xf6) recvmsg$unix(r5, &(0x7f0000002ec0)={&(0x7f00000019c0), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001a40)=""/171, 0xab}, {&(0x7f0000001b00)=""/117, 0x75}, {&(0x7f0000001b80)=""/23, 0x17}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/92, 0x5c}, {&(0x7f0000002cc0)=""/30, 0x1e}, {&(0x7f0000002d00)=""/210, 0xd2}], 0x8, &(0x7f0000002e80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x10000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r12) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)=[{&(0x7f0000000300)={0x90, 0x13, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x76, 0x3, 0x0, 0x1, [@generic="9ab5e5741e309e891465a3790d84e8189e11331e2b1c61f6ce7777dc2231d33285f19598a5a26ffe98ae0f302543de179d892a715323cb5aba68981ed0853aba9911d1274bc8b3d7541e26238bbc90aef3dc74f9ecf68771019ac27cb940", @typed={0xc, 0x58, 0x0, 0x0, @u64=0xf9}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r1}]}, 0x90}, {&(0x7f0000002fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB='\b\x00m\x00', @ANYRES32=r8, @ANYBLOB="0000759015205fac5f3b3ab7a5ac7feee89a95fc36521e413b6ac75f113ce4ea7bd9fe2d97ca228e7de39062ee35625295770d9486ffa7fc0d98fd33d7090b1717f8a5c53a1f667ef0291cca393ec8823579d8f3dd1335963836018223ad18d7481352fc66a55c6ffa676edb0ec130e4f7696bde499383fde15b841b8b9e4fead2e742d416a073c1fdb8dec20f179931ef76770466f9ec38a818ad2f9184da64c5a2df3f5f679e05506a86ae830e97f573d801"], 0x1384}, {&(0x7f0000001780)={0x20, 0x11, 0x800, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}]}, 0x20}, {&(0x7f00000017c0)={0x190, 0x7e3, 0x4, 0x70bd25, 0x25dfdbfb, "", [@generic="5f207f98f4b4ff7e01820ab11e2ae0647ba3ca044b2ffca8836abbfeea016dbea764f86d7f65d854f60b1c55578751630bf0809ebd0402f90cc42f1968df54ded713743c816faf3fa0dfcf43970eaedacc7196010a4dd22ba5e9f51e41daf5859128ac03b965467276830f664275e5e79201ac28abb4291eac7b98cd3bfd258c", @generic="883404af469f1ebf87da4789ce06a078bc4ae9f2226d5ec4e0dd19458411a3bd04f419fc013dfecb2a52476878bdd5da8ca3f36ee00083c70fbe9bdfdef67fbf223dddd928bb74c292dca9cce81006408698221a82319ce8d71be4ffd2ecf012d839c7521848b5b9dc9f7cdb496697de9bf6a4980e164729", @typed={0x8, 0x2d, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x87}, @nested={0x4, 0x65}, @nested={0x8, 0x64, 0x0, 0x1, [@typed={0x4, 0x72}]}, @typed={0xe, 0x4e, 0x0, 0x0, @binary="cfc2de475052f72b94cf"}, @generic="aa5ff689f5ae857a2119dbde9ee59c6946922c2379b68d67d83816985f304b6e75cfabb7912fe76649d1fafd0f075017d5c4947e02d87210f4e1f7628463aa75c448032a4ab998be030f4952db0b20df4d8ebc5f79ae238a5d161c4f7310"]}, 0x190}], 0x4, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0x58, 0x20000001}, 0x8000) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x80, 0x1, 0x40, 0x0, 0x80000001, 0x4e021, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_config_ext={0x7, 0xffffffffffffff7f}, 0x420, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x990}, r3, 0x9, r4, 0x2) 02:03:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00./file0\x00']) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="979a0000000000000000010000000800ef15050000000e0001004e4c00000000000000000000080007001a14bb000000000000000000"], 0x3c}}, 0x0) [ 163.600918] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 163.659851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.857523] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 163.865637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 02:03:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) 02:03:54 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) 02:03:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0x22, 0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0xa052, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = socket(0x8, 0x3, 0x4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r5}], 0x1, 0xf6) write$binfmt_elf64(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x402) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) 02:03:54 executing program 6: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x810, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2012, r1, 0x0) r2 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 02:03:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) 02:03:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:03:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) 02:03:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='b', 0x1}]) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r2}], 0x1, 0xf6) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x17, 0x80, 0xc340, 0x3, 0x3e, 0x6, 0x24, 0x40, 0xee, 0x3, 0xfffc, 0x38, 0x1, 0x0, 0xdf5, 0x40}, [{0x60000000, 0xb6fc, 0x8000, 0x8001, 0x81, 0x3d0, 0x12, 0x745}, {0x70000000, 0x9, 0x3b8f0a14, 0x10001, 0x6, 0x5, 0x4, 0x4}], "1c63d0c33d381e6664395443a8539f00bbed90389092cac9e9257c5bb06ca31cd19b3f01", ['\x00', '\x00', '\x00']}, 0x3d4) [ 172.294680] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:03:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) [ 172.335286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.349259] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:03:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:03:55 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) io_setup(0x7, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000002ac0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) 02:03:55 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x820a0, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x8000, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x446, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d9554904bb621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf6200"/140, 0x8c}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:03:55 executing program 7: syz_emit_ethernet(0x62, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x2c, 0x3c, 0x0, @remote, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb000000000000080600016ddd06100004bbbbbbbbbbbbfe880000000000000000000000000001aaaaaaaaaaaafe8000000000000000000000000000aa"], &(0x7f0000000080)={0x3, 0x3, [0xc92, 0xc92, 0x2a0, 0x61f]}) 02:03:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 02:03:55 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, 0xffffffffffffffff, 0x0) 02:03:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002200)='environ\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4115, 0x1013}], 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) r2 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x800) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000002240)="fc32f2e8abcafc1571b49f5a0856cd681086ea0f2d52d2647763f8c6f2131c759e5bdbe545271e457761ff07811bafdd1151a0e70ab0563677c968cb110b5bc69502227236a04fe04c1e8ad15eeb3a2f11682e580e6b316dde142add00298d3412329ee5f763879d20e337939b15ccdf052d599ec3c8211f8fdff202843754bc9488ded6aca6b36f219795f54f687f4caf8e7bad0e0eedc2f630900130a27d2e8ffc8cf2768fec409a398e48e93b7a68e8e06f799138a9e895df344d029c37cf7d1017cbc811856493c660ba0a321ea3c370edee408ae944e49a2929c15fb1b3764e1b34293569c899783ad23318356c2675a1045093ddf4d0cac27a69f76a53041a4a2ce3212dd42043b822db1a7aa0d4372eef4d971869e5d164da09be99d0f86475ee1a03843bc6976632b4e5c58297bfe16992b69ee7ea0239efb588a6e45e7bb634d0b806e10e0f4ef7f586187a1925aca1fa43d6f2f9d9223e5de240c6ff30af0ff70ffc2e568cb64e8723a51cb4a08d6d307b00719f1be87247023b51f8c1ae39b74245f18175ff8cdffaed0bfdc0a7f806257997f4d6c79eaed1fa7c51ddcd0c836a7b8e6029922d7e5ab03169c2eddf0832571ab95d4b3455dc333bf48d3590ccc3616a291d471b6f22b4611938e6d1145092896b8778151ef471e609354b00d4b113dff5f883f67781fc0ff8a7f6feabf64c2c89b4b23eacba3b950d01f4c109e969fc6128e996ec31abea414a78c27d1ad50d8accdb77ff3c5cc09e28f7105eb737ab3d6fb758c8b51063d6ecc0f27b297f980e472e68253710633396f1dd1f04a9c26a61d0e06a3f56f1017c46d5f5b65bf9f552f925c0c13214ac0b0e586bf75847a699332b942a4a504cea3fdc61c97373924e53a861a49844778f86d3954fc177d29e236a8ef6e04ca398a8b8ea0d79bcbaea4111983bc1830e2033de985606c5b67fa8258ae9000ce58036db77b5d759a38a0692570b8fc26408a8e54390cf78fef1f0e74a21bb39684d2bf958ede2f14a1b20cc53c4df48eaf80e9277c8c0b421007cc87d9e41217484e2590ec2730a1085fab399f4b08c0b859a6c8e9736e66618fd9b79272324767c7b85fab2d1fedb9675eb32230129fb591640d3037e69d3eb87e5a91de020308b17379b47fc1b46669879b7796986b2f121ea28e4f11910491962815ba337d9d59b4171fdf87a8c2ddb3ad8d5935b0c4ba929f7228b7c3dad75d4403b61064bdbfb5cef83603e180b733de92dfa43b5c2d85ae0e6053a0bf881078d2626300359f918893437ab7a0c8ed9f234da3fc859cd7970f0ef87cb08e13698b0b5daa8bbc12e226f49009ed9bd0508caafff3d94902deb73e42ee659d98eb6fc274363f176d86043016e93e76338ea8573b4fa1686e23b9dde646749a800c641d0dc0992f115b8f060b48ae89f2b99781b93fe429166c48951d433a2b2780d49261a4ef964a39fe6b2ef44b24d5378ad6217b1ab0c47485c1dfb1c23b2e50ee7851a62e12b2a91668ceaf04c00a6da1b04e9557b8bece8af27f113c95c0ffbb389612ea8f0cce075117bcec288c61cbdf1b038cd96a42adaf95aa276c3c86b83c0d5a6850d2644cd2f1548182474109dfbff2e42ec5913262f9dadd0633cf3fa91d02f75b554835f7e14823961a73e9e8a5ac6f436181c33f6a10d4becf9184926dcbc0e2fc230cceae4dac52ea1f7cac561e5b7142d257ab6ef99d204512f531bfcea7d71f2f75ee7767d39013a334e409fd3e9c40b2822bbd40db751f22ecad2174ca3cf70f0b45a994ea85b413b87c4defc3d70896cbfb61633330e29149a840013351e081b9be3f45f3a3509839c0b8a22f6dea8346e5eb0e03499977533e6cb64dda565342b4d67173def05a9ed3070137174a3f3511aaeea6d157d441b3c796d38d59aae5cb937760e7cf504ac3f95e6c9157e63165b7794cc5e01ee40e1672db3529057fcd9d5f11861f6ec6dadbb2fbcc6e129c3360200cffece92f0bd2b8b467a87a11042760346491ab65c8143c15060dd3974798f5d9c9be302e1d5642f6236a71515ad83cfe985c5cfaba53327653826e5bb4827924f996edc59d0113de11304b186b8cffa0d10ee7f2996d0bec2d751d8fc99f26ffe418f61597f44f8cc014e3f5fce35e09c904427090a9a711a1c4061df3c25a12fdef3f2f0626d9abe6c92f9b5bf55eff03817f4c49ac195a462097cffcaca4e38c9eb06aae06e7c99cf3fec36ddf297446c831de9e8e0e2ebc0e002138fb4b1c03db64779ca3a0204862d935305a5968998aff560ae3bbbff9e9923ff30edd929868a3f2ac68e8e4b6db46415069f2ae120d7af505793133afa9bec74f8f5f8a3fd70dd71870f9c5ae75747b6ad274f0076d8ea96da12a716326337c801563f605544ce3fbdafebb11d41524bf04852e562b8a0f4920d31c50661810f7050f992b1f1488f814bb8358c7cf414d1913fb7c4aa0bd758ff53293a272be023669f5d4903e810fac64673175ab157101b2bd0a6802decb346382ee51e813601db80cc95a98d4ee5c6a8a0dd4d0c4bc416eacfd1d6beb8524824aeeb920dafa55928f442686a0fc0843f06965968647547045073fc3a4749b35841a4f861a70aeba9e9379b4eef003583b15cb1955dacde5c0c01783e0b58c777738ef3ec4a6939d8a5b3ad497a60c271d907ba3507f490280f330a274ab5e9856cf3a123c3c6e7d4c379950b951bbc70b89f2fc73adc0f32e7a9a75e0de29b8011fddaa962649894647ebaf4270f484b7db1e0bff0ff7864bc565af10dd5a47901308058aec38415b1e750f8815cbfc184565d5e5ae461685b889d5ef64ab0087f16b5402a17d2613e86569bc803e446ceb1db376d5727ace978005f6954bc17a75150cf2be66eb7c7b3a9620350e3a86fd5fb332fbad0c40691645533810d2ce0c7c20955735665843eae2f8fc98f2937b29c18c67e9f6638e2c19201e07f4616576f560156e44645dfd556b98b42805a8fe4582fdcea88392d5ea5588a714fa0f1be91d1824e0d3b00f468a078f385e40687a9aca0592a11bca771e33cf566d3e284ba00d142c8f1fa3ab408b9318255abdfd701b55e2c4146967ef375fda83199a24356ef8ecf709ef0202848e59f073e912daf08fb212c13741aa263cb47ea17d4e0f0ded9a1eb479584b79c63efe6b595965f4eed66358896a14f156ff9bc1f43d25650dc0465cb660fe605e70aefd65e6ced5266d3d71670ed75dbabfb7831e8a338c49687022e46401d19406e34e8a49bc07339531a7f549df41082a8aed0560aa37fb46376f7daf3d67e3a42b85dbbd7dbe7b30d292f4985888f1db9635ede7d3b2d1efdb03ccad28cc826f25d7109c7661c82b5ecc50dc10affc4706578111b590a5db61de3bbad8b1f32112dedfe0a55e86d1edf12bfacbbe99ca2717714374e06c84d6d7927b732677bfcfd2d4ae83047d5933bee3481febb1173274d0c87e1ed5e4764dc95867e28f9af04e22effef344c9ad1e8dcfb79efbf592dfa2bdc97e8e1a1d4da5cef7b65d4a44fa44cdcd48006e8d5f56edf39a122cfe387d9585d4622b0dfca932cbd0c852899ece67daf6583c4ad0c2a74f28185f808c97fc1d085e6cb52920b98fdbe2628ac58f1d8a3b02953dd5c1f5415c192419eb540535e4488ea3b6b78d6f9b4d206fe0c2fb1ef05e70fec1455d03e8686ba596d9de6efad48f19480cb12896cd5eb6a3f954bd462da0775b09b342748dfce44ae4034aed4d4496995271012eda8334561ac40d52acf63488238ee2f984b13d9f0f7547dab4ef25c8d414e754b12d4550d8fdbb6ed6c012f2f0b2997b1ad92546c844c3f148d1b731144ee0d403c6b030ca53c64cb759874c382ee10f07899a1c37300813e42889bc5517d746d75a45fb5a3d87cf113f25e7b4b402b71cca886d35f4cad1749f7e20faa77996b23777bc35eda0dbb7363f7764986a2bbb4b7c23b2f3d6d3d35f3639d2d52bcd7208c3799f72ec9cca713dec7adaefbc805113f8038e1b67c52149b73e1d6f078b178f7344c9fa14cabbe72d20cc7eb69ae8e2542df8502cc094ddb52243cd526917690b7da8a3856811f08046d41ed34674d1d52e3ce106beadc36bcf1b94d67b613b6e94900a8e728eec9bd331c21949657049c6c50bf8a8e455b23760f6d6ada037095c7d23b30b97822a613c9dd93047632338bcb08d4eb1d3dfa0198f1bea40b035d34ea68c1ca7ae180d34feed1b1a2e31427ff46c182937b2f700d0d4302a5879fcdc9e9ef5c219a5a720c66110fe61b74ecf2de453e806c86337ea7a76dc9d5d1bc8f9483aa85e61790a932aade4bc5884a40c76c02d7408cfcc8af9b6ab899f13a1e72b9d806dc3f99a7427c304e8762758e17aa6d7bed3bb62813cf6c54b68c5d0d62bd6427090a531a77134895ffd18ca9e6c3fc8a8805fec9d47092477a0cc08eeb8591b75905c716bd5b1e993f1078ab101f21d3b1139c6bff145c13a60e2b867e39bfc8395510067bdfa955c8f73ca84531d1645941932cd1f39a9463334e5b55a79a7a5ab1f3b596f32433710e7bb78083214df8eeb89c36b27e6fb5c87f5f2ee2dc60cdd92e29e1d18ce9b94492e2bf3c0b330f0991e53c9605f6039054fd2a1625cb15b41e9fa55857db957ef44a7537e1b9afdba9e85878e564f4ab4fa2df4a466eaf77afca305539c136591dfba4229f1d962b059de96f16e2576bc4ae0c3d04779ac27b0db827340b7c0df1bc5cb44173cc2dbc0e14b82090032b3af27f2a9cccf7397be29adf77f32715d90b24acb54736b481ec869b8ac3595eab9a645a27f400d28ca08588285482aa4a2dcc2079f454875883eddee85632363f4277b732009a5ec1983304259c94dff0e202d14d5a3b1a2c017f2c57a1891497ddf4f0ef433666097e967f82c0d743b950275ef475cd7eedc9db2769b5eb4b98b30d01a32952662fa6d09d009bc299968fcb18bf121cbf937c9198e443d203443ac9e82bd5f14226b27ad2ed09936fe01487b85c80ee8cc48b0a805cc7705d512f7b2eaf045fc2a5867b5cef189780765777cb678469b110a188d4613d1f6a4486bd6e9c819e697af36f9a11faf67f6a0b708fd080a70bcf8851bbcdbbab49d6dbabb9d6dcce3e3a2220239f3c04ef1d1837beaa09522ab8238908a94dc4e3a46d8ecf319b5ec75db49765e74f4ba39e730667316881fd9b3b3cef41c245bdc9bce7a4265533ee2e9a001e2d6fb8a8c556ece533203b5087d467a058db28f1ec539f67f857658e35a414c7c2577216be7ea1f17b78493530ddef29c7fdcd97d2a4d6b9154e7b9494ab25fac0a9c564f7a9d32ed5553defd12fba2db1a6a9ed1f15c88ae1f8682dc50e5b3bedad3b0eac8a6b9a4d8517856ff7a61567513de1cb35bb2133b631e2415a7f2eb4ced5ec14d1b39d7ca8f2175edc39f9cca5e116dfa53a532b355d98daf17315bd1a81b24c04c2c9a2ac8a2f4eb78a7491158a4b7d9421955ae635c5aa75e1a896633aa0944b128d7285b77726929b068793e75492fd637e2d5a8002f5e878c3cae0a7e2de498f2eedc7c664654623ad473eba0f52abb10adfcc2bfc0b536370fbbdcf377926712818f282f0fd425221ae309af39a458189b12b5ab73322b4df9380f001fc11ff54af2f0be67bbc3f9e8a1bb51eb023d8c9e57c4ad5d6b565187d4aa717c49ec54fad6ad5d31882890d50f3e005a66e61052e70b4fe870534e0ca45869ad022e616e51d13942e443bb3dc77c2d2eca17b5bde84eb2103067729d5", 0x1000, 0x29af, 0x0, 0x2, r2}]) 02:04:04 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, 0xffffffffffffffff, 0x0) 02:04:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:04:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 02:04:04 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x820a0, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x8000, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x446, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d9554904bb621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf6200"/140, 0x8c}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:04:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 02:04:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) 02:04:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002200)='environ\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4115, 0x1013}], 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) r2 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x800) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000002240)="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", 0x1000, 0x29af, 0x0, 0x2, r2}]) 02:04:04 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x820a0, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x8000, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x446, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d9554904bb621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf6200"/140, 0x8c}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:04:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 02:04:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:04:04 executing program 4: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clone3(&(0x7f0000005880)={0x14f824100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:04:04 executing program 5: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) sendmsg$802154_raw(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="2af3c6ebbcda050865c62a8d99d835f02d4e982613177d0cba85f4f038a84e4d80c54a5f530248a4f70dc36b252af10c2c399b7236dbd657cae6", 0x3a}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6c, 0x2b, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x6, 0x3}) write(r2, &(0x7f0000000700)="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", 0x1000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'lo\x00'}) [ 181.827049] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:04:04 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x7, 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) getsockopt$sock_timeval(r1, 0x1, 0x56, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) recvmmsg$unix(r2, &(0x7f00000039c0)=[{{&(0x7f00000025c0), 0x6e, &(0x7f0000003900)=[{&(0x7f0000002640)=""/222, 0xde}, {&(0x7f00000003c0)=""/260, 0x104}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x5, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x40000000, &(0x7f0000003a00)) fchown(r3, r5, r6) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r7}], 0x1, 0xf6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f00000000c0)={0xbd0ff97fb4ab8f88}) 02:04:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, 0x0) [ 181.906811] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 181.989755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 181.995338] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 36 (only 16 groups) [ 182.004268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:04:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 02:04:15 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x820a0, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x8000, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x446, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d9554904bb621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf6200"/140, 0x8c}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:04:15 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = getpid() r4 = gettid() pidfd_open(r4, 0x0) ptrace(0x10, 0x0) waitid(0x0, r3, &(0x7f00000001c0), 0x1, &(0x7f00000002c0)) waitid(0x0, 0x0, &(0x7f0000000140), 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='8e0\x00']) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x1f, 0x7f, 0x3f, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x400, 0x1, 0x2, 0x1, 0x80000001, 0x3, 0x7ff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, r5, 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) epoll_create1(0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x4) 02:04:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:04:15 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)="1dc69b384722cf1bc2284b7974feab56989897769a4334c380d779e2a21e75540b9a903719ebf30cf86f45a06c9be23d88fe1bee51b82628154a79f94a12de44e892c5d429df2d8070bf5df4776a4867b114e358c75aa2382e7661d297d2f1bc9afe681fcda83301e77516816d90125270a51b30c82435921e929085ba7c1e4559950fccd11a5d123b5e579083508778bf85080e84ec1066f6d97e7ad5d3391e4731145076d375624b3e11699e481233d16fbb3e14ff74b25d30e6f62abf16223b515bbf2546564b4140b610a2f641d03bbe9158fd366b61ec", 0xd9}], 0x1) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="74642b743d0000002200000000000024654278ae744b4aea58c59686bd0000d8055d54750dd257c442fd89fad6e99fa1b955b5febfb3cb48ceae6058d9", @ANYRESHEX=r2, @ANYBLOB="4c830a98ee4262", @ANYRESHEX=r0, @ANYBLOB=',\x00']) connect$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 02:04:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0) getsockname(r0, &(0x7f00000003c0)=@tipc, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="18000000000040000000000000000000080000000923649a72b567ba6663e4b6376822825ef8018d59cb25a5c57c6aa242927eaeaf0912b342ccfda796b874355a0764b2071d24d31a48e82ca7fb1a4182741c4cb10ec8cb64e19bdfa130cf0ab7f4618820cd6aefbe73844ff8", @ANYRES32, @ANYBLOB], 0x18}], 0x1}, 0x0) clock_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x0, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r2, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d6, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:04:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 02:04:15 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x5, 0x0, 0x8}}, 0xe8) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, 0xffffffffffffffff, 0x0) [ 192.472746] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 192.536334] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 02:04:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 02:04:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 02:04:15 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = getpid() r4 = gettid() pidfd_open(r4, 0x0) ptrace(0x10, 0x0) waitid(0x0, r3, &(0x7f00000001c0), 0x1, &(0x7f00000002c0)) waitid(0x0, 0x0, &(0x7f0000000140), 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='8e0\x00']) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x1f, 0x7f, 0x3f, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x400, 0x1, 0x2, 0x1, 0x80000001, 0x3, 0x7ff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, r5, 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) epoll_create1(0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x4) [ 192.668111] process 'syz-executor.4' launched './file1' with NULL argv: empty string added 02:04:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:04:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = getpid() r4 = gettid() pidfd_open(r4, 0x0) ptrace(0x10, 0x0) waitid(0x0, r3, &(0x7f00000001c0), 0x1, &(0x7f00000002c0)) waitid(0x0, 0x0, &(0x7f0000000140), 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='8e0\x00']) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x1f, 0x7f, 0x3f, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x400, 0x1, 0x2, 0x1, 0x80000001, 0x3, 0x7ff, 0x0, 0x9}, 0xffffffffffffffff, 0x3, r5, 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) epoll_create1(0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x4) 02:04:15 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x820a0, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x8000, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x446, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d9554904bb621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf6200"/140, 0x8c}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:04:15 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:04:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 02:04:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 02:04:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) 02:04:25 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 02:04:25 executing program 4: rseq(&(0x7f0000000040), 0x59, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1fc) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 02:04:25 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:04:25 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) fork() 02:04:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 02:04:25 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa0, 0xc9b}, 0x0, 0x0, 0x1008000, 0x4, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 02:04:25 executing program 5: accept4(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x18d) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/4096) [ 202.663029] loop7: detected capacity change from 0 to 64 02:04:25 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x6) r1 = socket(0x2, 0xa, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20080004}, 0x20000002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 02:04:25 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x1) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) [ 202.691972] vfat: Unknown parameter '00000000000000000003' 02:04:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 02:04:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x10, 0x0, 0x0) 02:04:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 202.853753] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 203.163822] loop7: detected capacity change from 0 to 64 [ 212.409511] Bluetooth: hci6: command 0x0406 tx timeout [ 212.409526] Bluetooth: hci2: command 0x0406 tx timeout [ 212.409924] Bluetooth: hci3: command 0x0406 tx timeout [ 212.412109] Bluetooth: hci1: command 0x0406 tx timeout [ 212.412543] Bluetooth: hci0: command 0x0406 tx timeout [ 212.412707] Bluetooth: hci4: command 0x0406 tx timeout [ 212.414183] Bluetooth: hci5: command 0x0406 tx timeout [ 212.414505] Bluetooth: hci7: command 0x0406 tx timeout 02:04:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) [ 213.346308] loop7: detected capacity change from 0 to 64 [ 213.350192] vfat: Unknown parameter '00000000000000000003' 02:04:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 02:04:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 02:04:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x31, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x210) 02:04:36 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) 02:04:36 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) fork() 02:04:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) fork() [ 213.388701] loop5: detected capacity change from 0 to 64 [ 213.398707] vfat: Unknown parameter '00000000000000000003' 02:04:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:04:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x14}]}]}, 0x24}], 0x1}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) write$binfmt_aout(r0, &(0x7f0000000100)={{0x521966e161d451ad, 0x1f, 0xb6, 0x253, 0x267, 0x2, 0x6b, 0x5a45}, "225a815a88f4189cfab8622f32f0f0a114d57e109ef18506e549b4ee4a8321f7b0ea9ed1dd8e62735d4f9b02ceed06547113f638cab81fc7ece5a83ed87f180462135c5847dd5cd94c9de6726178d76c146d49303dfce5fcc1bec1a0ec16820a9af7c3cd18ad758acf406fd6c3662b6fcbd5d314fd4cc9c7bb15174614f4c431b1484e10a4ac61b37c8327cd9e0237dd784ab40b27465d5ab90137c44d3d25a597b3254282e34e583c24", ['\x00']}, 0x1ca) 02:04:36 executing program 6: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x42800, 0x3) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x4007) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x2, 0x7, 0x44, @private0, @local, 0x8, 0x20, 0x4078, 0x8}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x194, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x84f2473d2e326117}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000040) fdatasync(r2) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000000c0)={0x2, 0x6, 0x0, &(0x7f0000000040)}) 02:04:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 213.597947] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:04:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) 02:04:36 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) [ 213.731121] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 213.745898] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 213.799130] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 02:04:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:45 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) 02:04:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) fork() 02:04:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 02:04:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 02:04:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) 02:04:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 222.921066] loop5: detected capacity change from 0 to 64 [ 222.944612] vfat: Unknown parameter '00000000000000000003' 02:04:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:04:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r1, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/256, 0x100, 0x0) 02:04:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 223.204032] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 02:04:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write(r0, &(0x7f00000000c0)="c9", 0x1) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x444000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x40008, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x993}}, {@access_client}, {@mmap}, {@uname={'uname', 0x3d, '\x06\xfe56\xec\xa3\xbe\xb2c\xd1\xd3\xb34\x18\\4\x11\xa5\x1e\xa6\xd7\xa2\xc3['}}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@dont_appraise}, {@seclabel}, {@appraise_type}]}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) fallocate(r3, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x4) [ 223.223894] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 02:04:46 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:04:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 223.308759] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:04:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) creat(&(0x7f0000000080)='./file1\x00', 0x0) 02:04:55 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:04:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x4000, 0x0) r2 = geteuid() r3 = getegid() pidfd_open(0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)) r5 = inotify_init() r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f00000000c0)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000780)=0x0) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="f80000002a0000012bbd7000fddbdf25040042808b1cebf96c19480d1da1ba853c03a83777eea2cb0209dfac84df1b65f78a5f1f8195b8ab9babc9a7ad5dd2ae395040a45f848d16b82e12364f1786a077396fdddd8497caa088cec5019461b93efaf1b3bc50180793bf3474cc4f7550db7647018115ba529b4cf3d32f14dc056f3eef2c7988295bd10d4e9b6b16ac020a8c07cd161593c8d8c5681e7e15325be0cc5ab9d0f2b35a5708817c8b7491fba06958cc05d6ccaad164d49b55ef9d2cf4f1c7b532729e2565e302678eda983eaccd6d29bdf7838d4eaa44bff9d968a9bdb7c44a7efb5abd8eec4b7f0602bd600e0042002f646576"], 0xf8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYBLOB="a416abc327ec50f8d0", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0000000001000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0xcbc00a8a32a23a7b}, 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x81}}, {@cache_fscache}], [{@obj_role={'obj_role', 0x3d, '(&'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, '/dev/vga_arbiter\x00'}}, {@fowner_lt={'fowner<', r11}}, {@subj_role={'subj_role', 0x3d, ':%!+{'}}, {@smackfsdef}, {@seclabel}]}}) 02:04:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) fork() 02:04:55 executing program 4: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xec) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x4040) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x39) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0\x00'}) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0xfb) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) pidfd_getfd(r0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r8 = pidfd_getfd(r1, r2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40881) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x102c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x102c}, 0x1, 0x0, 0x0, 0x2001}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xfe4f2613a941fc71}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x8800) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) clone3(&(0x7f0000002480)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 232.366717] loop5: detected capacity change from 0 to 64 [ 232.378176] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 232.465145] vfat: Unknown parameter '00000000000000000003' 02:04:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev}, {@in=@multicast1, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x164, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x150, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6a, 0x1, "9a9d23eb65e8d56ced8c24a32e94db22d689cb6a623a76712e31d3bb2d159fb18d270e33d0aa404927e0001941b577a0215210eb5bd59b7b9447796eef1c339b55f956f8c9c1c45ce418a474c4d4e09e23be279f44159b90e111248f0b1a9e8e1d4b675cba8d"}, @NL80211_BAND_5GHZ={0xb2, 0x1, "04467b5a9145d3e25f22ae0c1fe706b0a5a8b37c224db0868d8a29c25e5ccc0efbd77c3a57abfb5c089c9fea8355665abe06ffd624bdfc16d661cec8335f082d0b7a05e7712d79ed6f796a68e0060f7e508eb7dccbdc1ba1450460c566caff8bba54afd34b2ccb0c8ea835bca30b193163cd3b7f3fc748e4b5ab8a0e0699014b0e0abf498739d8c45ca55238a74a9fc5468dc6fca583f3c6e6fa76fceff0f987f7e1ecf1ec074f146acd0005acd4"}, @NL80211_BAND_5GHZ={0x29, 0x1, "7696e2892d778daa33ad08038a4a0da85a2f3a64d565e48bfd49c1329ac848514b1200878a"}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x28800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf9, 0x3f, 0xf49, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0x7, 0xca}}) statx(r1, &(0x7f0000000780)='./file0\x00', 0x4000, 0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)=@getpolicy={0x218, 0x15, 0x10, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in=@local, 0x4e21, 0x28e, 0x4e20, 0x6, 0xa, 0x0, 0x80, 0x2, 0x0, 0xee00}, 0x0, 0x2}, [@address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@local, 0xa, 0x9, 0x81}}, @coaddr={0x14, 0xe, @in6=@loopback}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd26, 0x1ff}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x8, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x6, r3, r4}, {0x100, 0x80, 0x424, 0x7f, 0x0, 0x401, 0x2, 0x1}, {0x1ff, 0x100000000, 0x7fff, 0x8001}, 0x7fffffff, 0x6e6bbd, 0x0, 0x0, 0x1}}, @policy={0xac, 0x7, {{@in=@empty, @in=@rand_addr=0x64010100, 0x4e23, 0x7, 0x4e23, 0xfff7, 0xa, 0x80, 0x20, 0x3a, 0x0, 0xee00}, {0x9, 0x1f, 0xff, 0x20, 0x7fff, 0x1, 0x4, 0x3}, {0x0, 0x6, 0xfffffffffffffe01, 0xfffffffffffffff8}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x1}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd26, 0xffffff81}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x218}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000580)) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x7, 0x1, '*/\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x14) [ 232.649526] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:04:55 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:04:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xdb57, 0x9, &(0x7f0000001b00)=0x40) epoll_create(0x3) 02:04:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:04:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:03 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) sendfile(r0, r1, 0x0, 0xfdef) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0xa, 0x4, 0x5, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x6}, [@generic="b6e30e9be455431510a942068b4085f23aa56a65055b708729014ff895c519690625a6e1b007199a0f68d592e984a5be8550e8c1774d4f98afac6c1bbb921b9588fd92a7be0cc810035ba1c03ca8f9b6d0572af70bd20cf83b5ced7bd00b0d67075492956eac2d6675dd24e886f30611fb3db831d028f705c00e6577590188bb5a7a5a00f53dcd7b3b34c55346f1f832f2a5ad975357e1301dbc74a94049742ab1efb5147eb72324a15bffb2079eb3a62527768a76d77ed5a7d42c34bb2793dfddc8cf88074ffbb80eee6abfbd251cc0bc771eff81cac110f6afa0e3e1133a1219c01e76b418a8ecfdbe94"]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x8804) 02:05:03 executing program 4: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xec) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1f, 0x4040) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x39) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0\x00'}) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0xfb) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) pidfd_getfd(r0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r8 = pidfd_getfd(r1, r2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40881) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x102c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x102c}, 0x1, 0x0, 0x0, 0x2001}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xfe4f2613a941fc71}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x8800) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) clone3(&(0x7f0000002480)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:05:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev}, {@in=@multicast1, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x164, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x150, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6a, 0x1, "9a9d23eb65e8d56ced8c24a32e94db22d689cb6a623a76712e31d3bb2d159fb18d270e33d0aa404927e0001941b577a0215210eb5bd59b7b9447796eef1c339b55f956f8c9c1c45ce418a474c4d4e09e23be279f44159b90e111248f0b1a9e8e1d4b675cba8d"}, @NL80211_BAND_5GHZ={0xb2, 0x1, "04467b5a9145d3e25f22ae0c1fe706b0a5a8b37c224db0868d8a29c25e5ccc0efbd77c3a57abfb5c089c9fea8355665abe06ffd624bdfc16d661cec8335f082d0b7a05e7712d79ed6f796a68e0060f7e508eb7dccbdc1ba1450460c566caff8bba54afd34b2ccb0c8ea835bca30b193163cd3b7f3fc748e4b5ab8a0e0699014b0e0abf498739d8c45ca55238a74a9fc5468dc6fca583f3c6e6fa76fceff0f987f7e1ecf1ec074f146acd0005acd4"}, @NL80211_BAND_5GHZ={0x29, 0x1, "7696e2892d778daa33ad08038a4a0da85a2f3a64d565e48bfd49c1329ac848514b1200878a"}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x28800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf9, 0x3f, 0xf49, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0x7, 0xca}}) statx(r1, &(0x7f0000000780)='./file0\x00', 0x4000, 0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)=@getpolicy={0x218, 0x15, 0x10, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in=@local, 0x4e21, 0x28e, 0x4e20, 0x6, 0xa, 0x0, 0x80, 0x2, 0x0, 0xee00}, 0x0, 0x2}, [@address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@local, 0xa, 0x9, 0x81}}, @coaddr={0x14, 0xe, @in6=@loopback}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd26, 0x1ff}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x8, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x6, r3, r4}, {0x100, 0x80, 0x424, 0x7f, 0x0, 0x401, 0x2, 0x1}, {0x1ff, 0x100000000, 0x7fff, 0x8001}, 0x7fffffff, 0x6e6bbd, 0x0, 0x0, 0x1}}, @policy={0xac, 0x7, {{@in=@empty, @in=@rand_addr=0x64010100, 0x4e23, 0x7, 0x4e23, 0xfff7, 0xa, 0x80, 0x20, 0x3a, 0x0, 0xee00}, {0x9, 0x1f, 0xff, 0x20, 0x7fff, 0x1, 0x4, 0x3}, {0x0, 0x6, 0xfffffffffffffe01, 0xfffffffffffffff8}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x1}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd26, 0xffffff81}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x218}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000580)) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x7, 0x1, '*/\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x14) 02:05:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:03 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) [ 241.257502] loop5: detected capacity change from 0 to 64 [ 241.272898] vfat: Unknown parameter '00000000000000000003' [ 241.280476] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:05:04 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xff, 0x76, 0x3f, 0xd9, 0x0, 0x6, 0xa0040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4000, 0x10001, 0x80, 0x6, 0x6, 0x5, 0xfffc, 0x0, 0x5, 0x0, 0xa1c}, 0xffffffffffffffff, 0xa, r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x45) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) 02:05:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:04 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) 02:05:15 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) sendfile(r0, r1, 0x0, 0xfdef) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0xa, 0x4, 0x5, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x6}, [@generic="b6e30e9be455431510a942068b4085f23aa56a65055b708729014ff895c519690625a6e1b007199a0f68d592e984a5be8550e8c1774d4f98afac6c1bbb921b9588fd92a7be0cc810035ba1c03ca8f9b6d0572af70bd20cf83b5ced7bd00b0d67075492956eac2d6675dd24e886f30611fb3db831d028f705c00e6577590188bb5a7a5a00f53dcd7b3b34c55346f1f832f2a5ad975357e1301dbc74a94049742ab1efb5147eb72324a15bffb2079eb3a62527768a76d77ed5a7d42c34bb2793dfddc8cf88074ffbb80eee6abfbd251cc0bc771eff81cac110f6afa0e3e1133a1219c01e76b418a8ecfdbe94"]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x8804) 02:05:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:15 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xff, 0x76, 0x3f, 0xd9, 0x0, 0x6, 0xa0040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4000, 0x10001, 0x80, 0x6, 0x6, 0x5, 0xfffc, 0x0, 0x5, 0x0, 0xa1c}, 0xffffffffffffffff, 0xa, r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x45) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) [ 252.638858] loop5: detected capacity change from 0 to 64 [ 252.670684] vfat: Unknown parameter '00000000000000000003' 02:05:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xff, 0x76, 0x3f, 0xd9, 0x0, 0x6, 0xa0040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4000, 0x10001, 0x80, 0x6, 0x6, 0x5, 0xfffc, 0x0, 0x5, 0x0, 0xa1c}, 0xffffffffffffffff, 0xa, r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x45) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) 02:05:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:15 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 02:05:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 253.424584] loop5: detected capacity change from 0 to 64 [ 253.430089] vfat: Unknown parameter '00000000000000000003' 02:05:16 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) 02:05:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:16 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) 02:05:16 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 253.780793] loop6: detected capacity change from 0 to 64 02:05:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 253.811911] vfat: Unknown parameter '00000000000000000003' [ 253.816966] loop7: detected capacity change from 0 to 64 [ 253.825888] vfat: Unknown parameter '00000000000000000003' 02:05:26 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x400004, &(0x7f0000000000)=0xfd) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0) 02:05:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x10200, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) 02:05:26 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 02:05:26 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) pidfd_getfd(r7, r5, 0x0) 02:05:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:26 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) [ 263.709200] loop5: detected capacity change from 0 to 64 [ 263.719244] loop6: detected capacity change from 0 to 64 [ 263.722183] vfat: Unknown parameter '00000000000000000003' [ 263.723584] loop7: detected capacity change from 0 to 64 [ 263.736862] vfat: Unknown parameter '00000000000000000003' [ 263.755777] vfat: Unknown parameter '00000000000000000003' 02:05:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008c06dafc513299477c6d8f06d45ded438c8df626cca504e0d1fb43e931a474a800f3adec01"]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x0) 02:05:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x5) pread64(r0, 0x0, 0x2, 0x2000000) 02:05:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) 02:05:36 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:getty_var_run_t:s0\x00', 0x25) [ 274.045649] loop5: detected capacity change from 0 to 64 [ 274.048858] FAT-fs (loop6): unable to read boot sector [ 274.092288] vfat: Unknown parameter '00000000000000000003' [ 274.110248] FAT-fs (loop6): unable to read boot sector 02:05:36 executing program 7: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) unshare(0x24040680) unshare(0x18000700) unshare(0x22020000) unshare(0x280) unshare(0x40020000) 02:05:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:36 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003800)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r2, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = signalfd4(r1, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001d00)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000001e00)=0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003700)={{{@in6=@private2, @in=@empty, 0x4e23, 0x1, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0xc, 0x0, r7}, {0x5, 0x5, 0x3ff, 0x7, 0x5, 0x10001, 0x30000000000}, {0x4, 0x3, 0x7, 0x200}, 0x3a0, 0x6e6bb7, 0x1, 0x1, 0x2, 0x1}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x1, 0x0, 0x40, 0x216, 0x7}}, 0xe8) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7b8e08b089a7f9a37dd4c9004547b58a5aa0852853e81c387dacba0a4820bed0fe3f0685ccbc887fb2d6917b4ff5a848314dd3121df8fdb65c3bec88d26eff878f9e65ae8ae89dfc4c402e5f40e058070c1e969e58a7789ec4637b3965873bea8e73bb8cd14e8f70f1881458dd68247c0ac1dbc8e8e504ebd0fcaa393c2dc8114ef9b9ca9f39fecdf6b851d63da77624fe0b114df53436747723eced17bac0e3be7a5333bb8188185179051ef7", 0xad}, {&(0x7f0000000180)="516a27f2ae2bec50680fd3b4b462", 0xe}], 0x2, &(0x7f0000000200)=[@hopopts={{0x28, 0x29, 0x36, {0x84, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@mcast2, @empty]}}}], 0x78}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x97d0, @local, 0xffff499e}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000002c0)="2ad997cfca31593de164b16092837baf92584712623a92d676289a65fc1eb3b47bd060f45accdd606cc9f081080a7e93671cd6bc3a0f4e71569431f4fc2a467dd20715f8956206054cd26254ebac7bf7565a829fbeefdbc9f558ad3c53db0c35fbc972135b8304ad4644a6dc5d4be252824c127b0ff356e15a874ad8673a5ed2da3d40efd66c8dc7061f891cda12f35275c634216b417d47e153e1f5", 0x9c}, {&(0x7f0000000380)="3087bd650248e1bc8bb760a0881d4eada622130c487f222b196af7a6df1e72d866a22aa1599c5b2cb91b83344205b8edd8c3b3e2c34ef80947ce857af1a3c89af5428aa3f39e31980e7f61200d4a", 0x4e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ec0f154e4e91b804ad8e97deb94885e8a3f68211220cf79067eedf480d3d444dc69036930908b0fdf262cea5d8b03844acdd40e72430ed56dfc23bcd7b260052c5ad32b2143ccbc66192d255a7812f4d10a3b1d4c8176ff645796a2c7a2ac09bc7a99f9b1e08cc427496072c857e88914d9a07b9d2c0ae9e5e1662ca66bcca418d3b659374f754caa1aff67ba5ac9ff33694e031d4ed56f5e8987cc266d279b2438a7af11dec1be6d7ac4d69fd02c391902341c675effedaa66d1b66da837729e87996eda129f3db85c61d51afcba7c63f2091077319c43f600235eb3b2ee69f5ae5e9c470118fa5e6cc8d6fd95633c703c0", 0xf2}, {&(0x7f0000001540)="e8438ac19149f5a16aafa1629ce6aa2a93d38a22d78905f11db5cad0acf07fcfc0ff7dfa5a7943a30e711e90c8f4656c74fd6a", 0x33}, {&(0x7f0000001580)="30782a190ccf0111308d231f5ada8ed4cc9aed10f4b2fc9e3d660396ea155e961176225fd64f775bed59adfa8029aa6008942ff871bb1252a889c43d12765bb51051a9d65638094598f8bb27693ebf2f663144b0e3a95c76fda1eb4c20d6cba854bb663209e644b07f37652f64f9d55dd2e0db9d9ce6666d8836b27ebc8ff49c446171d3abdcc15b20f0c57215dc8dd086f95a148266523c36b42abd0780a89aa0a6aadf4af2b32e0d24ec6486d8dacf68efb77f4c8c00a51e8d2810ee305a545a1ef0aa5ba391cf4c0f53e336ddffd8c9c48cd70582c028fc759ed2c6df9e80c78afc6e", 0xe4}, {&(0x7f0000001680)="e464570770e712f695b3814fdf7f581f89ff409b1f80b8bf79c6c78a37dd239150278a07bdbcaf4564cc4e5f60f7e2c1dfba5c9fb5c904bfad2c13aee98f56c51fa0a16c206f501fb4cb89a3", 0x4c}, {&(0x7f0000001700)="64c6a97f11b1a70ec1881a501a179c673e2475b48155a40155a4c24e95f79ce66f9d4ea1a9b91acb0d64071769895dc1ea439a2e8f422ce31299237bbbb9f8b719f6c4bc022c91f7cb2b05540f28ad40983b36a0a5a8c435fa20176f220d9b557c5c7a28bd07e7abe4b9560481eb621c6e0c0ef762c91b1de272015d70eb6c855747a20478b60636cf5574158faab6e06d317a0be31ef887ad1dba2c98a2ede61e82ec392a39bae22a68d6cb871e6828c3869deb74797934fa045a4b0225575fad39868e4be3f5ae3048447e28161e9fe926fd1804da7f82eeabb4f4ad2992c30d56c1381a", 0xe5}], 0x8, &(0x7f0000001880)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x4, 0x0, [@loopback, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}]}}}, @hopopts={{0xc0, 0x29, 0x36, {0x3c, 0x14, '\x00', [@enc_lim, @generic={0xfe, 0x90, "e9b1eb47fee5861ded67a2c69ef89f2a72c00393a9a0dafff5275e3b595f28aa9ec479578a79231045da92087012075072b682563b57d3bf344c80e4bf9240c5faddb81f1feb0a72c1457845a59a155535502645a7db4beb9bb56595be936baefa4483a0e7c5372d68907ad2b036d77e0834ddafdb94a13650b32c901c4df6672c8aa0adec24f27f2c00447faf423e73"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @pad1]}}}], 0x130}}, {{&(0x7f00000019c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="9937fcfe74a21e4507b32529f30bdad648caa49f08cd23935a65141c518aa362067acafa87a923e0a8f4b275660916da163f4b05a8679811a1c852a45d0a39dc8ca6f4c8bec50482d5233189ff476b7b4fcbb6609e5c3ab5832e98a76e9a8d62b2d57d4e5f84887eb2fbc9278a085256ccedaedeb7b5017900c916be33ca", 0x7e}, {&(0x7f0000001a80)="acb35a26786c36bc8662245e9117c47224d94ce9e822e307f4465082b975c4ad5807b8e25eb542e8b6ffee6af2520be262552413267f012d993d3d7066b280e9b2e9218831", 0x45}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="a7abcc5db795fbe0d6902e8d7c29f844f2f86d49038b012c4fc5ce43c65d20ff6a1d7e73c6f46dc1b27efda71a7f40331161f2b757ff3ac645eda46b48b102b95f756e352232ac5e13c1398996c3470946d139f5b3d9d49d2d5c4361f337d1a206b8ed9d37f10e9faa76bd74a6c63c312a1a3240d0641fe7666d68b20c6e1e1567e6463ce3", 0x85}], 0x4, &(0x7f0000001e40)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x89, 0xc, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2b, 0x7, [0x9, 0x4, 0x4415, 0x101, 0x100, 0x3f578241, 0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x101, [0x6, 0x9]}}, @ra={0x5, 0x2, 0xf461}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x0, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x12}, @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3c, 0x1, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hopopts={{0xe8, 0x29, 0x36, {0x2c, 0x19, '\x00', [@generic={0x0, 0xae, "ef04da526ebb8854da3723a2bcc2606129269cc6c2eb0d991bdb0c18f7103fc248ed914bebd4bc5f21f11b5085f63362e5895984d8017c01a43b99e12c2261f9bbc69105331def7d907d8280c3bd98be5564ca76e83996d0daeaf2431c70719abd745887d9afce84fa92afbf54338fbc80746c6370ba9d01d0f5ce8762c5627b948bc54d4b73a853bd773a11e5dd07956f21129b0ab7876f520cad6188eee6d9c079833d51e40da467832728039b"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x1}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9f6c}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}], 0x2a0}}, {{&(0x7f0000002100)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb0}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000002140)="6a41a169bbbc765227840a0ca0e7712456f9bcb4a4a006666819e25fcb46a5108cb759ce4b99d8b332765173d3a9e048a2ea0e82a40e96869936f8edc15bf78fa60badda1466742277ef6a6a408cff86b80cf28daaec", 0x56}, {&(0x7f00000021c0)="fb8e3bc50e5168add947357b50a867eae3aca2c4d8a799573ecfb6ea68fb62cbc251a52466bba94695cb07a195305a15ec2ef84cc394e9343cdd32267694435593e3ab4c4ec629b7229adfee33e290e33605db9db7045bd720d2688124eef70851712d3709d629ee25d7a7cf20012c261ea418", 0x73}, {&(0x7f0000002240)="934ce9c86254ecf94b18490c756758f9d484869de519a65f36de20407cba3b84921b628a5a713571f3ea5f3c09d9da25fa426e37a03b9a0b37735f89d17b4a723fe8eb4edb8f3e00ff061b1a380c1a4103cceb9c8353173f2193179ae6672aaa74060c218b3d56208e3dabaad48f9b09c26beb3c552b4d515f050867fcd5ba0ea3352ff0da21d911ce343f9e596f1ade6d414061ccc5cd8f7da6d35cb76261d41454bb72621088689f772aa6f4905523926d149df1a706b98058ff25372e7d", 0xbf}, {&(0x7f0000002300)="c29670423a775c7d77e5e9beddc8c80624ba6db0a9f75801ee51391017c4af634df375cae077fe0054d0c250f63ede0ba5a5cdfa31e3432b970ef2a2a36d46e48c26a79c9ea864f2899938a4b5590a06f53c85da8ffedf2920de7c9779f3048c0bf6f0f2c608e724c5f901f53d78d6762907f1de995e748f21bd4b9b37c64e1c29d113b0fe66c31897ba5b7a35fa43ccf410f7fbe3ad63c8d95fff3332998e65d59b5b3a8e71f0320c0b", 0xaa}], 0x4, &(0x7f0000002400)=[@tclass={{0x14, 0x29, 0x43, 0xfd}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x50}}, {{&(0x7f0000002480)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000024c0)="f897883327fe077260cbad8abefce93c9a16c89d7a9d719ec57d7c9642003d8c52b750ece793250d929f589dabd7b65dee4be7e2", 0x34}, {&(0x7f0000002500)="6481d4f8b1645a718d6a548f2a1647617f7289aa836fc6724762e2acf7949bf790961cdb5c8f35f693af067c3d32595d4cb4dcb093c83dcdf8be502081e6fc399e8d47e32763fc6fd354720dcc2bca5ea3ab2727ebe424d456eb1d2aa197b8fa994ff649918915cd9166c6014ef5557161b574f3d0a133b22a8ce1bcb0ab6739c9472d945665e4f52fc5add54fc6582d071d1402bab4029ac450107389c51be2f34ca364d79dbc103b0cb00051540ee9011ddb5d410256b2e4f2a611c1", 0xbd}, {&(0x7f00000025c0)="c8f96432b228ea979733546d77585982e40a200482481cabedc70f316f9b52", 0x1f}, {&(0x7f0000002600)="6ced39c7141c777946c19d2d16a73309b1b9d2c28f519c925b1e4dc1a1a1c942c28f32be84e885922ee9415140542ba5c135c57732e9ee343eb0478c781c75d32dfc0d94f72e12bf8c89a188eabe8afdaabacc0395ef77ecae2bb46baf44f1f7777321d602b529753536093fc3c501a4b20151d70cf3c7d442", 0x79}, {&(0x7f0000002680)="428e0d06f81a9cb5c49bd35640eeedf18ef6d8a5f59b168cbaf910bcfed4f3f198c2b745419b9b6d3fdb171c157af55460c144cf3c6a1a30f5e2d458e68c51e73f4c3194280bf2ad7a0a81e91509747f0394b86975aa55b6371b85cb2d6e4bec8cd4381d47ac70f200bc76fc8a616d3bae846395ed742aad0c97fb5f0db36cab8bf21149dfbc60bdd68e9c20d41a11cdfc82e955f69873d80f366e3bc1c1f56134f11459aa7875796f0f982582585ef94ab31aad195b3bc956b121d8d1792882327e8993a4b63a324367e185bd72d74594eb7c4181b7ba097d33c929", 0xdc}], 0x5, &(0x7f0000002800)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)="141ef88d60a3755d175c7efd2846d59d6365ac489a5e1b646cdb8e3ec20097b17c8a62280cfdb603388388e91e8cf480522b4c824ea816383b064c4ee47694f6d563d93a3899683c9761f28dff4f8b", 0x4f}, {&(0x7f00000028c0)="179fc9364665b2b71b45e2f758bc14ef1782d1f69f13b6a02c799de4afb306336b83c8814ccc7c63a05dee89ac11184da4a42b4957b93b0cd57577cc912a44da0ea33b5da8345d79c5d8920f264c9a7062579adeac935ee02db0efce8cbace3630e94a421e3b1316034b350ff0b6eb7acb2c53013e3643d1e81913ad7ee0cb842561ede5754549d281051689a99826ff57de312ff1b62c0d29ef0f64e82ebb7fcf26f5ad10ea245719e62d9235c14c038c1ddeb49d4d8a5cb4e85aff991f82d3a3e113f2d25f9f699cd329ce070a", 0xce}], 0x2, &(0x7f0000002a00)=[@tclass={{0x14, 0x29, 0x43, 0x1f}}], 0x18}}, {{&(0x7f0000002a40)={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="17ac658e64aecf", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b00)="018c053bdb0b679d790aac8ffaa953e9f07358cab4b25528368e00a82e225142da4bc993ee6494847f20c06dfb621534cb47ac868d80bb485fd2af8f6d97b94608fb4474cff1779444348544b9110a2738313f47eb6dd884f3b607dde4c26959443710846d4b6f166f8c8600a3d88353579d27dd7b88a2508c9fa47f7f6d7ca89bf20a7990bd5c4df229b2f45d7416606866f8e3d5e57a51040cc8fa09acd8655a81a2", 0xa3}, {&(0x7f0000002bc0)="94306fd1df", 0x5}, {&(0x7f0000002c00)="fb863cad36c6739bb50337", 0xb}, {&(0x7f0000002c40)="a667020718f45b4c2a5402ebc34b88219b1b5cbd72be45951eff78bc8b0ea3f18d3f26f517e64dc88eb55b6453b443e3bbf6ca7a9577ab1896e37d2877f15434377368d02b02251039c632d90be7fac5d44cfd644165f2b18475698202e5e53acdbcaaea9a6cfdbbf3c0b00c2b6e1188914dae46c22c7616153c0daabdbb270dbce0d9aa", 0x84}, {&(0x7f0000002d00)="86c0c61a2384f633a11d6ce645fa6dca5c149828befaf6eca0899c0962e34d2056c9bd637897aa57335781a6190c4b6b7b0836cdbbe2ecef265e916230646feacc82a7d1fa0ac7ac7af5f6390dd2dfcd191ccc1b05814fa377cdf0833dac03d65b3a70c327e462edf5aaf97b651f29b7d37ed947b36c83e8e2d1c21beb3d282802f2c79df4397ac7949dba1481e8e47881ad173a78310d1e0a27b2a4065699bd9c734f2e6a72b81ccde09d", 0xab}, {&(0x7f0000002dc0)="d3661cef83636b4e780c5dcae888003be27b383674971b75024d081d917201f0aed5c9", 0x23}], 0x6}}, {{&(0x7f0000002e80)={0xa, 0x4e24, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000002ec0)="7e597c7f4d2e8c3b4bd02f7fcf0568e5f50f8237520f7664ecaa62de9ffcbcc7b1424d11152574e9c2cbcd5859ac10e8d2ffa8a5677b36a1c8a685e64add85f9d53c17d4091fe5990698528656a9c38064d6de59e09cba4ddba359eb8974c62d7810f5784c3eef31ccba571911ae3d420917549c0a94605f3906935c89d717bc6eeb4bc2c813f4b7ddec40d1b71453bf9c30ae251fedefb73ff2838cba551573886505a48b95172994defa46021a62af74f25d093f0a642ca1e3027b7e3e120d6c4e7d9281eea032773bb2267ab902fe90c667f52184b4d33d", 0xd9}, {&(0x7f0000002fc0)="69c56fc5ae72a8eed3eb77ce112186f47020998bf64bfaff1ef3387c50c1ccecb2f4bc8dc3b4395e8ac077d015f29f6c790b766ac0cb220a34a993e0ef8fb4ea769a7ffe5ca028181acf37ed5641df995107cde8c9d75287d748ff80d1bd90a2a55611514dc4b02d1bd1fe3886aee053a2f5c82065d2f80a95ba2b10081821e3d305ef86addbecf495ee47780803b016cc621ef0ce2397b6", 0x98}, {&(0x7f0000003080)="7427ff5c7486f8f437afd473683532525a5626a61df8923afb098e41157f2b8c8c61352097525e2d5f0b07acb65beca8d2a32f19e11e1c8579e27331874c5c8f22f04059ef3d3b28358f410b7ad65a0fe67c455bcf6b027bbe1043a9b803451585", 0x61}, {&(0x7f0000003100)="5d1ff51e2228489ae5ce693720562611d05b85b1acedd7759ab571e0b149d8b524ae85a1816f6fcda817586c69896ecbf3", 0x31}, {&(0x7f0000003140)="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", 0xfb}], 0x5, &(0x7f00000032c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}, {{&(0x7f0000003300)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000003340)="253b583b390c1cac60a51b0995436b52105794554442c4492e88c6ac4a0581fbce7699ba1cc54f0009929ebe370d0c9ef9f70f061d5c4d1f3430ecdab96130ed4086d162d14a5e8e119bed86efcd02e50695230e8b683a4785be482d0e3bf9aa7501043357e072f3a885a20bf5da3321e1cf97fd0c32e82e8be68695ace2a45acae12faee6c39ef2e22f2bf9046075cdab46978e7c309d8b6d22def67b9a8e4187", 0xa1}], 0x1, &(0x7f0000003440)=[@tclass={{0x14, 0x29, 0x43, 0x101}}], 0x18}}], 0xa, 0x4000) 02:05:36 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008c06dafc513299477c6d8f06d45ded438c8df626cca504e0d1fb43e931a474a800f3adec01"]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x0) [ 274.240451] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:05:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) 02:05:37 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) [ 274.391237] FAT-fs (loop6): unable to read boot sector [ 274.392314] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:05:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 274.516574] loop5: detected capacity change from 0 to 64 02:05:37 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003800)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r2, r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = signalfd4(r1, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001d00)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000001e00)=0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003700)={{{@in6=@private2, @in=@empty, 0x4e23, 0x1, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0xc, 0x0, r7}, {0x5, 0x5, 0x3ff, 0x7, 0x5, 0x10001, 0x30000000000}, {0x4, 0x3, 0x7, 0x200}, 0x3a0, 0x6e6bb7, 0x1, 0x1, 0x2, 0x1}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x1, 0x0, 0x40, 0x216, 0x7}}, 0xe8) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7b8e08b089a7f9a37dd4c9004547b58a5aa0852853e81c387dacba0a4820bed0fe3f0685ccbc887fb2d6917b4ff5a848314dd3121df8fdb65c3bec88d26eff878f9e65ae8ae89dfc4c402e5f40e058070c1e969e58a7789ec4637b3965873bea8e73bb8cd14e8f70f1881458dd68247c0ac1dbc8e8e504ebd0fcaa393c2dc8114ef9b9ca9f39fecdf6b851d63da77624fe0b114df53436747723eced17bac0e3be7a5333bb8188185179051ef7", 0xad}, {&(0x7f0000000180)="516a27f2ae2bec50680fd3b4b462", 0xe}], 0x2, &(0x7f0000000200)=[@hopopts={{0x28, 0x29, 0x36, {0x84, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@mcast2, @empty]}}}], 0x78}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x97d0, @local, 0xffff499e}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000002c0)="2ad997cfca31593de164b16092837baf92584712623a92d676289a65fc1eb3b47bd060f45accdd606cc9f081080a7e93671cd6bc3a0f4e71569431f4fc2a467dd20715f8956206054cd26254ebac7bf7565a829fbeefdbc9f558ad3c53db0c35fbc972135b8304ad4644a6dc5d4be252824c127b0ff356e15a874ad8673a5ed2da3d40efd66c8dc7061f891cda12f35275c634216b417d47e153e1f5", 0x9c}, {&(0x7f0000000380)="3087bd650248e1bc8bb760a0881d4eada622130c487f222b196af7a6df1e72d866a22aa1599c5b2cb91b83344205b8edd8c3b3e2c34ef80947ce857af1a3c89af5428aa3f39e31980e7f61200d4a", 0x4e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ec0f154e4e91b804ad8e97deb94885e8a3f68211220cf79067eedf480d3d444dc69036930908b0fdf262cea5d8b03844acdd40e72430ed56dfc23bcd7b260052c5ad32b2143ccbc66192d255a7812f4d10a3b1d4c8176ff645796a2c7a2ac09bc7a99f9b1e08cc427496072c857e88914d9a07b9d2c0ae9e5e1662ca66bcca418d3b659374f754caa1aff67ba5ac9ff33694e031d4ed56f5e8987cc266d279b2438a7af11dec1be6d7ac4d69fd02c391902341c675effedaa66d1b66da837729e87996eda129f3db85c61d51afcba7c63f2091077319c43f600235eb3b2ee69f5ae5e9c470118fa5e6cc8d6fd95633c703c0", 0xf2}, {&(0x7f0000001540)="e8438ac19149f5a16aafa1629ce6aa2a93d38a22d78905f11db5cad0acf07fcfc0ff7dfa5a7943a30e711e90c8f4656c74fd6a", 0x33}, {&(0x7f0000001580)="30782a190ccf0111308d231f5ada8ed4cc9aed10f4b2fc9e3d660396ea155e961176225fd64f775bed59adfa8029aa6008942ff871bb1252a889c43d12765bb51051a9d65638094598f8bb27693ebf2f663144b0e3a95c76fda1eb4c20d6cba854bb663209e644b07f37652f64f9d55dd2e0db9d9ce6666d8836b27ebc8ff49c446171d3abdcc15b20f0c57215dc8dd086f95a148266523c36b42abd0780a89aa0a6aadf4af2b32e0d24ec6486d8dacf68efb77f4c8c00a51e8d2810ee305a545a1ef0aa5ba391cf4c0f53e336ddffd8c9c48cd70582c028fc759ed2c6df9e80c78afc6e", 0xe4}, {&(0x7f0000001680)="e464570770e712f695b3814fdf7f581f89ff409b1f80b8bf79c6c78a37dd239150278a07bdbcaf4564cc4e5f60f7e2c1dfba5c9fb5c904bfad2c13aee98f56c51fa0a16c206f501fb4cb89a3", 0x4c}, {&(0x7f0000001700)="64c6a97f11b1a70ec1881a501a179c673e2475b48155a40155a4c24e95f79ce66f9d4ea1a9b91acb0d64071769895dc1ea439a2e8f422ce31299237bbbb9f8b719f6c4bc022c91f7cb2b05540f28ad40983b36a0a5a8c435fa20176f220d9b557c5c7a28bd07e7abe4b9560481eb621c6e0c0ef762c91b1de272015d70eb6c855747a20478b60636cf5574158faab6e06d317a0be31ef887ad1dba2c98a2ede61e82ec392a39bae22a68d6cb871e6828c3869deb74797934fa045a4b0225575fad39868e4be3f5ae3048447e28161e9fe926fd1804da7f82eeabb4f4ad2992c30d56c1381a", 0xe5}], 0x8, &(0x7f0000001880)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x4, 0x0, [@loopback, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}]}}}, @hopopts={{0xc0, 0x29, 0x36, {0x3c, 0x14, '\x00', [@enc_lim, @generic={0xfe, 0x90, "e9b1eb47fee5861ded67a2c69ef89f2a72c00393a9a0dafff5275e3b595f28aa9ec479578a79231045da92087012075072b682563b57d3bf344c80e4bf9240c5faddb81f1feb0a72c1457845a59a155535502645a7db4beb9bb56595be936baefa4483a0e7c5372d68907ad2b036d77e0834ddafdb94a13650b32c901c4df6672c8aa0adec24f27f2c00447faf423e73"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @pad1]}}}], 0x130}}, {{&(0x7f00000019c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="9937fcfe74a21e4507b32529f30bdad648caa49f08cd23935a65141c518aa362067acafa87a923e0a8f4b275660916da163f4b05a8679811a1c852a45d0a39dc8ca6f4c8bec50482d5233189ff476b7b4fcbb6609e5c3ab5832e98a76e9a8d62b2d57d4e5f84887eb2fbc9278a085256ccedaedeb7b5017900c916be33ca", 0x7e}, {&(0x7f0000001a80)="acb35a26786c36bc8662245e9117c47224d94ce9e822e307f4465082b975c4ad5807b8e25eb542e8b6ffee6af2520be262552413267f012d993d3d7066b280e9b2e9218831", 0x45}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="a7abcc5db795fbe0d6902e8d7c29f844f2f86d49038b012c4fc5ce43c65d20ff6a1d7e73c6f46dc1b27efda71a7f40331161f2b757ff3ac645eda46b48b102b95f756e352232ac5e13c1398996c3470946d139f5b3d9d49d2d5c4361f337d1a206b8ed9d37f10e9faa76bd74a6c63c312a1a3240d0641fe7666d68b20c6e1e1567e6463ce3", 0x85}], 0x4, &(0x7f0000001e40)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x89, 0xc, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2b, 0x7, [0x9, 0x4, 0x4415, 0x101, 0x100, 0x3f578241, 0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x101, [0x6, 0x9]}}, @ra={0x5, 0x2, 0xf461}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x0, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x12}, @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3c, 0x1, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hopopts={{0xe8, 0x29, 0x36, {0x2c, 0x19, '\x00', [@generic={0x0, 0xae, "ef04da526ebb8854da3723a2bcc2606129269cc6c2eb0d991bdb0c18f7103fc248ed914bebd4bc5f21f11b5085f63362e5895984d8017c01a43b99e12c2261f9bbc69105331def7d907d8280c3bd98be5564ca76e83996d0daeaf2431c70719abd745887d9afce84fa92afbf54338fbc80746c6370ba9d01d0f5ce8762c5627b948bc54d4b73a853bd773a11e5dd07956f21129b0ab7876f520cad6188eee6d9c079833d51e40da467832728039b"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x1}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9f6c}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}], 0x2a0}}, {{&(0x7f0000002100)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb0}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000002140)="6a41a169bbbc765227840a0ca0e7712456f9bcb4a4a006666819e25fcb46a5108cb759ce4b99d8b332765173d3a9e048a2ea0e82a40e96869936f8edc15bf78fa60badda1466742277ef6a6a408cff86b80cf28daaec", 0x56}, {&(0x7f00000021c0)="fb8e3bc50e5168add947357b50a867eae3aca2c4d8a799573ecfb6ea68fb62cbc251a52466bba94695cb07a195305a15ec2ef84cc394e9343cdd32267694435593e3ab4c4ec629b7229adfee33e290e33605db9db7045bd720d2688124eef70851712d3709d629ee25d7a7cf20012c261ea418", 0x73}, {&(0x7f0000002240)="934ce9c86254ecf94b18490c756758f9d484869de519a65f36de20407cba3b84921b628a5a713571f3ea5f3c09d9da25fa426e37a03b9a0b37735f89d17b4a723fe8eb4edb8f3e00ff061b1a380c1a4103cceb9c8353173f2193179ae6672aaa74060c218b3d56208e3dabaad48f9b09c26beb3c552b4d515f050867fcd5ba0ea3352ff0da21d911ce343f9e596f1ade6d414061ccc5cd8f7da6d35cb76261d41454bb72621088689f772aa6f4905523926d149df1a706b98058ff25372e7d", 0xbf}, {&(0x7f0000002300)="c29670423a775c7d77e5e9beddc8c80624ba6db0a9f75801ee51391017c4af634df375cae077fe0054d0c250f63ede0ba5a5cdfa31e3432b970ef2a2a36d46e48c26a79c9ea864f2899938a4b5590a06f53c85da8ffedf2920de7c9779f3048c0bf6f0f2c608e724c5f901f53d78d6762907f1de995e748f21bd4b9b37c64e1c29d113b0fe66c31897ba5b7a35fa43ccf410f7fbe3ad63c8d95fff3332998e65d59b5b3a8e71f0320c0b", 0xaa}], 0x4, &(0x7f0000002400)=[@tclass={{0x14, 0x29, 0x43, 0xfd}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x50}}, {{&(0x7f0000002480)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000024c0)="f897883327fe077260cbad8abefce93c9a16c89d7a9d719ec57d7c9642003d8c52b750ece793250d929f589dabd7b65dee4be7e2", 0x34}, {&(0x7f0000002500)="6481d4f8b1645a718d6a548f2a1647617f7289aa836fc6724762e2acf7949bf790961cdb5c8f35f693af067c3d32595d4cb4dcb093c83dcdf8be502081e6fc399e8d47e32763fc6fd354720dcc2bca5ea3ab2727ebe424d456eb1d2aa197b8fa994ff649918915cd9166c6014ef5557161b574f3d0a133b22a8ce1bcb0ab6739c9472d945665e4f52fc5add54fc6582d071d1402bab4029ac450107389c51be2f34ca364d79dbc103b0cb00051540ee9011ddb5d410256b2e4f2a611c1", 0xbd}, {&(0x7f00000025c0)="c8f96432b228ea979733546d77585982e40a200482481cabedc70f316f9b52", 0x1f}, {&(0x7f0000002600)="6ced39c7141c777946c19d2d16a73309b1b9d2c28f519c925b1e4dc1a1a1c942c28f32be84e885922ee9415140542ba5c135c57732e9ee343eb0478c781c75d32dfc0d94f72e12bf8c89a188eabe8afdaabacc0395ef77ecae2bb46baf44f1f7777321d602b529753536093fc3c501a4b20151d70cf3c7d442", 0x79}, {&(0x7f0000002680)="428e0d06f81a9cb5c49bd35640eeedf18ef6d8a5f59b168cbaf910bcfed4f3f198c2b745419b9b6d3fdb171c157af55460c144cf3c6a1a30f5e2d458e68c51e73f4c3194280bf2ad7a0a81e91509747f0394b86975aa55b6371b85cb2d6e4bec8cd4381d47ac70f200bc76fc8a616d3bae846395ed742aad0c97fb5f0db36cab8bf21149dfbc60bdd68e9c20d41a11cdfc82e955f69873d80f366e3bc1c1f56134f11459aa7875796f0f982582585ef94ab31aad195b3bc956b121d8d1792882327e8993a4b63a324367e185bd72d74594eb7c4181b7ba097d33c929", 0xdc}], 0x5, &(0x7f0000002800)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)="141ef88d60a3755d175c7efd2846d59d6365ac489a5e1b646cdb8e3ec20097b17c8a62280cfdb603388388e91e8cf480522b4c824ea816383b064c4ee47694f6d563d93a3899683c9761f28dff4f8b", 0x4f}, {&(0x7f00000028c0)="179fc9364665b2b71b45e2f758bc14ef1782d1f69f13b6a02c799de4afb306336b83c8814ccc7c63a05dee89ac11184da4a42b4957b93b0cd57577cc912a44da0ea33b5da8345d79c5d8920f264c9a7062579adeac935ee02db0efce8cbace3630e94a421e3b1316034b350ff0b6eb7acb2c53013e3643d1e81913ad7ee0cb842561ede5754549d281051689a99826ff57de312ff1b62c0d29ef0f64e82ebb7fcf26f5ad10ea245719e62d9235c14c038c1ddeb49d4d8a5cb4e85aff991f82d3a3e113f2d25f9f699cd329ce070a", 0xce}], 0x2, &(0x7f0000002a00)=[@tclass={{0x14, 0x29, 0x43, 0x1f}}], 0x18}}, {{&(0x7f0000002a40)={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="17ac658e64aecf", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b00)="018c053bdb0b679d790aac8ffaa953e9f07358cab4b25528368e00a82e225142da4bc993ee6494847f20c06dfb621534cb47ac868d80bb485fd2af8f6d97b94608fb4474cff1779444348544b9110a2738313f47eb6dd884f3b607dde4c26959443710846d4b6f166f8c8600a3d88353579d27dd7b88a2508c9fa47f7f6d7ca89bf20a7990bd5c4df229b2f45d7416606866f8e3d5e57a51040cc8fa09acd8655a81a2", 0xa3}, {&(0x7f0000002bc0)="94306fd1df", 0x5}, {&(0x7f0000002c00)="fb863cad36c6739bb50337", 0xb}, {&(0x7f0000002c40)="a667020718f45b4c2a5402ebc34b88219b1b5cbd72be45951eff78bc8b0ea3f18d3f26f517e64dc88eb55b6453b443e3bbf6ca7a9577ab1896e37d2877f15434377368d02b02251039c632d90be7fac5d44cfd644165f2b18475698202e5e53acdbcaaea9a6cfdbbf3c0b00c2b6e1188914dae46c22c7616153c0daabdbb270dbce0d9aa", 0x84}, {&(0x7f0000002d00)="86c0c61a2384f633a11d6ce645fa6dca5c149828befaf6eca0899c0962e34d2056c9bd637897aa57335781a6190c4b6b7b0836cdbbe2ecef265e916230646feacc82a7d1fa0ac7ac7af5f6390dd2dfcd191ccc1b05814fa377cdf0833dac03d65b3a70c327e462edf5aaf97b651f29b7d37ed947b36c83e8e2d1c21beb3d282802f2c79df4397ac7949dba1481e8e47881ad173a78310d1e0a27b2a4065699bd9c734f2e6a72b81ccde09d", 0xab}, {&(0x7f0000002dc0)="d3661cef83636b4e780c5dcae888003be27b383674971b75024d081d917201f0aed5c9", 0x23}], 0x6}}, {{&(0x7f0000002e80)={0xa, 0x4e24, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000002ec0)="7e597c7f4d2e8c3b4bd02f7fcf0568e5f50f8237520f7664ecaa62de9ffcbcc7b1424d11152574e9c2cbcd5859ac10e8d2ffa8a5677b36a1c8a685e64add85f9d53c17d4091fe5990698528656a9c38064d6de59e09cba4ddba359eb8974c62d7810f5784c3eef31ccba571911ae3d420917549c0a94605f3906935c89d717bc6eeb4bc2c813f4b7ddec40d1b71453bf9c30ae251fedefb73ff2838cba551573886505a48b95172994defa46021a62af74f25d093f0a642ca1e3027b7e3e120d6c4e7d9281eea032773bb2267ab902fe90c667f52184b4d33d", 0xd9}, {&(0x7f0000002fc0)="69c56fc5ae72a8eed3eb77ce112186f47020998bf64bfaff1ef3387c50c1ccecb2f4bc8dc3b4395e8ac077d015f29f6c790b766ac0cb220a34a993e0ef8fb4ea769a7ffe5ca028181acf37ed5641df995107cde8c9d75287d748ff80d1bd90a2a55611514dc4b02d1bd1fe3886aee053a2f5c82065d2f80a95ba2b10081821e3d305ef86addbecf495ee47780803b016cc621ef0ce2397b6", 0x98}, {&(0x7f0000003080)="7427ff5c7486f8f437afd473683532525a5626a61df8923afb098e41157f2b8c8c61352097525e2d5f0b07acb65beca8d2a32f19e11e1c8579e27331874c5c8f22f04059ef3d3b28358f410b7ad65a0fe67c455bcf6b027bbe1043a9b803451585", 0x61}, {&(0x7f0000003100)="5d1ff51e2228489ae5ce693720562611d05b85b1acedd7759ab571e0b149d8b524ae85a1816f6fcda817586c69896ecbf3", 0x31}, {&(0x7f0000003140)="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", 0xfb}], 0x5, &(0x7f00000032c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}, {{&(0x7f0000003300)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000003340)="253b583b390c1cac60a51b0995436b52105794554442c4492e88c6ac4a0581fbce7699ba1cc54f0009929ebe370d0c9ef9f70f061d5c4d1f3430ecdab96130ed4086d162d14a5e8e119bed86efcd02e50695230e8b683a4785be482d0e3bf9aa7501043357e072f3a885a20bf5da3321e1cf97fd0c32e82e8be68695ace2a45acae12faee6c39ef2e22f2bf9046075cdab46978e7c309d8b6d22def67b9a8e4187", 0xa1}], 0x1, &(0x7f0000003440)=[@tclass={{0x14, 0x29, 0x43, 0x101}}], 0x18}}], 0xa, 0x4000) [ 274.548775] vfat: Unknown parameter '00000000000000000003' 02:05:37 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) [ 274.693594] loop6: detected capacity change from 0 to 64 [ 274.703172] vfat: Unknown parameter '00000000000000000003' 02:05:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:45 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) 02:05:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) close(r1) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100030000000000000000000400018004000080100000800400000008002e00", @ANYRES32=0xee00, @ANYBLOB="baa35f448159c63708386ac04734e42f34706db53b1b9d2e96c9897e9260aa42813b3eaa9ecf57129c0c5d14ed68cce39a963d5bd9d8fee94a323b065a6ee5cbcc52bc1e03000000b56ec8"], 0x28}], 0x1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 02:05:45 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:05:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) 02:05:45 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/31, 0x1f}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/160, 0xa0}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/141, 0x8d}], 0x7}, 0x3) r1 = signalfd4(r0, &(0x7f0000000b00)={[0x6]}, 0x8, 0x80000) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)="e80e11b09d40e8233518fad9193538604a06bac911afaf9a99782772de40655484edf1273e4c67421a04d53428bd8b7cb925d3b90c6392860282402a4253d2d6335095f2fa182445a6b02b5772f5d18b4022955a89b6f0c84cb27a22d97e05b64077952ffbca0c92a51d4a1f8562de7e5c9bef95d1fd31e82e0b6d725750cd4a4d871aff17a29a7e8a6729d8a9882320df29b11e1485a7461319496f729c70b010dbce997a3fed5d6b4e942045736da3737f4e661ae616505308dad7fc603dcfc3b9f16087e740a214ce5426790eccc186f9987cb7ca9f66b92d93349666053c1fdea859293361", 0xe7}, {&(0x7f00000002c0)="593f3a9d306ec176ffb7041e2f9e4c6844e1a73d5a067474a8497fb370e05e92663bfeb18ce79a8fa1ecfd11282c810c5e124d9304012e7104aed8f6b36da1bad281bf070a08946fb783eed1651d155603a894d49bbc0435ae74a63fe7d856646bc85e527e1e89b0f1be79aa832780f5914a80a874f7fe9141fecc745bba752b2383e887b5deed505f7decc92412cc3d0cc357f4eb08ce8a69f63289bc7558cf014b11da1572d4b3c097398f40f2558324f392ddf9a63eb21aed1a4a29b48ab405dcb8e869be3f80c1d758ec9684450109223514357f7023ecd9b86abe5b2d5f876dbbc0bbdb8b5e9f40148240", 0xed}, {&(0x7f0000000080)="0107525c57964b19a05440dad506c3314f5bdb05f57107a129127f1a0f6457e10a4fa33f984ff5d54c34f51d951e6b3619d945297070b227dbbcd557291141eb85b0f4f96106b2125efb04f2843caf0b2134f10e0a862e4fc368fa8eac9d1400841f30a39b67a6cba13bd82d072eed4a4aaebc54f1fd4ffa411cd48219ea35e5e9cb93383a672d9a618efe62ceb93f7bcfaa7fb908bffdb85a52ae7b0ff5339c9e02c44ddb3acbde789dca530b3e16a2723580", 0xb3}, {&(0x7f0000000400)="2da1437559c40fbef799f9449fe3b048c369a6bab05ed4e6a381da97e8636839c8d30ca3a40b12766704d7de5bbe9faa35d4afbca2657e3ca190208e851493911a60b8bed6ea53ed679bd2dfbe880b0962a55db6e3ae00cb29468bab90757d37bffd37b5dae720e81f0ca1c2f74cb5064dd53aa3526d787bb3eb0250c311e30cce433b661a0b6de927460d163982f93329a38763a316fa3ee09612febec0bbe7004a8e15c5", 0xa5}], 0x4, 0x6, 0x8, 0x16) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000054c0), 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0xff, 0x2, 0x3f, 0x0, 0x6, 0x82082, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x100, 0x7, 0x3f, 0x2, 0x5, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r2, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 282.697218] loop5: detected capacity change from 0 to 64 02:05:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 282.704846] vfat: Unknown parameter '00000000000000000003' [ 282.719369] loop6: detected capacity change from 0 to 64 [ 282.730552] vfat: Unknown parameter '00000000000000000003' 02:05:45 executing program 7: setregid(0x0, 0xee01) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000000c0)=""/143, 0x8f}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f00000005c0)=""/133, 0x85}], 0xa, &(0x7f0000000740)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/139, 0x8b}, {&(0x7f0000000a80)=""/106, 0x6a}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c80)=""/107, 0x6b}, {&(0x7f0000000d00)=""/16, 0x10}, {&(0x7f0000000d40)=""/84, 0x54}, {&(0x7f0000000dc0)=""/233, 0xe9}, {&(0x7f0000000ec0)=""/108, 0x6c}, {&(0x7f0000000f40)=""/41, 0x29}, {&(0x7f0000000f80)=""/183, 0xb7}, {&(0x7f0000001040)=""/161, 0xa1}], 0x8, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001300)=""/115, 0x73}, {&(0x7f0000001380)=""/33, 0x21}, {&(0x7f00000013c0)=""/247, 0xf7}, {&(0x7f00000014c0)=""/11, 0xb}, {&(0x7f0000001500)=""/101, 0x65}], 0x5}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)=""/246, 0xf6}], 0x1}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001c00)=[{&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/6, 0x6}, {&(0x7f00000018c0)=""/146, 0x92}, {&(0x7f0000001980)=""/131, 0x83}, {&(0x7f0000001a40)=""/77, 0x4d}, {&(0x7f0000001ac0)=""/106, 0x6a}, {&(0x7f0000002740)=""/113, 0x71}, {&(0x7f0000001bc0)=""/50, 0x32}], 0x8, &(0x7f0000001c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/82, 0x52}, {&(0x7f0000001e80)=""/42, 0x2a}], 0x2, &(0x7f0000001f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/227, 0xe3}], 0x1, &(0x7f0000002100)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002180)=""/118, 0x76}, {&(0x7f0000002200)=""/32, 0x20}, {&(0x7f0000002240)=""/41, 0x29}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/241, 0xf1}, {&(0x7f0000001b40)=""/8, 0x8}], 0x6}}], 0xa, 0x120, &(0x7f00000026c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002700)={r0, 0x0, 0xee01}, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) 02:05:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:45 executing program 6: syz_mount_image$iso9660(&(0x7f0000001e00), &(0x7f0000001e40)='./file1\x00', 0x0, 0x1, &(0x7f0000002080)=[{&(0x7f0000001f00)="c6", 0x1}], 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="6f76657a72696465726f636b7065726d2c6d61703d6e6f726d616c2c736d18139315736465882caa58637674617030002c00"]) 02:05:45 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) 02:05:45 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/31, 0x1f}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/160, 0xa0}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/141, 0x8d}], 0x7}, 0x3) r1 = signalfd4(r0, &(0x7f0000000b00)={[0x6]}, 0x8, 0x80000) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)="e80e11b09d40e8233518fad9193538604a06bac911afaf9a99782772de40655484edf1273e4c67421a04d53428bd8b7cb925d3b90c6392860282402a4253d2d6335095f2fa182445a6b02b5772f5d18b4022955a89b6f0c84cb27a22d97e05b64077952ffbca0c92a51d4a1f8562de7e5c9bef95d1fd31e82e0b6d725750cd4a4d871aff17a29a7e8a6729d8a9882320df29b11e1485a7461319496f729c70b010dbce997a3fed5d6b4e942045736da3737f4e661ae616505308dad7fc603dcfc3b9f16087e740a214ce5426790eccc186f9987cb7ca9f66b92d93349666053c1fdea859293361", 0xe7}, {&(0x7f00000002c0)="593f3a9d306ec176ffb7041e2f9e4c6844e1a73d5a067474a8497fb370e05e92663bfeb18ce79a8fa1ecfd11282c810c5e124d9304012e7104aed8f6b36da1bad281bf070a08946fb783eed1651d155603a894d49bbc0435ae74a63fe7d856646bc85e527e1e89b0f1be79aa832780f5914a80a874f7fe9141fecc745bba752b2383e887b5deed505f7decc92412cc3d0cc357f4eb08ce8a69f63289bc7558cf014b11da1572d4b3c097398f40f2558324f392ddf9a63eb21aed1a4a29b48ab405dcb8e869be3f80c1d758ec9684450109223514357f7023ecd9b86abe5b2d5f876dbbc0bbdb8b5e9f40148240", 0xed}, {&(0x7f0000000080)="0107525c57964b19a05440dad506c3314f5bdb05f57107a129127f1a0f6457e10a4fa33f984ff5d54c34f51d951e6b3619d945297070b227dbbcd557291141eb85b0f4f96106b2125efb04f2843caf0b2134f10e0a862e4fc368fa8eac9d1400841f30a39b67a6cba13bd82d072eed4a4aaebc54f1fd4ffa411cd48219ea35e5e9cb93383a672d9a618efe62ceb93f7bcfaa7fb908bffdb85a52ae7b0ff5339c9e02c44ddb3acbde789dca530b3e16a2723580", 0xb3}, {&(0x7f0000000400)="2da1437559c40fbef799f9449fe3b048c369a6bab05ed4e6a381da97e8636839c8d30ca3a40b12766704d7de5bbe9faa35d4afbca2657e3ca190208e851493911a60b8bed6ea53ed679bd2dfbe880b0962a55db6e3ae00cb29468bab90757d37bffd37b5dae720e81f0ca1c2f74cb5064dd53aa3526d787bb3eb0250c311e30cce433b661a0b6de927460d163982f93329a38763a316fa3ee09612febec0bbe7004a8e15c5", 0xa5}], 0x4, 0x6, 0x8, 0x16) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000054c0), 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0xff, 0x2, 0x3f, 0x0, 0x6, 0x82082, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x100, 0x7, 0x3f, 0x2, 0x5, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r2, 0x2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:05:45 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 282.957454] iso9660: Unknown parameter 'ovezriderockperm' 02:05:45 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) [ 282.966260] iso9660: Unknown parameter 'ovezriderockperm' [ 282.975312] loop5: detected capacity change from 0 to 64 [ 282.983625] vfat: Unknown parameter '00000000000000000003' [ 283.069825] loop7: detected capacity change from 0 to 64 [ 283.074237] vfat: Unknown parameter '00000000000000000003' 02:05:54 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) 02:05:54 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(0x0, 0x0, 0xf6) close_range(r0, r1, 0x0) 02:05:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:54 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) 02:05:54 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) 02:05:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:05:54 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES16], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x41c}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64], 0x9) r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000440)=0x2, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1ff0000000000000, 0x200000) bind$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0xfffffffffffffe78) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYRES32, @ANYRES64=0x0, @ANYBLOB="ec58f73e642e305db92c0c74b57db7e9d93b71fcd2be1f6cdf4fb8cbf62ae3720afafad57aac64760c2d3fbe4e5a9b1e3320a4c307828e2a4458677a989d8b9738c2c8fb33b8b3c4b90be6ea078bb8bb15286472213f6623dd853c37d0b02589bac2a51d303900000000000000a7c6ba3c054d0ac619a2c9b5c655801dca2b608d47f0cdd9f798161c23280dbee87a2983ba38ebaf1590731d9d877a4b025c0dc2668d6402829f33d5349125fecbedfc9feaf5693170da7700000000000000", @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRES16], 0x29) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="03c900b8d133c9e09cc407aad130833b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db15a7641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bbc2af9a2276dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"], 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) [ 291.388633] loop5: detected capacity change from 0 to 64 [ 291.393714] vfat: Unknown parameter '00000000000000000003' [ 291.443286] loop6: detected capacity change from 0 to 64 [ 291.448571] Bluetooth: hci1: unexpected event for opcode 0x041c [ 291.454252] vfat: Unknown parameter '00000000000000000003' [ 291.472584] loop4: detected capacity change from 0 to 64 [ 291.474991] Bluetooth: hci1: unexpected event for opcode 0x041c [ 291.477876] vfat: Unknown parameter '00000000000000000003' [ 295.483164] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 295.484812] Bluetooth: hci1: Injecting HCI hardware error event [ 295.487808] Bluetooth: hci1: hardware error 0x00 [ 297.529425] Bluetooth: hci1: Opcode 0x0c03 failed: -110 02:06:03 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(0x0, 0x0, 0xf6) close_range(r0, r1, 0x0) 02:06:03 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)=',{\x00'], &(0x7f0000000180)=[&(0x7f0000000100)='/*#,!{]]/\xee\x89\x00', &(0x7f0000000140)='\'~]#)\x00']) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000700)={0x7d, 0x4, 0x1}) 02:06:03 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) 02:06:03 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x15}, 0x4800, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 02:06:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 4: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000c00), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1b8, 0x0, 0x4, 0xfffff000, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x1f}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffffffe0}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r5}], 0x1, 0xf6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000dd016ddbba8937b3951fa9934e9900002e2f66696c6531006cb2d33412c561837a01a2ea92b9f8db287301de06676b2caddd2a2ec77d1c5b9105f598bfc55447fef7841b9bab285ec4c02d99608595dc5c2b384f7d76402cdde3f5bccf0c484749e094ee90c442e09175ff6163ff373fdc1d66ccb9a17012decc3bc0fe67e0797b633a929e1b2cd2ef86289a90bbc4e4b5e910d6134505f83cbc13664fa824546486259bf28f2c4ae5f7a9d3ad96d0f4360281"]) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, 0x0, 0x0, 0x4) [ 300.345652] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 125 (only 16 groups) [ 300.369740] loop5: detected capacity change from 0 to 64 02:06:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 300.405277] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 300.405898] vfat: Unknown parameter '00000000000000000003' [ 300.430630] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 125 (only 16 groups) 02:06:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xa4, 0x0, 0x5, 0x1, 0x0, 0xaae9, 0x3200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x24, 0x80000000, 0x3, 0x8, 0x70e, 0x93e5, 0x5, 0x0, 0x5, 0x0, 0x4}, r0, 0x7, 0xffffffffffffffff, 0x0) 02:06:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = getpid() r6 = pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) 02:06:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:03 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 300.624187] loop5: detected capacity change from 0 to 64 [ 300.637917] vfat: Unknown parameter '00000000000000000003' 02:06:03 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(0x0, 0x0, 0xf6) close_range(r0, r1, 0x0) 02:06:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 300.686445] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:06:03 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) 02:06:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = getpid() r6 = pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) [ 300.758796] loop5: detected capacity change from 0 to 64 [ 300.762184] vfat: Unknown parameter '00000000000000000003' [ 300.789317] loop6: detected capacity change from 0 to 64 [ 300.809239] vfat: Unknown parameter '00000000000000000003' 02:06:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:13 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280), 0x0, 0xf6) close_range(r0, r1, 0x0) 02:06:13 executing program 7: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x12, 0x20, 0xc, "dfc22ecffa13a3113cefaaa3b79c5b85a4e126866aac3a98f15e8484e258ca4eb157ccc1a1dabd19175879156cc306e861c1b4896bf421ce21e3c49f780c8214", "6caba7fd97697bc8cde4beb89d0228fe1e8f0e5567a5419e0dcda9ea1fc0e57ecd801084a9b4679f90993ba100756febbf2575113043d28fcf8487791b812826", "3930ccc8c782eead65ce589200f75a2977d9e5851c1757434bae2c1ec7168686", [0x7fffffff, 0x7]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) dup2(r0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8, 0x5}, 0x3440, 0x0, 0x4000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x36) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x8, 0xfb, 0x81, 0x0, 0xff, 0x68820, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x1, @perf_config_ext={0x1000, 0x100000001}, 0x4660e, 0xe7, 0x1, 0x0, 0x8, 0x9, 0xfc, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r1, 0x324, 0x0) 02:06:13 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x400001, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) pwrite64(r0, &(0x7f00000000c0)="d1", 0x1, 0xfff2) pwritev2(r1, &(0x7f0000002700)=[{0x0}, {&(0x7f0000000200)="ea", 0x1}], 0x2, 0x0, 0x0, 0x0) 02:06:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x602, 0x2) r5 = getpid() r6 = pidfd_open(r5, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) 02:06:13 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa003, 0x4000000000000000, 0x10, 0x0, 0x0, 0xff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x7f, 0x7f, 0x97, 0x0, 0x78, 0x222, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x9, 0xb9b}, 0x4340f, 0xc376, 0x1f04486e, 0x5, 0x200, 0x100, 0x5, 0x0, 0x5, 0x0, 0x3ed5}, 0xffffffffffffffff, 0xa, r0, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 02:06:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 310.490146] loop5: detected capacity change from 0 to 64 [ 310.503482] vfat: Unknown parameter '00000000000000000003' [ 310.535293] audit: type=1400 audit(1767751573.310:12): avc: denied { tracepoint } for pid=4884 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:06:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280), 0x0, 0xf6) close_range(r0, r1, 0x0) 02:06:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa003, 0x4000000000000000, 0x10, 0x0, 0x0, 0xff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x7f, 0x7f, 0x97, 0x0, 0x78, 0x222, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x9, 0xb9b}, 0x4340f, 0xc376, 0x1f04486e, 0x5, 0x200, 0x100, 0x5, 0x0, 0x5, 0x0, 0x3ed5}, 0xffffffffffffffff, 0xa, r0, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 02:06:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r5 = getpid() r6 = pidfd_open(r5, 0x0) pidfd_getfd(r6, r4, 0x0) 02:06:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:23 executing program 7: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x12, 0x20, 0xc, "dfc22ecffa13a3113cefaaa3b79c5b85a4e126866aac3a98f15e8484e258ca4eb157ccc1a1dabd19175879156cc306e861c1b4896bf421ce21e3c49f780c8214", "6caba7fd97697bc8cde4beb89d0228fe1e8f0e5567a5419e0dcda9ea1fc0e57ecd801084a9b4679f90993ba100756febbf2575113043d28fcf8487791b812826", "3930ccc8c782eead65ce589200f75a2977d9e5851c1757434bae2c1ec7168686", [0x7fffffff, 0x7]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) dup2(r0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8, 0x5}, 0x3440, 0x0, 0x4000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x36) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x8, 0xfb, 0x81, 0x0, 0xff, 0x68820, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x1, @perf_config_ext={0x1000, 0x100000001}, 0x4660e, 0xe7, 0x1, 0x0, 0x8, 0x9, 0xfc, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r1, 0x324, 0x0) 02:06:23 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fb4}, 0xc04a, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000540)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x45) fcntl$setstatus(r1, 0x4, 0x44000) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xffffffff, 0x4000) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000740)=""/4096) sendfile(r1, r2, 0x0, 0xfdef) 02:06:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 321.189816] loop5: detected capacity change from 0 to 64 [ 321.192958] vfat: Unknown parameter '00000000000000000003' 02:06:24 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) pidfd_getfd(r5, r3, 0x0) 02:06:24 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x144) [ 321.294208] loop5: detected capacity change from 0 to 64 [ 321.312433] vfat: Unknown parameter '00000000000000000003' [ 321.331698] loop4: detected capacity change from 0 to 64 02:06:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 321.399690] FAT-fs (loop4): bogus number of reserved sectors [ 321.400247] FAT-fs (loop4): Can't find a valid FAT filesystem 02:06:24 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 321.410166] loop4: detected capacity change from 0 to 64 02:06:24 executing program 7: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) [ 321.423909] FAT-fs (loop4): bogus number of reserved sectors [ 321.425249] FAT-fs (loop4): Can't find a valid FAT filesystem 02:06:24 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:24 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) pidfd_getfd(r5, r3, 0x0) [ 321.466587] loop5: detected capacity change from 0 to 64 [ 321.472336] vfat: Unknown parameter '00000000000000000003' 02:06:24 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x3, 0xff, "4ea063", 0x1aa1, 0x81, "ee5be9fad0afbced029934055191c13334c8e56b9cc9d5fed6432f0cec4777f01eaa01d7e62a0ee3c59bd3c3547cb5ee30eac21c2dae6259d1b08293139e74cb904b924e8157656a939f39fb60370033f940c63b0671a8210e199f2fad34b6122a2e0a54469e1591f1bac6c90664b2a7c4bc90e58b92ac5cfbe270c578f140508a6399e7d8e54be5cc5f1bee8615e905528ed823472d1f51ebef6ba49c872d67165018b6e9a746c36ad2695a2b0168f9365502f17bcd735b1898fa225558025d2c1c4c2c3fe52a99df7a3b0c13489d860f463629971f096f8fd066d07b3593e06213fad252e2da877929821c0cb691bf"}, {@any, 0x40, 0x40, "6eee58", 0xbe2, 0x44, "1a5da4c232a5173b758062c1093d420a5884c68d3bb9dbd48eb6fa7dc8cb8a8322bb31984c8b7e1c8c6d27f8cde6412bbc4e69684fd82eefe96188f6b172ea9262a6a5a3e177d571c8d8c59ad8368d2fca481e22d6a436496b356f4868f79d206e917b6d358bea6d96419ccc4102b0fd15471032c6c4647ebdeb207cb86729e340a0b393b14e31677ee04c142fcace66c423da83846f55ff9c088f89e5d281dc4b33f8ac243b58c4cdcc4d30cdf3f3383f2f24e2d5b9f0074c611703c4195c87f9f307572d5dbd245d4087a8b7c3862fbe1b1c98b5c0b7091d8784984140960cc0e2298d74faa10ccac7a317244457c7"}, {@any, 0x0, 0x9, "4b1a06", 0x9b, 0x6a, "1d44a59870ee687af0ba6d20ae9fdf9231f4d05e1e0b8a98b89a185532129801970ebe139c5e28ccbcf03f7cda05bf93803b16d57dedbba7ac104977519b6dbb421f94a73d157c26038a0cf963bda22af8a047f56506b12290e3258ef369ce844b7d754009084f3ee94b30ccb6031edeab78a0e2e24857771c32b7b0c84bb6aa3aa50a4633eb49919e7e134654f606d5d76c45e89d249e0334531abab7ef26c87b60c5ea66ea045f28807312ec5dd87ecaeb8c20c4457f68f88cb1a2665e01346d44d8d3b6484b44394646da378fe6cd5cde6d0888216454904bef9ae85af680b407a69460dd54cd0d33c0da6d2736d3"}]}}}, 0x2fe) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="7576aa8c9fbd90dcde333906729b15842c6659d4863c1370699083f827640fc66fa14dd7f7a45c125c052f3119df54590feea87b6f5d631206b2621acf9c9e6070af76f0b375cb94b1212a458dec349958f0d204b5b7b78bea5a4fa70688dd0b1d1ec307159f65c4e51d77f90ce5c97fc7f44acd58d8cbcb6e2b0b45f787d54594184871a2443ed0e224306e635c40d1313993aa53788022c062e22b8d5d40c86846ea762e25a5cb03b0aa12a5d3000000", @ANYRES16, @ANYRESOCT], 0x5) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0xf, 0x4}, {0x0, 0xffff}}}}, 0x11) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x1037}, @l2cap_cid_signaling={{0x1033}, [@l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0xfff, 0x1}}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x4, 0xfeff}}, @l2cap_info_rsp={{0xb, 0x3, 0x1004}, {0x81, 0x81, "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"}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x2, 0x1}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xffff, 0x8, 0x8, 0x8}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x4, 0xff}}]}}, 0x103c) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYRESOCT], 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 02:06:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:24 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280), 0x0, 0xf6) close_range(r0, r1, 0x0) 02:06:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000700)="eb58906d6b66020000000020004000030000000000000001000000000000000000000000006e87c87cf2f7c45339755ad4e8c3997e04d9da8b9f001fefe8967937c0dc8f2c229d0e", 0x48, 0x4}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00f78622783d23fc238a1d3447c1c4efaceaeba3002bef7184f79cfa11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6", @ANYRESHEX=r0]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f0000001400)=""/85, 0x55}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018006374b4e300000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x81) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 02:06:24 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:24 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 321.707702] loop4: detected capacity change from 0 to 64 [ 321.722521] loop5: detected capacity change from 0 to 64 [ 321.734796] vfat: Unknown parameter '00000000000000000003' [ 321.739616] FAT-fs (loop4): bogus number of FAT structure [ 321.741145] FAT-fs (loop4): Can't find a valid FAT filesystem [ 321.965017] loop4: detected capacity change from 0 to 64 02:06:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:06:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:35 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000700)="eb58906d6b66020000000020004000030000000000000001000000000000000000000000006e87c87cf2f7c45339755ad4e8c3997e04d9da8b9f001fefe8967937c0dc8f2c229d0e", 0x48, 0x4}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00f78622783d23fc238a1d3447c1c4efaceaeba3002bef7184f79cfa11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6", @ANYRESHEX=r0]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f0000001400)=""/85, 0x55}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018006374b4e300000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x81) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 02:06:35 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000700)="eb58906d6b66020000000020004000030000000000000001000000000000000000000000006e87c87cf2f7c45339755ad4e8c3997e04d9da8b9f001fefe8967937c0dc8f2c229d0e", 0x48, 0x4}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00f78622783d23fc238a1d3447c1c4efaceaeba3002bef7184f79cfa11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6", @ANYRESHEX=r0]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f0000001400)=""/85, 0x55}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018006374b4e300000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x81) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) [ 332.945916] loop7: detected capacity change from 0 to 64 [ 332.960549] vfat: Unknown parameter '00000000000000000003' [ 332.977825] loop4: detected capacity change from 0 to 64 [ 332.993864] loop6: detected capacity change from 0 to 64 [ 333.005214] FAT-fs (loop4): bogus number of FAT structure [ 333.006186] FAT-fs (loop4): Can't find a valid FAT filesystem [ 333.013521] loop5: detected capacity change from 0 to 64 [ 333.027139] FAT-fs (loop6): bogus number of FAT structure [ 333.028342] FAT-fs (loop6): Can't find a valid FAT filesystem [ 333.048097] vfat: Unknown parameter '00000000000000000003' 02:06:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x5, 0x40, 0xff, 0x0, 0x0, 0xcc04, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffe00, 0x8}, 0xa0, 0x20, 0x200, 0x0, 0x9, 0x6, 0x5, 0x0, 0x80000000, 0x0, 0x569}, 0x0, 0xa, r0, 0x2) open$dir(&(0x7f0000002800)='./file0\x00', 0x40, 0x0) 02:06:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:36 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, r1, 0x0) [ 333.323735] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 333.340081] loop5: detected capacity change from 0 to 64 [ 333.425898] vfat: Unknown parameter '00000000000000000003' [ 333.453421] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:06:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:44 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{}], 0x1, 0xf6) close_range(r0, r1, 0x0) 02:06:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='..file0\x00']) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x2, @loopback, 0x8eb}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="35941b0c18724f007aacb8751bbcb79c657fedb9689ea8fe3cd567957bbd2e8343209c2fbe2ff2a5b7025e4cc50a8c1bbd2511022c05a66a668f3eee56385484253421a63c1cc4ddbb170895ffd0c8b32fe368e51dd29e43e890fd0e1ff574b194df453ed6a9f515231f78ac4a46d5", 0x6f}, {&(0x7f0000000180)="bcf59000ad0e81b615b3595041666aad9b1a0162f99505f791b2c1f0450bf719c6e91632570840d074581e6afb2b6217ac06d6ba9e596b39056d659c60f0921fc1ee227d89f3a227bbb3d38d37665d49195fb150bad017a1b410bbf6", 0x5c}, {&(0x7f0000000200)="faa247676732613c5de62a9440a271975f9caff0c1fad42467f513cd07dacb732b161de973b6bdd027a967ec7464439073ad497e09503ab3006bc49bc8d468484a6be8059f59824c4f60cdbc553dff77036d5b9c28e13c63f049", 0x5a}], 0x3, &(0x7f00000002c0)}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="38b6eca32dea2d5ef160cae6bf0df1fcea0ea031d9452b3cce14707153e7e0bae42387a5769b1a92ad3efcf7fbc15e8d2497b9be908c6b93eb37bf972d49682194d5ef1cc5fadc69344962cb3eeeb7f5a8d7b0374aa6273ff57d0f4b19342e6750f1d986138b978607f3d6fefbe87f2650ed6c257b3b54e487c950801261345d1009c45ffb05672f1dd57ec4f44a863f427401f51bfb7b14b403c5888da98a64e3a3132f02390db368233b28053585312ad14ae3581758805ec3d723565616aa2b80b74d8f07353b810833b2685a5e31d43c078c24c17d86b6cc30a06bb0ae1f4293400245df1e655979c1b6bc5b", 0xee}, {&(0x7f0000000440)="2dc0278913ee2de4a245242555748dc92a2ee3c0b96c9e661e1416119be73fe7a8ec81be3902a0adf2da779f3428adb38773201e92aec9e5cd5045d9e8629ee86767a741a559498452f5fe564786691a4054decf93b9713a559d4fd51ca0a07619fa243e6c37f82e110579d3d4ee87be5b0794a02fc4f9dd38659f48275324dc0186b8cc5161407b1c16f576a732c6fb5ef8c9e271cc5492954b0796c5ba849f767471fa1606ca29b2db7655a70c76844d6c1bbc0412ae6cbd4495fce6c7f55f0e052adc0810c852c28e742d729a22921b6469a54639d50a5165fede0a2aa4e191de", 0xe2}], 0x2, &(0x7f0000000580)=[@hopopts={{0x88, 0x29, 0x36, {0x33, 0xd, '\x00', [@generic={0x81, 0x6b, "28e5b818088e869644efc2b42a9f9ff4d0e0602e9e29abcf293d59aea0ec3ea6fc61e3a2726cce8c42e8f20cbba2910a3875eea1d11582d536af144ff036eca73fa2fa303f2ad86cf17deab2ff778d7a2fd6aa2130418f2e3b2710ab38e04edc82c44a80ffd8540485f8e3"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x613}}], 0xa0}}], 0x2, 0x4000080) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0)=0x1ec6, 0x4) sendmmsg$inet6(r0, &(0x7f0000007780)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 02:06:44 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x55113be1a1bbaf68, 0x0) setns(r1, 0x4000000) 02:06:44 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 342.074800] loop5: detected capacity change from 0 to 64 [ 342.083463] loop6: detected capacity change from 0 to 64 [ 342.111821] vfat: Unknown parameter '00000000000000000003' [ 342.114759] vfat: Unknown parameter '00000000000000000003' 02:06:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:44 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x55113be1a1bbaf68, 0x0) setns(r1, 0x4000000) 02:06:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:45 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) close_range(r0, r1, 0x0) 02:06:45 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x55113be1a1bbaf68, 0x0) setns(r1, 0x4000000) [ 342.341628] loop5: detected capacity change from 0 to 64 02:06:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 342.346330] vfat: Unknown parameter '00000000000000000003' 02:06:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x100599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:53 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0xfffffffffffffd51}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0x104}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000bf1c5a9253fdba268f2fb5ae94fb6afce807095049bd2b47592352279c05867f5a3c86ad6377a574cf029d6cbbaf0c4d4250", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) close_range(r0, r1, 0x0) 02:06:53 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x55113be1a1bbaf68, 0x0) setns(r1, 0x4000000) 02:06:53 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000f, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="30000000ea5eac89e31695ecf8619c5ef23567c1073dd6ef1c8857bb6d24e67fa357b4299437223b0c29a00185aa36251ce8ea547db1377182f71ed084abfc4301e1b537cea81914b9f6", @ANYRES16=r3, @ANYBLOB="053500000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="11000800b3b73eb0d57b1fc836a19eacf1000000ec02454981221dcb0334a7fb6acac0e300743130367de43b"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r5, 0xcd78359539483505, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x8, "b3b73ec6b4688ac836a19eacf1"}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0xc7967a74f63b8fed, 0x1, 0x8, 0x8, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0x10, 0x33, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth0_vlan\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030003000000df00030073cbb22de441453b4d4038764a8aa61f4ba4a82bd365bd762ac200870a0ad85814309c9f137ac8fd985226542f2e49053466bb03fbd3a2602776f65d2f206a07faaf1750cf7020b53d5d6f8f3ee3b1acd5359954533fcc8fbec85a967d4269d5ec9c301ad4caadb02671e7bbe60983ce7201aabd473601f4bf7212a1336f89ae21b3e756ec6b08918ba9e38f088747b41345ccaaf6149f427c665a89a6ca76c33ad858fe25fa70a9386dffa9deacec0b78aef0a3cd384809dd61aea8633d20ad1efd08f16d07cb74ce3a0cd1e1c2fdb093bff26326048e1add71ae00"], 0x3ec}, 0x1, 0x0, 0x0, 0x40859}, 0x40894) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xec, 0x8, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x881}, 0x4000010) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r9}], 0x1, 0xf6) copy_file_range(r9, &(0x7f00000002c0)=0x7f, r1, &(0x7f0000000300)=0x5, 0xffff, 0x0) pread64(r1, &(0x7f0000001780)=""/4102, 0x1006, 0x0) [ 351.038474] loop6: detected capacity change from 0 to 64 02:06:53 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x55113be1a1bbaf68, 0x0) [ 351.050145] loop5: detected capacity change from 0 to 64 [ 351.060316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24298 sclass=netlink_route_socket pid=5085 comm=syz-executor.7 [ 351.061980] vfat: Unknown parameter '00000000000000000003' 02:06:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 351.077339] vfat: Unknown parameter '00000000000000000003' 02:06:53 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) close_range(r0, r1, 0x0) [ 351.092780] netlink: 'syz-executor.7': attribute type 8 has an invalid length. 02:06:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) [ 351.159822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5095 comm=syz-executor.7 [ 351.171037] audit: type=1400 audit(1767751613.947:13): avc: denied { map } for pid=5077 comm="syz-executor.7" path="/proc/5077/smaps_rollup" dev="proc" ino=9428 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 351.171233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5095 comm=syz-executor.7 02:06:53 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) 02:06:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) 02:06:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 351.262661] loop5: detected capacity change from 0 to 64 [ 351.270058] vfat: Unknown parameter '00000000000000000003' 02:06:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:54 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) 02:06:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:06:54 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) [ 351.398127] loop5: detected capacity change from 0 to 64 [ 351.406191] vfat: Unknown parameter '00000000000000000003' 02:06:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 351.466467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24298 sclass=netlink_route_socket pid=5095 comm=syz-executor.7 [ 351.477023] netlink: 'syz-executor.7': attribute type 8 has an invalid length. [ 351.539719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5085 comm=syz-executor.7 [ 351.541846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz-executor.7 02:07:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000000180)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) 02:07:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:03 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:03 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) 02:07:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 360.771914] loop5: detected capacity change from 0 to 64 [ 360.819053] vfat: Unknown parameter '00000000000000000003' 02:07:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:03 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:03 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0xf6) close_range(0xffffffffffffffff, r0, 0x0) 02:07:13 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 4: setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 4: setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:13 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 371.055191] 9p: Bad value for 'rfdno' 02:07:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 371.173545] 9p: Bad value for 'rfdno' 02:07:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) close_range(r0, 0xffffffffffffffff, 0x0) 02:07:23 executing program 4: setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:23 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:23 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) [ 380.312248] 9p: Bad value for 'rfdno' 02:07:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:23 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:23 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:23 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:34 executing program 7: r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:34 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:34 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:34 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:34 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:34 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:44 executing program 7: r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 6: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 7: r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:44 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:53 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:53 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 6: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:53 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) [ 410.314277] 9p: Bad value for 'rfdno' 02:07:53 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) 02:07:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:53 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) [ 410.432946] 9p: Bad value for 'rfdno' 02:07:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:07:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:53 executing program 6: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:07:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:07:53 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, 0x0, 0x0) [ 410.588512] 9p: Bad value for 'rfdno' 02:08:01 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, 0x0, 0x0) 02:08:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:01 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:01 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, 0x0, 0x0) 02:08:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:01 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:01 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, 0x0, 0x0) 02:08:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:10 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, 0x0, 0x0) 02:08:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:10 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, 0x0, 0x0) 02:08:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:18 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:18 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:18 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setresuid(0x0, 0xee01, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:18 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 439.737918] kworker/u9:0 (25) used greatest stack depth: 24048 bytes left 02:08:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:27 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:27 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:27 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1}, 0x0) 02:08:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:28 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:28 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:36 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:36 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 454.134696] 9p: Bad value for 'rfdno' 02:08:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 454.232285] 9p: Bad value for 'rfdno' 02:08:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0xc5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 454.351301] 9p: Bad value for 'rfdno' 02:08:37 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 465.681097] 9p: Bad value for 'rfdno' 02:08:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:08:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 474.968247] 9p: Bad value for 'rfdno' 02:08:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) pidfd_getfd(r1, r0, 0x0) 02:08:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:08:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:08:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 475.137086] 9p: Bad value for 'rfdno' [ 475.186257] 9p: Bad value for 'rfdno' 02:09:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 1) 02:09:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) pidfd_getfd(r1, r0, 0x0) [ 485.357989] FAULT_INJECTION: forcing a failure. [ 485.357989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 485.359063] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 485.359084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 485.359092] Call Trace: [ 485.359098] [ 485.359104] dump_stack_lvl+0xfa/0x120 [ 485.359148] should_fail_ex+0x4d7/0x5e0 [ 485.359174] _copy_from_user+0x30/0xd0 [ 485.359198] do_handle_open+0xd5/0xd10 [ 485.359219] ? __pfx_do_handle_open+0x10/0x10 [ 485.359240] ? ksys_write+0x1a3/0x240 [ 485.359266] ? __pfx_ksys_write+0x10/0x10 [ 485.359308] do_syscall_64+0xbf/0x420 [ 485.359334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.359357] RIP: 0033:0x7f313d695b19 [ 485.359374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.359389] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 485.359404] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 485.359414] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 485.359424] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 485.359434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.359443] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 485.359465] [ 485.394399] 9p: Bad value for 'rfdno' 02:09:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) pidfd_getfd(r1, r0, 0x0) 02:09:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() pidfd_open(r1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 02:09:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 2) 02:09:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() pidfd_open(r1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 485.634167] 9p: Bad value for 'rfdno' 02:09:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 485.649635] FAULT_INJECTION: forcing a failure. [ 485.649635] name failslab, interval 1, probability 0, space 0, times 1 [ 485.652997] CPU: 0 UID: 0 PID: 5661 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 485.653023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 485.653034] Call Trace: [ 485.653040] [ 485.653047] dump_stack_lvl+0xfa/0x120 [ 485.653080] should_fail_ex+0x4d7/0x5e0 [ 485.653110] should_failslab+0xc2/0x120 [ 485.653128] __kmalloc_noprof+0xd6/0x880 [ 485.653150] ? path_get+0x61/0x80 [ 485.653169] ? lock_release+0xc8/0x270 [ 485.653189] ? do_handle_open+0x5b1/0xd10 [ 485.653215] ? do_handle_open+0x5b1/0xd10 [ 485.653233] ? nsfs_export_permission+0x9/0x10 [ 485.653258] do_handle_open+0x5b1/0xd10 [ 485.653279] ? __pfx_do_handle_open+0x10/0x10 [ 485.653302] ? ksys_write+0x1a3/0x240 [ 485.653331] ? __pfx_ksys_write+0x10/0x10 [ 485.653371] do_syscall_64+0xbf/0x420 [ 485.653399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.653417] RIP: 0033:0x7f313d695b19 [ 485.653432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.653449] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 485.653465] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 485.653477] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 485.653487] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 485.653497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.653507] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 485.653529] 02:09:08 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 3) 02:09:08 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 4) 02:09:18 executing program 7: creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() pidfd_open(r1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 02:09:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 496.002130] FAULT_INJECTION: forcing a failure. [ 496.002130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.003304] CPU: 1 UID: 0 PID: 5694 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 496.003321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 496.003328] Call Trace: [ 496.003333] [ 496.003342] dump_stack_lvl+0xfa/0x120 [ 496.003366] should_fail_ex+0x4d7/0x5e0 [ 496.003387] _copy_from_user+0x30/0xd0 [ 496.003405] do_handle_open+0x655/0xd10 [ 496.003422] ? __pfx_do_handle_open+0x10/0x10 [ 496.003453] ? ksys_write+0x1a3/0x240 [ 496.003473] ? __pfx_ksys_write+0x10/0x10 [ 496.003497] do_syscall_64+0xbf/0x420 [ 496.003517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.003531] RIP: 0033:0x7f313d695b19 [ 496.003541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.003552] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 496.003564] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 496.003574] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 496.003584] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.003593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.003603] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 496.003627] 02:09:18 executing program 7: creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 02:09:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 5) 02:09:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 02:09:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 7: creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 504.414710] FAULT_INJECTION: forcing a failure. [ 504.414710] name failslab, interval 1, probability 0, space 0, times 0 [ 504.416010] CPU: 0 UID: 0 PID: 5730 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 504.416035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.416045] Call Trace: [ 504.416051] [ 504.416058] dump_stack_lvl+0xfa/0x120 [ 504.416089] should_fail_ex+0x4d7/0x5e0 [ 504.416116] ? alloc_inode+0x181/0x250 [ 504.416140] should_failslab+0xc2/0x120 [ 504.416160] kmem_cache_alloc_lru_noprof+0x84/0x770 [ 504.416187] ? stashed_dentry_get+0x26/0x2c0 [ 504.416207] ? find_held_lock+0x2b/0x80 [ 504.416236] ? stashed_dentry_get+0x10c/0x2c0 [ 504.416259] ? alloc_inode+0x181/0x250 [ 504.416281] alloc_inode+0x181/0x250 [ 504.416302] path_from_stashed+0x1b2/0x660 [ 504.416318] ? security_capable+0x2f/0x90 [ 504.416348] nsfs_fh_to_dentry+0x56a/0xf50 02:09:27 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 504.416374] ? __kasan_kmalloc+0x7f/0x90 [ 504.416391] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 504.416415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f 02:09:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 504.416442] exportfs_decode_fh_raw+0x16f/0x840 [ 504.416465] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 504.416480] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 504.416498] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 504.416527] ? __lock_acquire+0x451/0x2250 [ 504.416555] ? lock_acquire+0x15e/0x2d0 [ 504.416575] ? __might_fault+0xe0/0x190 [ 504.416591] ? find_held_lock+0x2b/0x80 [ 504.416612] ? __might_fault+0x138/0x190 [ 504.416627] ? lock_release+0xc8/0x270 [ 504.416644] ? __might_fault+0xe0/0x190 [ 504.416667] do_handle_open+0x77b/0xd10 [ 504.416682] ? __pfx_do_handle_open+0x10/0x10 [ 504.416699] ? ksys_write+0x1a3/0x240 [ 504.416725] ? __pfx_ksys_write+0x10/0x10 [ 504.416756] do_syscall_64+0xbf/0x420 [ 504.416774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.416786] RIP: 0033:0x7f313d695b19 [ 504.416796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.416811] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 504.416826] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 504.416837] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 504.416847] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.416857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.416864] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 504.416879] [ 504.483796] 9p: Bad value for 'rfdno' 02:09:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 6) 02:09:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) (fail_nth: 1) [ 504.634312] 9p: Bad value for 'rfdno' [ 504.700973] FAULT_INJECTION: forcing a failure. [ 504.700973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.702196] CPU: 1 UID: 0 PID: 5748 Comm: syz-executor.5 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 504.702217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.702228] Call Trace: [ 504.702234] [ 504.702240] dump_stack_lvl+0xfa/0x120 [ 504.702274] should_fail_ex+0x4d7/0x5e0 [ 504.702304] _copy_to_user+0x32/0xd0 [ 504.702331] simple_read_from_buffer+0xe0/0x180 [ 504.702365] proc_fail_nth_read+0x18a/0x240 [ 504.702387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.702407] ? security_file_permission+0x22/0x90 [ 504.702437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.702456] vfs_read+0x1eb/0xc70 [ 504.702484] ? __pfx___mutex_lock+0x10/0x10 [ 504.702508] ? __fget_files+0x34/0x3b0 [ 504.702524] ? __pfx_vfs_read+0x10/0x10 [ 504.702550] ? lock_release+0xc8/0x270 [ 504.702575] ? __fget_files+0x20d/0x3b0 [ 504.702599] ksys_read+0x121/0x240 [ 504.702624] ? __pfx_ksys_read+0x10/0x10 [ 504.702656] do_syscall_64+0xbf/0x420 [ 504.702683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.702700] RIP: 0033:0x7f71aad8869c [ 504.702713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 504.702729] RSP: 002b:00007f71a834b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.702744] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f71aad8869c [ 504.702754] RDX: 000000000000000f RSI: 00007f71a834b1e0 RDI: 0000000000000006 [ 504.702764] RBP: 00007f71a834b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.702773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.702783] R13: 00007ffc87467a2f R14: 00007f71a834b300 R15: 0000000000022000 [ 504.702807] 02:09:35 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:09:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:09:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:35 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 7) 02:09:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:35 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 512.728651] 9p: Bad value for 'rfdno' [ 512.737776] FAULT_INJECTION: forcing a failure. [ 512.737776] name failslab, interval 1, probability 0, space 0, times 0 [ 512.738719] CPU: 1 UID: 0 PID: 5765 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 512.738735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 512.738743] Call Trace: [ 512.738747] [ 512.738752] dump_stack_lvl+0xfa/0x120 [ 512.738779] should_fail_ex+0x4d7/0x5e0 [ 512.738801] ? security_inode_alloc+0x3e/0x130 [ 512.738819] should_failslab+0xc2/0x120 [ 512.738832] kmem_cache_alloc_noprof+0x80/0x760 [ 512.738850] ? __pfx_map_id_range_down+0x10/0x10 [ 512.738870] ? security_inode_alloc+0x3e/0x130 [ 512.738886] security_inode_alloc+0x3e/0x130 [ 512.738903] inode_init_always_gfp+0xc9d/0xff0 [ 512.738918] alloc_inode+0x8d/0x250 [ 512.738934] path_from_stashed+0x1b2/0x660 [ 512.738947] ? security_capable+0x2f/0x90 [ 512.738963] nsfs_fh_to_dentry+0x56a/0xf50 [ 512.738981] ? __kasan_kmalloc+0x7f/0x90 [ 512.738994] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 512.739012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.739031] exportfs_decode_fh_raw+0x16f/0x840 [ 512.739049] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 512.739067] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 512.739088] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 512.739107] ? __lock_acquire+0x451/0x2250 [ 512.739128] ? lock_acquire+0x15e/0x2d0 [ 512.739141] ? __might_fault+0xe0/0x190 [ 512.739152] ? find_held_lock+0x2b/0x80 [ 512.739170] ? __might_fault+0x138/0x190 [ 512.739180] ? lock_release+0xc8/0x270 [ 512.739193] ? __might_fault+0xe0/0x190 [ 512.739208] do_handle_open+0x77b/0xd10 [ 512.739222] ? __pfx_do_handle_open+0x10/0x10 [ 512.739238] ? ksys_write+0x1a3/0x240 [ 512.739256] ? __pfx_ksys_write+0x10/0x10 [ 512.739278] do_syscall_64+0xbf/0x420 [ 512.739297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.739309] RIP: 0033:0x7f313d695b19 [ 512.739318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.739329] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 512.739341] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 512.739349] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 512.739356] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.739362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.739369] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 512.739384] 02:09:35 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x6) 02:09:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x600) 02:09:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:09:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:43 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:09:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:43 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 8) 02:09:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:09:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 521.151247] 9p: Bad value for 'rfdno' 02:09:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x6000000) 02:09:43 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 9) 02:09:43 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:09:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:09:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 521.350577] FAULT_INJECTION: forcing a failure. [ 521.350577] name failslab, interval 1, probability 0, space 0, times 0 [ 521.351614] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 521.351630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 521.351638] Call Trace: [ 521.351642] [ 521.351646] dump_stack_lvl+0xfa/0x120 [ 521.351670] should_fail_ex+0x4d7/0x5e0 [ 521.351689] ? __d_alloc+0x34/0xa10 [ 521.351702] should_failslab+0xc2/0x120 [ 521.351715] kmem_cache_alloc_lru_noprof+0x84/0x770 [ 521.351733] ? inode_set_ctime_current+0x251/0x740 [ 521.351751] ? __d_alloc+0x34/0xa10 [ 521.351762] __d_alloc+0x34/0xa10 [ 521.351773] ? __ns_ref_active_get+0x79/0x160 [ 521.351789] path_from_stashed+0x373/0x660 [ 521.351815] ? security_capable+0x2f/0x90 [ 521.351840] nsfs_fh_to_dentry+0x56a/0xf50 [ 521.351863] ? __kasan_kmalloc+0x7f/0x90 [ 521.351878] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 521.351894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.351914] exportfs_decode_fh_raw+0x16f/0x840 [ 521.351931] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 521.351947] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 521.351964] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 521.351984] ? __lock_acquire+0x451/0x2250 [ 521.352003] ? lock_acquire+0x15e/0x2d0 [ 521.352016] ? __might_fault+0xe0/0x190 [ 521.352028] ? find_held_lock+0x2b/0x80 [ 521.352045] ? __might_fault+0x138/0x190 [ 521.352056] ? lock_release+0xc8/0x270 [ 521.352069] ? __might_fault+0xe0/0x190 [ 521.352084] do_handle_open+0x77b/0xd10 [ 521.352098] ? __pfx_do_handle_open+0x10/0x10 [ 521.352114] ? ksys_write+0x1a3/0x240 [ 521.352132] ? __pfx_ksys_write+0x10/0x10 [ 521.352154] do_syscall_64+0xbf/0x420 [ 521.352173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.352185] RIP: 0033:0x7f313d695b19 [ 521.352194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.352206] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 521.352217] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 521.352225] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 521.352232] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.352239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.352246] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 521.352261] [ 521.408797] 9p: Bad value for 'rfdno' [ 521.434239] 9p: Bad value for 'rfdno' 02:09:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:52 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 10) 02:09:52 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) 02:09:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 1) 02:09:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x600000000000000) [ 529.776137] 9p: Bad value for 'rfdno' [ 529.812201] 9p: Bad value for 'rfdno' [ 529.820711] FAULT_INJECTION: forcing a failure. [ 529.820711] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 529.822974] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 529.823004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 529.823017] Call Trace: [ 529.823025] [ 529.823035] dump_stack_lvl+0xfa/0x120 [ 529.823083] should_fail_ex+0x4d7/0x5e0 [ 529.823131] should_fail_alloc_page+0xe0/0x110 [ 529.823162] prepare_alloc_pages+0x1eb/0x550 [ 529.823208] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 529.823242] ? perf_tp_event+0x807/0xe70 [ 529.823307] ? __pfx_perf_tp_event+0x10/0x10 [ 529.823348] ? perf_tp_event+0x807/0xe70 [ 529.823388] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.823459] ? perf_trace_run_bpf_submit+0xef/0x180 [ 529.823491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.823534] ? policy_nodemask+0xeb/0x4e0 [ 529.823581] alloc_pages_mpol+0xed/0x340 [ 529.823616] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 529.823651] ? __pfx_perf_trace_lock+0x10/0x10 [ 529.823686] ? get_vma_policy+0x23b/0x350 [ 529.823731] vma_alloc_folio_noprof+0xe9/0x440 [ 529.823768] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 529.823808] ? lock_release+0xc8/0x270 [ 529.823856] __handle_mm_fault+0x145c/0x2fa0 [ 529.823898] ? __pfx_perf_trace_lock+0x10/0x10 [ 529.823950] ? __pfx___handle_mm_fault+0x10/0x10 [ 529.824030] ? follow_page_pte+0x4f9/0x1170 [ 529.824081] handle_mm_fault+0x2d8/0x750 [ 529.824131] __get_user_pages+0x587/0x2fb0 [ 529.824215] ? __pfx___get_user_pages+0x10/0x10 [ 529.824258] ? lock_is_held_type+0x9e/0x120 [ 529.824303] faultin_page_range+0x2f3/0x9d0 [ 529.824360] madvise_do_behavior+0x918/0xef0 [ 529.824407] ? __pfx_madvise_do_behavior+0x10/0x10 [ 529.824446] ? down_read+0x1b1/0x450 [ 529.824502] ? find_held_lock+0x2b/0x80 [ 529.824558] do_madvise+0x16b/0x240 [ 529.824585] ? __pfx_do_madvise+0x10/0x10 [ 529.824608] ? kernel_write+0x5f3/0x660 [ 529.824673] ? __fget_files+0x20d/0x3b0 [ 529.824720] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 529.824756] ? ksys_write+0x1a3/0x240 02:09:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 529.824792] ? __pfx_ksys_write+0x10/0x10 [ 529.824825] ? irqentry_exit+0xee/0x650 [ 529.824854] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 529.824880] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 529.824920] __x64_sys_madvise+0xa9/0x110 [ 529.824945] ? do_syscall_64+0x85/0x420 [ 529.824983] do_syscall_64+0xbf/0x420 [ 529.825023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.825048] RIP: 0033:0x7f6da0d61b19 02:09:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) [ 529.825067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 529.825087] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 529.825108] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 529.825123] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 529.825135] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 529.825148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.825161] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 529.825221] 02:09:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:09:52 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 529.974066] 9p: Bad value for 'rfdno' 02:09:52 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 11) 02:09:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:09:52 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) write(r0, &(0x7f0000000080)="5ddc4c8f296a8292e9b22cfd4339ba1cd27d2c5d00019562a94075104fbf0fcbd8a7921f73e6811ad6d1c984f9b08c7404353731", 0x34) [ 530.109261] FAULT_INJECTION: forcing a failure. [ 530.109261] name failslab, interval 1, probability 0, space 0, times 0 [ 530.110914] CPU: 1 UID: 0 PID: 5863 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 530.110943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.110956] Call Trace: [ 530.110963] [ 530.110971] dump_stack_lvl+0xfa/0x120 [ 530.111010] should_fail_ex+0x4d7/0x5e0 [ 530.111045] ? getname_kernel+0x52/0x390 [ 530.111067] should_failslab+0xc2/0x120 [ 530.111091] kmem_cache_alloc_noprof+0x80/0x760 [ 530.111131] ? getname_kernel+0x52/0x390 [ 530.111153] getname_kernel+0x52/0x390 [ 530.111178] do_file_open_root+0x17f/0x5e0 [ 530.111203] ? __pfx_do_file_open_root+0x10/0x10 [ 530.111226] ? perf_trace_lock+0xb5/0x5d0 [ 530.111253] ? __lock_acquire+0x451/0x2250 [ 530.111282] ? __pfx_perf_trace_lock+0x10/0x10 [ 530.111313] ? perf_trace_lock+0xb5/0x5d0 [ 530.111344] ? __lock_acquire+0x451/0x2250 [ 530.111369] ? __virt_addr_valid+0x1c0/0x5d0 [ 530.111394] ? __pfx_perf_trace_lock+0x10/0x10 [ 530.111430] ? find_held_lock+0x2b/0x80 [ 530.111466] file_open_root+0x2e4/0x470 [ 530.111490] ? __pfx_file_open_root+0x10/0x10 [ 530.111509] ? _raw_spin_unlock+0x1e/0x40 [ 530.111542] ? __pfx_nsfs_export_open+0x10/0x10 [ 530.111578] do_handle_open+0x380/0xd10 [ 530.111605] ? __pfx_do_handle_open+0x10/0x10 [ 530.111636] ? ksys_write+0x1a3/0x240 [ 530.111669] ? __pfx_ksys_write+0x10/0x10 [ 530.111713] do_syscall_64+0xbf/0x420 [ 530.111747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.111769] RIP: 0033:0x7f313d695b19 [ 530.111787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.111807] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 530.111830] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 530.111846] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 530.111859] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.111872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.111884] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 530.111915] 02:10:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x90004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) 02:10:00 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:00 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 2) 02:10:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:10:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:10:00 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 12) [ 538.273411] 9p: Bad value for 'wfdno' 02:10:01 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 13) 02:10:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) [ 538.350564] FAULT_INJECTION: forcing a failure. [ 538.350564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.351481] CPU: 1 UID: 0 PID: 5893 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 538.351496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.351504] Call Trace: [ 538.351508] [ 538.351513] dump_stack_lvl+0xfa/0x120 [ 538.351538] should_fail_ex+0x4d7/0x5e0 [ 538.351559] should_fail_alloc_page+0xe0/0x110 [ 538.351574] prepare_alloc_pages+0x1eb/0x550 [ 538.351591] __alloc_frozen_pages_noprof+0x17f/0x1f70 02:10:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r4 = getpid() pidfd_open(r4, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0xa8c1, 0x0) pwritev2(r2, &(0x7f0000002200)=[{&(0x7f0000002100)="742677d7e8831ead46931ac6d739c2b95a183cbebb6081dc291f769c58337ec8f61101a95d57bea2870a248c6412db121da1", 0x32}, {&(0x7f0000002140)="cdf496edcdbd57ef9ba0198a9228727d4d833cd3ac65bd709512fca9fa4eb61ca539b737f67bc3430e40f1798f6ef393024af3f5899e6c5fa01c185e0e16b3424cf2db822f86a2aff9bbd0a2fe6fd17cb4e38637199fff46e74d87b9df452135a1668b486b155de89b6b5676d8f69b9fc8b627ac7bc132392483f22bdef783fbd6d3ec7c7d038dcd2a34667a7538dd73ed17131e35b8ffb4b368642b066edfc028b19891865e9f7356", 0xa9}], 0x2, 0x2, 0x21, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r7 = getpid() pidfd_open(r7, 0x0) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() pidfd_open(r9, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r11) [ 538.351609] ? __lock_acquire+0x451/0x2250 [ 538.351623] ? look_up_lock_class+0x66/0x130 [ 538.351640] ? register_lock_class+0x3f/0x790 [ 538.351654] ? perf_trace_lock+0xb5/0x5d0 [ 538.351669] ? __lock_acquire+0x451/0x2250 [ 538.351686] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 538.351701] ? perf_trace_lock+0xb5/0x5d0 [ 538.351720] ? __lock_acquire+0x451/0x2250 [ 538.351736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 538.351756] ? policy_nodemask+0xeb/0x4e0 [ 538.351774] alloc_pages_mpol+0xed/0x340 [ 538.351790] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 538.351806] ? __pfx_perf_trace_lock+0x10/0x10 [ 538.351821] ? get_vma_policy+0x23b/0x350 [ 538.351840] vma_alloc_folio_noprof+0xe9/0x440 [ 538.351858] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 538.351876] ? lock_release+0xc8/0x270 [ 538.351893] __handle_mm_fault+0x145c/0x2fa0 [ 538.351910] ? __pfx_perf_trace_lock+0x10/0x10 [ 538.351925] ? __pfx___handle_mm_fault+0x10/0x10 [ 538.351940] ? __pte_offset_map_lock+0x190/0x330 [ 538.351962] ? follow_page_pte+0x4f9/0x1170 [ 538.351982] handle_mm_fault+0x2d8/0x750 [ 538.352000] __get_user_pages+0x587/0x2fb0 [ 538.352024] ? find_held_lock+0x2b/0x80 [ 538.352053] ? __pfx___get_user_pages+0x10/0x10 [ 538.352071] ? lock_is_held_type+0x9e/0x120 [ 538.352088] faultin_page_range+0x2f3/0x9d0 [ 538.352109] madvise_do_behavior+0x918/0xef0 [ 538.352127] ? __pfx_madvise_do_behavior+0x10/0x10 [ 538.352143] ? down_read+0x1b1/0x450 [ 538.352164] ? find_held_lock+0x2b/0x80 [ 538.352185] do_madvise+0x16b/0x240 [ 538.352197] ? __pfx_do_madvise+0x10/0x10 [ 538.352209] ? kernel_write+0x5f3/0x660 [ 538.352234] ? __fget_files+0x20d/0x3b0 [ 538.352250] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 538.352267] ? ksys_write+0x1a3/0x240 [ 538.352284] ? __pfx_ksys_write+0x10/0x10 [ 538.352301] ? irqentry_exit+0xee/0x650 [ 538.352316] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 538.352329] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 538.352350] __x64_sys_madvise+0xa9/0x110 [ 538.352362] ? do_syscall_64+0x85/0x420 [ 538.352380] do_syscall_64+0xbf/0x420 [ 538.352398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.352411] RIP: 0033:0x7f6da0d61b19 [ 538.352421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.352432] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 538.352443] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 538.352451] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 538.352458] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.352465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.352472] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 538.352489] [ 538.381519] FAULT_INJECTION: forcing a failure. [ 538.381519] name failslab, interval 1, probability 0, space 0, times 0 [ 538.383247] CPU: 0 UID: 0 PID: 5896 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 538.383277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.383290] Call Trace: [ 538.383298] [ 538.383306] dump_stack_lvl+0xfa/0x120 [ 538.383351] should_fail_ex+0x4d7/0x5e0 [ 538.383386] ? alloc_empty_file+0x58/0x1e0 [ 538.383413] should_failslab+0xc2/0x120 [ 538.383437] kmem_cache_alloc_noprof+0x80/0x760 [ 538.383470] ? __pfx_perf_trace_lock+0x10/0x10 [ 538.383507] ? alloc_empty_file+0x58/0x1e0 [ 538.383533] alloc_empty_file+0x58/0x1e0 [ 538.383563] path_openat+0xee/0x2d60 [ 538.383588] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 538.383616] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 538.383645] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 538.383673] ? __create_object+0x59/0x80 [ 538.383707] ? __pfx_path_openat+0x10/0x10 [ 538.383735] ? __asan_memcpy+0x3d/0x60 [ 538.383762] do_file_open_root+0x2f7/0x5e0 [ 538.383788] ? __pfx_do_file_open_root+0x10/0x10 [ 538.383821] ? __pfx_perf_trace_lock+0x10/0x10 [ 538.383854] ? perf_trace_lock+0xb5/0x5d0 [ 538.383880] ? __lock_acquire+0x451/0x2250 [ 538.383907] ? __virt_addr_valid+0x1c0/0x5d0 [ 538.383945] ? find_held_lock+0x2b/0x80 [ 538.383984] file_open_root+0x2e4/0x470 [ 538.384009] ? __pfx_file_open_root+0x10/0x10 [ 538.384029] ? _raw_spin_unlock+0x1e/0x40 [ 538.384077] ? __pfx_nsfs_export_open+0x10/0x10 [ 538.384115] do_handle_open+0x380/0xd10 [ 538.384144] ? __pfx_do_handle_open+0x10/0x10 [ 538.384177] ? ksys_write+0x1a3/0x240 [ 538.384212] ? __pfx_ksys_write+0x10/0x10 [ 538.384259] do_syscall_64+0xbf/0x420 [ 538.384296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.384319] RIP: 0033:0x7f313d695b19 [ 538.384338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.384359] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 538.384381] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 538.384396] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 538.384410] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.384423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.384436] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 538.384470] sendmsg$netlink(r2, &(0x7f00000020c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)=[{&(0x7f0000000100)={0x1c, 0x1b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0xca}]}, 0x1c}, {&(0x7f0000000180)={0x18, 0x28, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x28, 0x0, 0x0, @pid=r3}]}, 0x18}, {&(0x7f00000001c0)={0x90, 0x41, 0x100, 0x70bd26, 0x25dfdbff, "", [@generic="9704bfd5fbc88b94eef7a82eb6e938aed32ad8829f0296d357be80af190adbccec817b10250805e68385f2ffe26a99fd27b77d06c8a0b7909f9b0c97f789c7184d9c8f0ca904c2c078ec50b2cc4b0e451b76a2f76346a7ffc45c7a1e07f88fafecf891cc5bc8721282c71023fceb4c0697db13e0af24adc1c806b7c2", @typed={0x4, 0x35}]}, 0x90}, {&(0x7f0000000480)={0x1378, 0x42, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x113f, 0x39, 0x0, 0x1, [@typed={0xc, 0x58, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x2}, @generic="8d6e2f2819bc35a9a0f5cdd65ed4f974d98feab96318569790542e82621d97869fdc1838af9eaa17226e66ae13930f4f2f26b8a3f999fa32424246266b7d2c67691670d8db53fdc280d64909ac945445af5468878f83e33285e4513b2ea1e42ae36c0e3f92649e161ba5917aaaa4e7cdcec88da4faba25ea4e315ccfc8a685d3420d5186898615bb2940a459d2d330cfa460", @generic="4313dadee696dd63344036f32116f6cf0b5d4100cd63b0a8e8355cfb3e072bfad671fc4665d8d9bc21d2c03a8fdbd0f75c353c890bd3a55dc54defe3c59bf108d62df9382b64b3725a55f4e4794ad9b7e5be2f2f688e008c444a41de928ce649f9edd1dc1bcd9c436ce5fdccca0770911e71bdf70ee2851607a9a3e4d74196e3603ac4686fe61d4f83", @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @generic="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"]}, @typed={0x8, 0x69, 0x0, 0x0, @pid=r4}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1b5, 0x8c, 0x0, 0x1, [@generic="99ce9deb6f33c34a601e0b4bba4a6145693e86a91f93da60681d36e61b08206a1a1e8c81b18fbaa3706dca58d63108e809321622671f36566bce5de9987b72beb25a3c6ecf51e721e1aad8a2fa59a9985fb8a1c895ab9776395222ca4c181b4868a403bf264e54ce2c298024fb3f3c0bb283988943158ce3898c89e629f62ad3eeab096abc5227959b7a8d9df0c4faaca56938eecb466eeb915b9b744875d3ccd329ec460800cc29517d5a80651229e32c476f728dd8dbd6bf3493ba7ea830aa00c412511613fe57b073cc319599c0aeb7d2971a85c8e550eb5ec4f1", @generic="4101041f654596a7b5023f13086f233151ad1abc3d9bc74446f6fac1e415dc35bffdb54ee3adadc93bc729731defee7febea2b0c23fc1c4f5addad0d45adde1b37929325f350da8406361a24ae43385875deb11dfce62c10acab1915d6162f6f211f4df98a4e7402d85814038d76d93b56886d9088bc17d9937ff0864e4b3f658eb85323a0888da4da8f71d5fefe4f21b7cbe9ac5f", @generic="e501028b1ea23ea57b5bcaa316c915017c3e7ca5a36c13a1ae5f2e9b94f02f853ce561ce560f17270f502b19", @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@empty}]}, @generic="a45c5ee9c03f0082735e2fca960f9bbb5b08614be5fb6533859f6b938764696fe02b03f4a9d683d3c9377ac2baef87b56d2297a82d173bd8df4e90151810d4e255d9f5d990dc7e7040eef078207c144919"]}, 0x1378}, {&(0x7f0000001800)={0x3a4, 0x2e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x122, 0x3, 0x0, 0x1, [@generic="274d74e45f4aa98943cda35964d9870e9bf34a38f1c4e3e1986cdbdd", @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@remote}, @typed={0x5d, 0x15, 0x0, 0x0, @binary="00bb806139b28b3c4098ac84cfcd3efd433462ed0cf7c558f1071fba3cd5576a5dee09439c53cb5a6150ab26afad72ed0a36ff6b6c4a9c663d1edfd153099b9d6be5d85166e7bd03c8afb8b087c7f2f4affce5f86cc4158b74"}, @generic="4f18fb9e1fd186de0dbc7f3d8e26e1c854d924289ee494eb320ff28f06734b74fe43b690057ba590929a9b7e806ea1b2b18635f6a0fe7d321d768c0fa4b3787c5b2110a00ca7574f59f5eea8546c3660ebae55f020d9ed2fb312a510bf366e7a6143d15f1c44e87a0f15ec47bb791dbb41e3ff4d59c9c40cc87c511cbe78553c8c930b8b144de99c4b3dc78ab587a1cbd98f117c38bbdda27c81"]}, @nested={0x32, 0x65, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @u32=0xffffffff}, @generic="b3e41663f2314d1eb86924271b749b2a5f9498edf3545089feb5efb669a1", @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}]}, @generic="9a235983bf6cd0576d0b4e08154668dbeb937c3ca0bf87dd9a138ac4a6e17f2533f99db8288420d311fdb0fa25b8eaf085de1dee25a4dc61398f9f22933e66a1e708ee733bcceadd74e7a1b2c28dd19abb04ff08686892bfa59e2ce160f23b436a29a572b5fd6a90178f597862068437cc6f8769b0f88225d32b18452ab02acaf5decbb3b18b1f38925192e9b57e363bd8aac8996c6ff072f1240455316b4e8d6e4c6076616409277979caae0779a600c248eed92a35d4b5719f5d96edbb9cc1", @nested={0x124, 0x38, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r1}, @typed={0xe9, 0x1c, 0x0, 0x0, @binary="13a7d82ec7df29adb64c368b1aaa7ee2b7d78f91e7a6fcc5d7ec2d724d5c21d4655ddd8f141d5a92ef79c777ae7ef4e648023e53eec6c4a2b3a8e03d9659624a54c48e6a00e400d42ca74b1a2357959c7ad692832544918683499ed40e960688e84c8ba694af07948d6e57e31da84c9dfc9fc939955cb82d31b0ca2cec10692420e8ec5edfbe396bed238f67b113fae5e3cbe98f5c018208bc59806f68720273af06eb719ddef90423046983446d5624291623bfece8dcbacf89f090b0500aa77144084068fdb6c5342fdffca073260e5b3dca4373a1c1b64b90b4318657b58b896e0d704f"}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="4ed4d2c1d1b57a3e16d0ab2be01ae65ceb7b408d9f020d2867d10d5a190f4df51e143da3a38e08b34ea7e32698d7ad3295fa21b42e45aca0cb2540570ba6a1a388b2c6bbd6dfc93915", @generic, @nested={0xc, 0x36, 0x0, 0x1, [@generic, @typed={0x8, 0x69, 0x0, 0x0, @uid=r6}]}]}, 0x3a4}, {&(0x7f0000001bc0)={0x33c, 0x3e, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@generic="d9e7cb7886aa7c7573da4ed77c29f72f82c96e1e80ee1ff5ee729e74fcf361db837a65cf40e249eed1d9d56ca7372553e452d1de759cc9892bb9d406cbddc50a7edf8ed15c8b4bb6fb497a3e50be31da613bea4db7b4225439083601d09f830bb661650e44358bf578ccb35ad73b602d84e5625de0e1f86defd3b6e23cb6c9928ed2b961e14bb1e9b72268c8f4739d850c85466604f11cea017aca59cb48e60956fa5c360ecec17d0572bca751f18ed0582ad191b472fe6f1eebd04f59d5e852d5805dabf0ec513fb6d63812a09e880794abf108b44e57fd3fc7ef4c435dbd3eac74fa9730b57d37", @nested={0x123, 0x52, 0x0, 0x1, [@typed={0x7, 0x20, 0x0, 0x0, @str='}.\x00'}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @generic="64ea81db4d2a150c1a20b7588b4a2bcca5adbe8ec893e38aef29cfa8ce8f134159cac78d05f84cb7c2408558e62d3bdcc2245e3472f0e201816277bd54da437e625527b41ecf910e77ced7e24122e5f0d15a8f14bb076b0c7f883dcb5e7583788e071b5ccdf70b71b91dac3ce091946c2ecd6afb19e68845ea4f582239c09e72872e7742829ea0390e3da264aa1b3b896112f5f94010b6c9649b963036ef27e188301e0c9db10975d9ba4c24bc9f341e242c96ba084fbe747b9c17315a9c33238ee12b270aa2d358dac2a8700c8dbd0e61810161cdb428493e13db160f44b1076efeff", @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xc, 0x59, 0x0, 0x0, @u64=0x5eec6792}]}, @nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9c}, @generic="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", @typed={0x8, 0x35, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x33c}, {&(0x7f0000000300)={0x138, 0x26, 0x20, 0x70bd26, 0x25dfdbff, "", [@generic="b5ee4f1080ac3b8fa2c1fda771abc6d4be72459eb9763bf5774160f8fb5598c192db8d0432915a83a9284ad9bda8384648f3", @typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee00}, @generic="66b8f9d9b4c6b29e843cbbef838062d80639452a9bfe71c808020e09cc8cdfb03f40e9d70a14079aef1850be8ff335ec560e6ee9d74d8a1716ec5b56c52660489b4d42cb6712f350d3ad30c7d0afac743318096c094d6e46d3cb435e147adb03fa5b7075548c60d6daf7f2c92ff6690a1e0fa129b306c10e36d795d8ca65b5723c25f838491525d35559df46a3a07d3e4f19da554f54bb915873f0fc93fe6701248530271fe4a732af6b87efb9843183c7db34b73068eb609838c3d7a685415f4192a117cfe75be507fb25f3ab844f8386d5cc2e75d990f491ea79815c5599e22881fa1776f77f35a9f6a63586"]}, 0x138}], 0x7, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x60}, 0x800) pidfd_open(r1, 0x0) 02:10:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2}) 02:10:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:10:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 3) 02:10:11 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 14) 02:10:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 1) [ 548.821389] 9p: Bad value for 'wfdno' [ 548.890247] FAULT_INJECTION: forcing a failure. [ 548.890247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.892051] CPU: 0 UID: 0 PID: 5919 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 548.892079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.892093] Call Trace: [ 548.892101] [ 548.892111] dump_stack_lvl+0xfa/0x120 [ 548.892156] should_fail_ex+0x4d7/0x5e0 [ 548.892216] should_fail_alloc_page+0xe0/0x110 [ 548.892248] prepare_alloc_pages+0x1eb/0x550 [ 548.892294] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 548.892328] ? perf_tp_event+0x807/0xe70 [ 548.892389] ? perf_trace_run_bpf_submit+0xef/0x180 [ 548.892419] ? __pfx_perf_tp_event+0x10/0x10 [ 548.892462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.892495] ? __pfx_perf_tp_event+0x10/0x10 [ 548.892564] ? perf_trace_run_bpf_submit+0xef/0x180 [ 548.892596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.892639] ? policy_nodemask+0xeb/0x4e0 [ 548.892682] alloc_pages_mpol+0xed/0x340 [ 548.892718] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.892752] ? __pfx_perf_trace_lock+0x10/0x10 [ 548.892787] ? get_vma_policy+0x23b/0x350 [ 548.892832] vma_alloc_folio_noprof+0xe9/0x440 [ 548.892869] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 548.892910] ? lock_release+0xc8/0x270 [ 548.892956] __handle_mm_fault+0x145c/0x2fa0 [ 548.892998] ? __pfx_perf_trace_lock+0x10/0x10 [ 548.893032] ? __pfx___handle_mm_fault+0x10/0x10 [ 548.893112] ? follow_page_pte+0x4f9/0x1170 [ 548.893162] handle_mm_fault+0x2d8/0x750 [ 548.893212] __get_user_pages+0x587/0x2fb0 [ 548.893296] ? __pfx___get_user_pages+0x10/0x10 [ 548.893340] ? lock_is_held_type+0x9e/0x120 [ 548.893384] faultin_page_range+0x2f3/0x9d0 [ 548.893441] madvise_do_behavior+0x918/0xef0 [ 548.893488] ? __pfx_madvise_do_behavior+0x10/0x10 [ 548.893527] ? down_read+0x1b1/0x450 [ 548.893582] ? find_held_lock+0x2b/0x80 [ 548.893638] do_madvise+0x16b/0x240 [ 548.893666] ? __pfx_do_madvise+0x10/0x10 [ 548.893689] ? kernel_write+0x5f3/0x660 [ 548.893753] ? __fget_files+0x20d/0x3b0 [ 548.893801] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 548.893836] ? ksys_write+0x1a3/0x240 [ 548.893872] ? __pfx_ksys_write+0x10/0x10 [ 548.893905] ? irqentry_exit+0xee/0x650 [ 548.893934] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 548.893960] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 548.894000] __x64_sys_madvise+0xa9/0x110 [ 548.894024] ? do_syscall_64+0x85/0x420 [ 548.894062] do_syscall_64+0xbf/0x420 [ 548.894103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.894127] RIP: 0033:0x7f6da0d61b19 [ 548.894147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.894167] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 548.894188] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 548.894202] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 548.894215] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 548.894228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.894241] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 548.894301] 02:10:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 15) 02:10:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x7f, 0x37, 0x1, 0x0, 0x17, 0x5000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4804, 0x47, 0x101, 0x6, 0x9, 0x5, 0x7, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) [ 548.970295] FAULT_INJECTION: forcing a failure. [ 548.970295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.972066] CPU: 0 UID: 0 PID: 5924 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 548.972094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.972106] Call Trace: 02:10:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 548.972115] [ 548.972124] dump_stack_lvl+0xfa/0x120 [ 548.972165] should_fail_ex+0x4d7/0x5e0 [ 548.972222] should_fail_alloc_page+0xe0/0x110 [ 548.972254] prepare_alloc_pages+0x1eb/0x550 [ 548.972299] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 548.972333] ? perf_tp_event+0x807/0xe70 [ 548.972403] ? __pfx_perf_tp_event+0x10/0x10 [ 548.972437] ? perf_tp_event+0x807/0xe70 [ 548.972476] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.972547] ? perf_trace_run_bpf_submit+0xef/0x180 [ 548.972580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.972622] ? policy_nodemask+0xeb/0x4e0 [ 548.972665] alloc_pages_mpol+0xed/0x340 [ 548.972700] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.972734] ? __pfx_perf_trace_lock+0x10/0x10 [ 548.972768] ? get_vma_policy+0x23b/0x350 [ 548.972813] vma_alloc_folio_noprof+0xe9/0x440 [ 548.972849] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 548.972890] ? lock_release+0xc8/0x270 [ 548.972936] __handle_mm_fault+0x145c/0x2fa0 [ 548.972977] ? __pfx_perf_trace_lock+0x10/0x10 [ 548.973011] ? __pfx___handle_mm_fault+0x10/0x10 [ 548.973091] ? follow_page_pte+0x4f9/0x1170 [ 548.973140] handle_mm_fault+0x2d8/0x750 [ 548.973189] __get_user_pages+0x587/0x2fb0 [ 548.973273] ? __pfx___get_user_pages+0x10/0x10 [ 548.973317] ? lock_is_held_type+0x9e/0x120 [ 548.973361] faultin_page_range+0x2f3/0x9d0 [ 548.973420] madvise_do_behavior+0x918/0xef0 [ 548.973468] ? __pfx_madvise_do_behavior+0x10/0x10 [ 548.973508] ? down_read+0x1b1/0x450 [ 548.973562] ? find_held_lock+0x2b/0x80 [ 548.973617] do_madvise+0x16b/0x240 [ 548.973645] ? __pfx_do_madvise+0x10/0x10 [ 548.973668] ? kernel_write+0x5f3/0x660 [ 548.973732] ? __fget_files+0x20d/0x3b0 [ 548.973778] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 548.973813] ? ksys_write+0x1a3/0x240 [ 548.973850] ? __pfx_ksys_write+0x10/0x10 [ 548.973883] ? irqentry_exit+0xee/0x650 [ 548.973912] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 548.973938] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 548.973978] __x64_sys_madvise+0xa9/0x110 [ 548.974003] ? do_syscall_64+0x85/0x420 [ 548.974040] do_syscall_64+0xbf/0x420 [ 548.974080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.974104] RIP: 0033:0x7f494b73bb19 [ 548.974124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.974144] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 548.974165] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 548.974180] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 548.974193] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 548.974205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.974218] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 548.974278] [ 549.018130] FAULT_INJECTION: forcing a failure. [ 549.018130] name failslab, interval 1, probability 0, space 0, times 0 [ 549.019851] CPU: 1 UID: 0 PID: 5927 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 549.019880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 549.019893] Call Trace: [ 549.019901] [ 549.019910] dump_stack_lvl+0xfa/0x120 [ 549.019956] should_fail_ex+0x4d7/0x5e0 [ 549.019994] ? alloc_empty_file+0x58/0x1e0 [ 549.020021] should_failslab+0xc2/0x120 [ 549.020046] kmem_cache_alloc_noprof+0x80/0x760 [ 549.020078] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.020116] ? alloc_empty_file+0x58/0x1e0 [ 549.020140] alloc_empty_file+0x58/0x1e0 [ 549.020168] path_openat+0xee/0x2d60 [ 549.020192] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 549.020232] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 549.020262] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 549.020288] ? __create_object+0x59/0x80 [ 549.020320] ? __pfx_path_openat+0x10/0x10 [ 549.020353] ? __asan_memcpy+0x3d/0x60 [ 549.020378] do_file_open_root+0x2f7/0x5e0 [ 549.020403] ? __pfx_do_file_open_root+0x10/0x10 [ 549.020434] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.020464] ? perf_trace_lock+0xb5/0x5d0 [ 549.020489] ? __lock_acquire+0x451/0x2250 [ 549.020513] ? __virt_addr_valid+0x1c0/0x5d0 [ 549.020550] ? find_held_lock+0x2b/0x80 [ 549.020588] file_open_root+0x2e4/0x470 [ 549.020611] ? __pfx_file_open_root+0x10/0x10 [ 549.020631] ? _raw_spin_unlock+0x1e/0x40 [ 549.020663] ? __pfx_nsfs_export_open+0x10/0x10 [ 549.020699] do_handle_open+0x380/0xd10 [ 549.020727] ? __pfx_do_handle_open+0x10/0x10 [ 549.020758] ? ksys_write+0x1a3/0x240 [ 549.020791] ? __pfx_ksys_write+0x10/0x10 [ 549.020835] do_syscall_64+0xbf/0x420 [ 549.020870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.020893] RIP: 0033:0x7f313d695b19 [ 549.020911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.020931] RSP: 002b:00007f313ac0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 549.020952] RAX: ffffffffffffffda RBX: 00007f313d7a8f60 RCX: 00007f313d695b19 [ 549.020967] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 549.020980] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.020993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.021006] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 549.021037] 02:10:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 2) [ 549.178046] 9p: Bad value for 'wfdno' 02:10:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 1) 02:10:11 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 4) 02:10:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 16) 02:10:12 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 549.285897] FAULT_INJECTION: forcing a failure. [ 549.285897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.288452] CPU: 1 UID: 0 PID: 5937 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 549.288484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 549.288499] Call Trace: [ 549.288508] [ 549.288519] dump_stack_lvl+0xfa/0x120 [ 549.288573] should_fail_ex+0x4d7/0x5e0 [ 549.288627] should_fail_alloc_page+0xe0/0x110 [ 549.288662] prepare_alloc_pages+0x1eb/0x550 [ 549.288713] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 549.288752] ? perf_tp_event+0x807/0xe70 [ 549.288826] ? __pfx_perf_tp_event+0x10/0x10 [ 549.288864] ? perf_tp_event+0x807/0xe70 [ 549.288908] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 549.288988] ? perf_trace_run_bpf_submit+0xef/0x180 [ 549.289024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.289072] ? policy_nodemask+0xeb/0x4e0 [ 549.289121] alloc_pages_mpol+0xed/0x340 [ 549.289160] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 549.289199] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.289238] ? get_vma_policy+0x23b/0x350 [ 549.289289] vma_alloc_folio_noprof+0xe9/0x440 [ 549.289330] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 549.289384] ? lock_release+0xc8/0x270 [ 549.289437] __handle_mm_fault+0x145c/0x2fa0 [ 549.289485] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.289522] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.289612] ? follow_page_pte+0x4f9/0x1170 [ 549.289669] handle_mm_fault+0x2d8/0x750 [ 549.289725] __get_user_pages+0x587/0x2fb0 [ 549.289819] ? __pfx___get_user_pages+0x10/0x10 [ 549.289868] ? lock_is_held_type+0x9e/0x120 [ 549.289917] faultin_page_range+0x2f3/0x9d0 [ 549.289981] madvise_do_behavior+0x918/0xef0 [ 549.290034] ? __pfx_madvise_do_behavior+0x10/0x10 [ 549.290079] ? down_read+0x1b1/0x450 [ 549.290141] ? find_held_lock+0x2b/0x80 [ 549.290204] do_madvise+0x16b/0x240 [ 549.290235] ? __pfx_do_madvise+0x10/0x10 [ 549.290260] ? kernel_write+0x5f3/0x660 [ 549.290333] ? __fget_files+0x20d/0x3b0 [ 549.290386] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 549.290426] ? ksys_write+0x1a3/0x240 [ 549.290467] ? __pfx_ksys_write+0x10/0x10 [ 549.290504] ? irqentry_exit+0xee/0x650 [ 549.290537] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 549.290567] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 549.290612] __x64_sys_madvise+0xa9/0x110 [ 549.290639] ? do_syscall_64+0x85/0x420 [ 549.290682] do_syscall_64+0xbf/0x420 [ 549.290728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.290755] RIP: 0033:0x7fbf3563bb19 [ 549.290777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.290800] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 549.290824] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 549.290840] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 549.290854] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.290868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.290882] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 549.290950] [ 549.365912] FAULT_INJECTION: forcing a failure. [ 549.365912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.367756] CPU: 0 UID: 0 PID: 5942 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 549.367785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 549.367798] Call Trace: [ 549.367807] [ 549.367817] dump_stack_lvl+0xfa/0x120 [ 549.367864] should_fail_ex+0x4d7/0x5e0 [ 549.367912] should_fail_alloc_page+0xe0/0x110 [ 549.367944] prepare_alloc_pages+0x1eb/0x550 [ 549.367990] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 549.368025] ? perf_tp_event+0x807/0xe70 [ 549.368079] ? perf_trace_run_bpf_submit+0xef/0x180 [ 549.368109] ? __pfx_perf_tp_event+0x10/0x10 [ 549.368152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 549.368186] ? __pfx_perf_tp_event+0x10/0x10 [ 549.368269] ? perf_trace_run_bpf_submit+0xef/0x180 [ 549.368302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.368351] ? policy_nodemask+0xeb/0x4e0 [ 549.368396] alloc_pages_mpol+0xed/0x340 [ 549.368431] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 549.368466] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.368502] ? get_vma_policy+0x23b/0x350 [ 549.368548] vma_alloc_folio_noprof+0xe9/0x440 [ 549.368585] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 549.368626] ? lock_release+0xc8/0x270 [ 549.368673] __handle_mm_fault+0x145c/0x2fa0 [ 549.368716] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.368749] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.368830] ? follow_page_pte+0x4f9/0x1170 [ 549.368881] handle_mm_fault+0x2d8/0x750 [ 549.368930] __get_user_pages+0x587/0x2fb0 [ 549.369015] ? __pfx___get_user_pages+0x10/0x10 [ 549.369059] ? lock_is_held_type+0x9e/0x120 [ 549.369103] faultin_page_range+0x2f3/0x9d0 [ 549.369161] madvise_do_behavior+0x918/0xef0 [ 549.369208] ? __pfx_madvise_do_behavior+0x10/0x10 [ 549.369248] ? down_read+0x1b1/0x450 [ 549.369304] ? find_held_lock+0x2b/0x80 [ 549.369359] do_madvise+0x16b/0x240 [ 549.369387] ? __pfx_do_madvise+0x10/0x10 [ 549.369410] ? kernel_write+0x5f3/0x660 [ 549.369475] ? __fget_files+0x20d/0x3b0 [ 549.369522] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 549.369558] ? ksys_write+0x1a3/0x240 [ 549.369594] ? __pfx_ksys_write+0x10/0x10 [ 549.369627] ? irqentry_exit+0xee/0x650 [ 549.369657] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 549.369683] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 549.369723] __x64_sys_madvise+0xa9/0x110 [ 549.369748] ? do_syscall_64+0x85/0x420 [ 549.369786] do_syscall_64+0xbf/0x420 [ 549.369827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.369852] RIP: 0033:0x7f494b73bb19 [ 549.369872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.369892] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 549.369913] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 549.369927] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 549.369940] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.369953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.369965] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 549.370026] [ 549.491899] FAULT_INJECTION: forcing a failure. [ 549.491899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.494170] CPU: 1 UID: 0 PID: 5950 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 549.494200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 549.494214] Call Trace: [ 549.494222] [ 549.494231] dump_stack_lvl+0xfa/0x120 [ 549.494276] should_fail_ex+0x4d7/0x5e0 [ 549.494314] should_fail_alloc_page+0xe0/0x110 [ 549.494349] prepare_alloc_pages+0x1eb/0x550 [ 549.494382] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 549.494412] ? __lock_acquire+0x451/0x2250 [ 549.494439] ? look_up_lock_class+0x66/0x130 [ 549.494472] ? register_lock_class+0x3f/0x790 [ 549.494500] ? perf_trace_lock+0xb5/0x5d0 [ 549.494528] ? __lock_acquire+0x451/0x2250 [ 549.494561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 549.494592] ? perf_trace_lock+0xb5/0x5d0 [ 549.494630] ? __lock_acquire+0x451/0x2250 [ 549.494661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.494697] ? policy_nodemask+0xeb/0x4e0 [ 549.494732] alloc_pages_mpol+0xed/0x340 [ 549.494763] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 549.494794] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.494823] ? get_vma_policy+0x23b/0x350 [ 549.494859] vma_alloc_folio_noprof+0xe9/0x440 [ 549.494893] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 549.494929] ? lock_release+0xc8/0x270 [ 549.494962] __handle_mm_fault+0x145c/0x2fa0 [ 549.494996] ? __pfx_perf_trace_lock+0x10/0x10 [ 549.495026] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.495054] ? __pte_offset_map_lock+0x190/0x330 [ 549.495096] ? follow_page_pte+0x4f9/0x1170 [ 549.495134] handle_mm_fault+0x2d8/0x750 [ 549.495169] __get_user_pages+0x587/0x2fb0 [ 549.495214] ? find_held_lock+0x2b/0x80 [ 549.495251] ? __pfx___get_user_pages+0x10/0x10 [ 549.495285] ? lock_is_held_type+0x9e/0x120 [ 549.495319] faultin_page_range+0x2f3/0x9d0 [ 549.495359] madvise_do_behavior+0x918/0xef0 [ 549.495393] ? __pfx_madvise_do_behavior+0x10/0x10 [ 549.495423] ? down_read+0x1b1/0x450 [ 549.495464] ? find_held_lock+0x2b/0x80 [ 549.495505] do_madvise+0x16b/0x240 [ 549.495529] ? __pfx_do_madvise+0x10/0x10 [ 549.495552] ? kernel_write+0x5f3/0x660 [ 549.495598] ? __fget_files+0x20d/0x3b0 [ 549.495630] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 549.495662] ? ksys_write+0x1a3/0x240 [ 549.495696] ? __pfx_ksys_write+0x10/0x10 [ 549.495729] ? irqentry_exit+0xee/0x650 [ 549.495757] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 549.495783] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 549.495815] __x64_sys_madvise+0xa9/0x110 [ 549.495839] ? do_syscall_64+0x85/0x420 [ 549.495873] do_syscall_64+0xbf/0x420 [ 549.495908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.495932] RIP: 0033:0x7f6da0d61b19 [ 549.495950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.495972] RSP: 002b:00007f6d9e2b6188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 549.495993] RAX: ffffffffffffffda RBX: 00007f6da0e75020 RCX: 00007f6da0d61b19 [ 549.496008] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 549.496022] RBP: 00007f6d9e2b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.496035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.496048] R13: 00007fff299db15f R14: 00007f6d9e2b6300 R15: 0000000000022000 [ 549.496081] 02:10:20 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 5) 02:10:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:20 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) (fail_nth: 17) 02:10:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x580cba0c0000, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xa3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000e05d844ba2ff2aaab3d7838748c348b4b0c7936ed4daecab4797e57fdc2b8a54c6c90f3b970444b9b3045733735d9a197efce4bf01b5dd4cbc2855e8866b1c2ab4efde31f21bea02c46776a2f67e284d9d013e25df94229008b400aae93deacd0468d2dcb8d2f26736766909bfd100577e0be487138eb496cd3c7db43ea7a2facfbf2c842be5601d8a4a4453681f1d83aced6bd0373a36f5020274ab7c41f5", @ANYRES16=r4, @ANYBLOB="053500000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="11000800b3b73ec6b4688ac836a19eacf1000000"], 0x30}}, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r1) 02:10:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 2) 02:10:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 3) 02:10:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) [ 557.787133] FAULT_INJECTION: forcing a failure. [ 557.787133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.788175] CPU: 1 UID: 0 PID: 5963 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 557.788192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.788199] Call Trace: [ 557.788204] [ 557.788208] dump_stack_lvl+0xfa/0x120 [ 557.788232] should_fail_ex+0x4d7/0x5e0 [ 557.788253] should_fail_alloc_page+0xe0/0x110 [ 557.788268] prepare_alloc_pages+0x1eb/0x550 [ 557.788284] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 557.788300] ? __lock_acquire+0x451/0x2250 [ 557.788314] ? look_up_lock_class+0x66/0x130 [ 557.788347] ? register_lock_class+0x3f/0x790 [ 557.788361] ? perf_trace_lock+0xb5/0x5d0 [ 557.788375] ? __lock_acquire+0x451/0x2250 [ 557.788394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.788411] ? perf_trace_lock+0xb5/0x5d0 [ 557.788438] ? __lock_acquire+0x451/0x2250 [ 557.788462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.788490] ? policy_nodemask+0xeb/0x4e0 [ 557.788509] alloc_pages_mpol+0xed/0x340 [ 557.788525] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 557.788541] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.788556] ? get_vma_policy+0x23b/0x350 [ 557.788575] vma_alloc_folio_noprof+0xe9/0x440 [ 557.788592] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 557.788611] ? lock_release+0xc8/0x270 [ 557.788627] __handle_mm_fault+0x145c/0x2fa0 [ 557.788645] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.788660] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.788674] ? __pte_offset_map_lock+0x190/0x330 [ 557.788696] ? follow_page_pte+0x4f9/0x1170 [ 557.788715] handle_mm_fault+0x2d8/0x750 [ 557.788733] __get_user_pages+0x587/0x2fb0 [ 557.788756] ? find_held_lock+0x2b/0x80 [ 557.788775] ? __pfx___get_user_pages+0x10/0x10 [ 557.788793] ? lock_is_held_type+0x9e/0x120 [ 557.788810] faultin_page_range+0x2f3/0x9d0 [ 557.788831] madvise_do_behavior+0x918/0xef0 [ 557.788848] ? __pfx_madvise_do_behavior+0x10/0x10 [ 557.788864] ? down_read+0x1b1/0x450 [ 557.788885] ? find_held_lock+0x2b/0x80 [ 557.788906] do_madvise+0x16b/0x240 [ 557.788918] ? __pfx_do_madvise+0x10/0x10 [ 557.788930] ? kernel_write+0x5f3/0x660 [ 557.788955] ? __fget_files+0x20d/0x3b0 [ 557.788971] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 557.788988] ? ksys_write+0x1a3/0x240 [ 557.789005] ? __pfx_ksys_write+0x10/0x10 [ 557.789022] ? irqentry_exit+0xee/0x650 [ 557.789037] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 557.789050] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 557.789066] __x64_sys_madvise+0xa9/0x110 [ 557.789078] ? do_syscall_64+0x85/0x420 [ 557.789096] do_syscall_64+0xbf/0x420 [ 557.789114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.789126] RIP: 0033:0x7f6da0d61b19 [ 557.789136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.789147] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 557.789159] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 557.789167] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 557.789174] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.789181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.789187] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 557.789204] 02:10:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) [ 557.832560] FAULT_INJECTION: forcing a failure. [ 557.832560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.834549] CPU: 0 UID: 0 PID: 5971 Comm: syz-executor.4 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 557.834580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.834594] Call Trace: [ 557.834601] [ 557.834610] dump_stack_lvl+0xfa/0x120 [ 557.834651] should_fail_ex+0x4d7/0x5e0 [ 557.834689] _copy_to_user+0x32/0xd0 [ 557.834724] simple_read_from_buffer+0xe0/0x180 [ 557.834763] proc_fail_nth_read+0x18a/0x240 [ 557.834793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.834821] ? security_file_permission+0x22/0x90 [ 557.834862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.834889] vfs_read+0x1eb/0xc70 [ 557.834927] ? __pfx___mutex_lock+0x10/0x10 [ 557.834959] ? __fget_files+0x34/0x3b0 [ 557.834981] ? __pfx_vfs_read+0x10/0x10 [ 557.835018] ? lock_release+0xc8/0x270 [ 557.835052] ? __fget_files+0x20d/0x3b0 [ 557.835086] ksys_read+0x121/0x240 [ 557.835120] ? __pfx_ksys_read+0x10/0x10 [ 557.835167] do_syscall_64+0xbf/0x420 [ 557.835204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.835229] RIP: 0033:0x7f313d64869c [ 557.835247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 557.835269] RSP: 002b:00007f313ac0b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.835291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f313d64869c [ 557.835306] RDX: 000000000000000f RSI: 00007f313ac0b1e0 RDI: 0000000000000004 [ 557.835320] RBP: 00007f313ac0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.835334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.835354] R13: 00007ffc7e7c145f R14: 00007f313ac0b300 R15: 0000000000022000 [ 557.835388] [ 557.865209] FAULT_INJECTION: forcing a failure. [ 557.865209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.866577] CPU: 1 UID: 0 PID: 5973 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 557.866601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.866612] Call Trace: [ 557.866618] [ 557.866625] dump_stack_lvl+0xfa/0x120 [ 557.866658] should_fail_ex+0x4d7/0x5e0 [ 557.866691] should_fail_alloc_page+0xe0/0x110 [ 557.866712] prepare_alloc_pages+0x1eb/0x550 [ 557.866737] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 557.866762] ? __lock_acquire+0x451/0x2250 [ 557.866783] ? look_up_lock_class+0x66/0x130 [ 557.866810] ? register_lock_class+0x3f/0x790 [ 557.866831] ? perf_trace_lock+0xb5/0x5d0 [ 557.866853] ? __lock_acquire+0x451/0x2250 [ 557.866878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.866899] ? perf_trace_lock+0xb5/0x5d0 [ 557.866927] ? __lock_acquire+0x451/0x2250 [ 557.866951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.866978] ? policy_nodemask+0xeb/0x4e0 [ 557.867003] alloc_pages_mpol+0xed/0x340 [ 557.867025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 557.867050] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.867071] ? get_vma_policy+0x23b/0x350 [ 557.867094] vma_alloc_folio_noprof+0xe9/0x440 [ 557.867119] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 557.867148] ? lock_release+0xc8/0x270 [ 557.867175] __handle_mm_fault+0x145c/0x2fa0 [ 557.867202] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.867225] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.867248] ? __pte_offset_map_lock+0x190/0x330 [ 557.867282] ? follow_page_pte+0x4f9/0x1170 [ 557.867315] handle_mm_fault+0x2d8/0x750 [ 557.867348] __get_user_pages+0x587/0x2fb0 [ 557.867384] ? find_held_lock+0x2b/0x80 [ 557.867414] ? __pfx___get_user_pages+0x10/0x10 [ 557.867443] ? lock_is_held_type+0x9e/0x120 [ 557.867472] faultin_page_range+0x2f3/0x9d0 [ 557.867508] madvise_do_behavior+0x918/0xef0 [ 557.867536] ? __pfx_madvise_do_behavior+0x10/0x10 [ 557.867562] ? down_read+0x1b1/0x450 [ 557.867597] ? find_held_lock+0x2b/0x80 [ 557.867633] do_madvise+0x16b/0x240 [ 557.867653] ? __pfx_do_madvise+0x10/0x10 [ 557.867672] ? kernel_write+0x5f3/0x660 [ 557.867709] ? __fget_files+0x20d/0x3b0 [ 557.867734] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 557.867759] ? ksys_write+0x1a3/0x240 [ 557.867788] ? __pfx_ksys_write+0x10/0x10 [ 557.867815] ? irqentry_exit+0xee/0x650 [ 557.867838] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 557.867860] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 557.867887] __x64_sys_madvise+0xa9/0x110 [ 557.867907] ? do_syscall_64+0x85/0x420 [ 557.867937] do_syscall_64+0xbf/0x420 [ 557.867967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.867987] RIP: 0033:0x7f494b73bb19 [ 557.868000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.868018] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 557.868035] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 557.868047] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 557.868058] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.868069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.868080] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 557.868109] [ 557.926912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24032 sclass=netlink_route_socket pid=5975 comm=syz-executor.5 02:10:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:20 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:20 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29}}, 0x0) [ 557.967641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24032 sclass=netlink_route_socket pid=5975 comm=syz-executor.5 [ 558.000206] FAULT_INJECTION: forcing a failure. [ 558.000206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.002560] CPU: 0 UID: 0 PID: 5974 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 558.002603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 558.002620] Call Trace: [ 558.002631] [ 558.002643] dump_stack_lvl+0xfa/0x120 [ 558.002705] should_fail_ex+0x4d7/0x5e0 [ 558.002777] should_fail_alloc_page+0xe0/0x110 [ 558.002823] prepare_alloc_pages+0x1eb/0x550 [ 558.002893] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 558.002948] ? perf_tp_event+0x807/0xe70 [ 558.003036] ? perf_trace_run_bpf_submit+0xef/0x180 [ 558.003084] ? __pfx_perf_tp_event+0x10/0x10 [ 558.003154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.003207] ? __pfx_perf_tp_event+0x10/0x10 [ 558.003319] ? perf_trace_run_bpf_submit+0xef/0x180 02:10:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 4) [ 558.003380] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.003446] ? policy_nodemask+0xeb/0x4e0 [ 558.003517] alloc_pages_mpol+0xed/0x340 [ 558.003569] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.003629] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.003684] ? get_vma_policy+0x23b/0x350 [ 558.003761] vma_alloc_folio_noprof+0xe9/0x440 [ 558.003822] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.003883] ? lock_release+0xc8/0x270 [ 558.003934] __handle_mm_fault+0x145c/0x2fa0 [ 558.003979] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.004015] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.004101] ? follow_page_pte+0x4f9/0x1170 [ 558.004155] handle_mm_fault+0x2d8/0x750 [ 558.004208] __get_user_pages+0x587/0x2fb0 [ 558.004298] ? __pfx___get_user_pages+0x10/0x10 [ 558.004360] ? lock_is_held_type+0x9e/0x120 [ 558.004407] faultin_page_range+0x2f3/0x9d0 [ 558.004468] madvise_do_behavior+0x918/0xef0 [ 558.004518] ? __pfx_madvise_do_behavior+0x10/0x10 [ 558.004561] ? down_read+0x1b1/0x450 [ 558.004620] ? find_held_lock+0x2b/0x80 [ 558.004679] do_madvise+0x16b/0x240 [ 558.004709] ? __pfx_do_madvise+0x10/0x10 [ 558.004733] ? kernel_write+0x5f3/0x660 [ 558.004802] ? __fget_files+0x20d/0x3b0 [ 558.004852] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 558.004890] ? ksys_write+0x1a3/0x240 [ 558.004930] ? __pfx_ksys_write+0x10/0x10 [ 558.004965] ? irqentry_exit+0xee/0x650 [ 558.004997] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 558.005025] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 558.005068] __x64_sys_madvise+0xa9/0x110 [ 558.005094] ? do_syscall_64+0x85/0x420 [ 558.005134] do_syscall_64+0xbf/0x420 [ 558.005177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.005204] RIP: 0033:0x7fbf3563bb19 [ 558.005225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.005247] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 558.005269] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 558.005285] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 558.005299] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.005313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.005326] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 558.005391] [ 558.050104] 9p: Bad value for 'rfdno' [ 558.144792] FAULT_INJECTION: forcing a failure. [ 558.144792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.146704] CPU: 0 UID: 0 PID: 5985 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 558.146735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 558.146748] Call Trace: [ 558.146758] [ 558.146768] dump_stack_lvl+0xfa/0x120 [ 558.146818] should_fail_ex+0x4d7/0x5e0 [ 558.146869] should_fail_alloc_page+0xe0/0x110 [ 558.146903] prepare_alloc_pages+0x1eb/0x550 [ 558.146951] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 558.146989] ? perf_tp_event+0x807/0xe70 [ 558.147046] ? perf_trace_run_bpf_submit+0xef/0x180 [ 558.147079] ? __pfx_perf_tp_event+0x10/0x10 [ 558.147124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.147160] ? __pfx_perf_tp_event+0x10/0x10 [ 558.147234] ? perf_trace_run_bpf_submit+0xef/0x180 [ 558.147269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.147315] ? policy_nodemask+0xeb/0x4e0 [ 558.147370] alloc_pages_mpol+0xed/0x340 [ 558.147408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.147445] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.147482] ? get_vma_policy+0x23b/0x350 [ 558.147531] vma_alloc_folio_noprof+0xe9/0x440 [ 558.147570] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.147614] ? lock_release+0xc8/0x270 [ 558.147664] __handle_mm_fault+0x145c/0x2fa0 [ 558.147709] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.147745] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.147831] ? follow_page_pte+0x4f9/0x1170 [ 558.147885] handle_mm_fault+0x2d8/0x750 [ 558.147939] __get_user_pages+0x587/0x2fb0 [ 558.148029] ? __pfx___get_user_pages+0x10/0x10 [ 558.148076] ? lock_is_held_type+0x9e/0x120 [ 558.148123] faultin_page_range+0x2f3/0x9d0 [ 558.148185] madvise_do_behavior+0x918/0xef0 [ 558.148235] ? __pfx_madvise_do_behavior+0x10/0x10 [ 558.148278] ? down_read+0x1b1/0x450 [ 558.148350] ? find_held_lock+0x2b/0x80 [ 558.148410] do_madvise+0x16b/0x240 [ 558.148440] ? __pfx_do_madvise+0x10/0x10 [ 558.148465] ? kernel_write+0x5f3/0x660 [ 558.148533] ? __fget_files+0x20d/0x3b0 [ 558.148584] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 558.148621] ? ksys_write+0x1a3/0x240 [ 558.148661] ? __pfx_ksys_write+0x10/0x10 [ 558.148696] ? irqentry_exit+0xee/0x650 [ 558.148727] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 558.148755] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 558.148798] __x64_sys_madvise+0xa9/0x110 [ 558.148824] ? do_syscall_64+0x85/0x420 [ 558.148865] do_syscall_64+0xbf/0x420 [ 558.148908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.148934] RIP: 0033:0x7f494b73bb19 [ 558.148956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.148978] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 558.149000] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 558.149016] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 558.149029] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.149043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.149056] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 558.149121] 02:10:20 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 6) 02:10:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 3) 02:10:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x4e, 0x9, 0x0, 0x0, 0x1f0, 0x4000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_bp={0xfffffffffffffffc, 0xd}, 0x800, 0x6, 0x0, 0x8, 0x7, 0x6, 0x5, 0x0, 0x208, 0x0, 0x100}, 0x0, 0xb, r0, 0x3) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = getpid() r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x5, "50fccba91b"}, &(0x7f00000000c0)=0x29) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x4000, 0x80) write$P9_RREADDIR(r4, &(0x7f00000001c0)={0x122, 0x29, 0xffff, {0x0, [{{0x60, 0x2, 0x8}, 0x3157, 0xe8, 0x7, './file0'}, {{0x10, 0x3, 0x5}, 0xeaa, 0xb0, 0x7, './file1'}, {{0x0, 0x1, 0x3}, 0x40, 0x64, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x8, 0xae, 0x7, './file0'}, {{0x1, 0x0, 0x4}, 0x7fff, 0x4, 0x7, './file0'}, {{0x40, 0x0, 0x8}, 0x61d, 0x5, 0x7, './file1'}, {{0x0, 0x4, 0x6}, 0x2, 0x48, 0x7, './file0'}, {{0x1, 0x3}, 0xfffffffffffffff7, 0x7, 0x7, './file0'}, {{0x2, 0x1, 0x2}, 0x3f, 0x7f, 0x7, './file0'}]}}, 0x122) r5 = pidfd_open(r2, 0x0) pidfd_getfd(r5, r1, 0x0) 02:10:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) [ 558.339108] 9p: Bad value for 'rfdno' [ 558.353684] FAULT_INJECTION: forcing a failure. [ 558.353684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.355622] CPU: 0 UID: 0 PID: 5989 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 558.355652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 558.355666] Call Trace: [ 558.355674] [ 558.355684] dump_stack_lvl+0xfa/0x120 [ 558.355733] should_fail_ex+0x4d7/0x5e0 [ 558.355783] should_fail_alloc_page+0xe0/0x110 [ 558.355818] prepare_alloc_pages+0x1eb/0x550 [ 558.355866] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 558.355903] ? perf_tp_event+0x807/0xe70 [ 558.355961] ? perf_trace_run_bpf_submit+0xef/0x180 [ 558.355993] ? __pfx_perf_tp_event+0x10/0x10 [ 558.356039] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.356074] ? __pfx_perf_tp_event+0x10/0x10 [ 558.356148] ? perf_trace_run_bpf_submit+0xef/0x180 [ 558.356183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.356228] ? policy_nodemask+0xeb/0x4e0 [ 558.356275] alloc_pages_mpol+0xed/0x340 [ 558.356313] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.356370] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.356408] ? get_vma_policy+0x23b/0x350 [ 558.356456] vma_alloc_folio_noprof+0xe9/0x440 [ 558.356495] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.356539] ? lock_release+0xc8/0x270 [ 558.356589] __handle_mm_fault+0x145c/0x2fa0 [ 558.356633] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.356669] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.356755] ? follow_page_pte+0x4f9/0x1170 [ 558.356809] handle_mm_fault+0x2d8/0x750 [ 558.356861] __get_user_pages+0x587/0x2fb0 [ 558.356951] ? __pfx___get_user_pages+0x10/0x10 [ 558.356998] ? lock_is_held_type+0x9e/0x120 [ 558.357045] faultin_page_range+0x2f3/0x9d0 [ 558.357106] madvise_do_behavior+0x918/0xef0 [ 558.357156] ? __pfx_madvise_do_behavior+0x10/0x10 [ 558.357198] ? down_read+0x1b1/0x450 [ 558.357257] ? find_held_lock+0x2b/0x80 [ 558.357316] do_madvise+0x16b/0x240 [ 558.357346] ? __pfx_do_madvise+0x10/0x10 [ 558.357370] ? kernel_write+0x5f3/0x660 [ 558.357439] ? __fget_files+0x20d/0x3b0 [ 558.357490] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 558.357528] ? ksys_write+0x1a3/0x240 [ 558.357567] ? __pfx_ksys_write+0x10/0x10 [ 558.357602] ? irqentry_exit+0xee/0x650 [ 558.357633] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 558.357661] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 558.357704] __x64_sys_madvise+0xa9/0x110 [ 558.357730] ? do_syscall_64+0x85/0x420 [ 558.357770] do_syscall_64+0xbf/0x420 [ 558.357814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.357840] RIP: 0033:0x7f6da0d61b19 [ 558.357861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.357883] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 558.357906] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 558.357921] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 558.357935] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.357948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.357961] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 558.358026] [ 558.413953] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 558.471929] FAULT_INJECTION: forcing a failure. [ 558.471929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.473840] CPU: 1 UID: 0 PID: 5999 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 558.473870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 558.473884] Call Trace: [ 558.473892] [ 558.473901] dump_stack_lvl+0xfa/0x120 [ 558.473942] should_fail_ex+0x4d7/0x5e0 [ 558.473981] should_fail_alloc_page+0xe0/0x110 [ 558.474008] prepare_alloc_pages+0x1eb/0x550 [ 558.474040] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 558.474072] ? __lock_acquire+0x451/0x2250 [ 558.474098] ? look_up_lock_class+0x66/0x130 [ 558.474130] ? register_lock_class+0x3f/0x790 [ 558.474158] ? perf_trace_lock+0xb5/0x5d0 [ 558.474185] ? __lock_acquire+0x451/0x2250 [ 558.474219] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.474250] ? perf_trace_lock+0xb5/0x5d0 [ 558.474288] ? __lock_acquire+0x451/0x2250 [ 558.474320] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.474365] ? policy_nodemask+0xeb/0x4e0 [ 558.474400] alloc_pages_mpol+0xed/0x340 [ 558.474431] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.474463] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.474493] ? get_vma_policy+0x23b/0x350 [ 558.474530] vma_alloc_folio_noprof+0xe9/0x440 [ 558.474564] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.474600] ? lock_release+0xc8/0x270 [ 558.474634] __handle_mm_fault+0x145c/0x2fa0 [ 558.474668] ? __pfx_perf_trace_lock+0x10/0x10 [ 558.474698] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.474727] ? __pte_offset_map_lock+0x190/0x330 [ 558.474769] ? follow_page_pte+0x4f9/0x1170 [ 558.474807] handle_mm_fault+0x2d8/0x750 [ 558.474843] __get_user_pages+0x587/0x2fb0 [ 558.474889] ? find_held_lock+0x2b/0x80 [ 558.474926] ? __pfx___get_user_pages+0x10/0x10 [ 558.474961] ? lock_is_held_type+0x9e/0x120 [ 558.474996] faultin_page_range+0x2f3/0x9d0 [ 558.475038] madvise_do_behavior+0x918/0xef0 [ 558.475072] ? __pfx_madvise_do_behavior+0x10/0x10 [ 558.475103] ? down_read+0x1b1/0x450 [ 558.475144] ? find_held_lock+0x2b/0x80 [ 558.475186] do_madvise+0x16b/0x240 [ 558.475211] ? __pfx_do_madvise+0x10/0x10 [ 558.475234] ? kernel_write+0x5f3/0x660 [ 558.475281] ? __fget_files+0x20d/0x3b0 [ 558.475313] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 558.475344] ? ksys_write+0x1a3/0x240 [ 558.475379] ? __pfx_ksys_write+0x10/0x10 [ 558.475413] ? irqentry_exit+0xee/0x650 [ 558.475442] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 558.475469] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 558.475502] __x64_sys_madvise+0xa9/0x110 [ 558.475526] ? do_syscall_64+0x85/0x420 [ 558.475561] do_syscall_64+0xbf/0x420 [ 558.475596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.475621] RIP: 0033:0x7fbf3563bb19 [ 558.475640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.475662] RSP: 002b:00007fbf32b90188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 558.475684] RAX: ffffffffffffffda RBX: 00007fbf3574f020 RCX: 00007fbf3563bb19 [ 558.475700] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 558.475714] RBP: 00007fbf32b901d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.475727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.475740] R13: 00007fff0cae72ef R14: 00007fbf32b90300 R15: 0000000000022000 [ 558.475774] [ 558.528605] FAULT_INJECTION: forcing a failure. [ 558.528605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.530571] CPU: 1 UID: 0 PID: 6001 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 558.530601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 558.530620] Call Trace: [ 558.530631] [ 558.530642] dump_stack_lvl+0xfa/0x120 [ 558.530681] should_fail_ex+0x4d7/0x5e0 [ 558.530718] _copy_from_user+0x30/0xd0 [ 558.530752] memdup_user+0x7e/0xe0 [ 558.530784] strndup_user+0x78/0xe0 [ 558.530816] __x64_sys_mount+0x136/0x310 [ 558.530844] ? __pfx___x64_sys_mount+0x10/0x10 [ 558.530869] ? irqentry_exit+0xee/0x650 [ 558.530898] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 558.530926] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 558.530963] do_syscall_64+0xbf/0x420 [ 558.531000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.531024] RIP: 0033:0x7f214b05fb19 [ 558.531042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.531064] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 558.531086] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 558.531101] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 558.531115] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 558.531129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.531142] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 558.531175] [ 558.589101] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:10:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x8}}, 0x0) 02:10:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 02:10:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 5) 02:10:32 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 4) 02:10:32 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 7) 02:10:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 02:10:32 executing program 5: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) write$binfmt_elf64(r1, &(0x7f00000015c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfb, 0x0, 0x81, 0x1, 0x7, 0x3, 0x3e, 0x1, 0xe1, 0x40, 0x379, 0x7312, 0x400, 0x38, 0x4, 0x4, 0x25, 0x1}, [{0x2, 0x1, 0x4, 0x103, 0xf3d, 0x100000001, 0x10001, 0x4}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000080)=0x8, 0x4) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) [ 569.766290] 9p: Bad value for 'rfdno' [ 569.776017] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 569.779537] FAULT_INJECTION: forcing a failure. [ 569.779537] name failslab, interval 1, probability 0, space 0, times 0 [ 569.781407] CPU: 0 UID: 0 PID: 6022 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 569.781437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 569.781451] Call Trace: [ 569.781459] [ 569.781468] dump_stack_lvl+0xfa/0x120 [ 569.781511] should_fail_ex+0x4d7/0x5e0 [ 569.781549] ? copy_mount_options+0x55/0x180 [ 569.781578] should_failslab+0xc2/0x120 [ 569.781606] __kmalloc_cache_noprof+0x80/0x780 [ 569.781638] ? __might_fault+0xe0/0x190 [ 569.781671] ? copy_mount_options+0x55/0x180 [ 569.781698] ? memdup_user+0x95/0xe0 [ 569.781728] copy_mount_options+0x55/0x180 [ 569.781762] __x64_sys_mount+0x1ab/0x310 [ 569.781789] ? __pfx___x64_sys_mount+0x10/0x10 [ 569.781814] ? irqentry_exit+0xee/0x650 [ 569.781843] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 569.781872] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 569.781910] do_syscall_64+0xbf/0x420 [ 569.781947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.781971] RIP: 0033:0x7f214b05fb19 [ 569.781990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.782012] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.782034] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 569.782049] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 569.782064] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 569.782078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.782091] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 569.782124] 02:10:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 02:10:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 569.859235] FAULT_INJECTION: forcing a failure. [ 569.859235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.861552] CPU: 1 UID: 0 PID: 6027 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 569.861583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 569.861596] Call Trace: [ 569.861604] [ 569.861614] dump_stack_lvl+0xfa/0x120 [ 569.861654] should_fail_ex+0x4d7/0x5e0 [ 569.861692] should_fail_alloc_page+0xe0/0x110 [ 569.861720] prepare_alloc_pages+0x1eb/0x550 [ 569.861752] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 569.861783] ? __lock_acquire+0x451/0x2250 [ 569.861809] ? look_up_lock_class+0x66/0x130 [ 569.861841] ? register_lock_class+0x3f/0x790 [ 569.861868] ? perf_trace_lock+0xb5/0x5d0 [ 569.861896] ? __lock_acquire+0x451/0x2250 [ 569.861930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.861961] ? perf_trace_lock+0xb5/0x5d0 [ 569.861999] ? __lock_acquire+0x451/0x2250 [ 569.862031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.862067] ? policy_nodemask+0xeb/0x4e0 [ 569.862102] alloc_pages_mpol+0xed/0x340 [ 569.862134] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 569.862166] ? __pfx_perf_trace_lock+0x10/0x10 [ 569.862195] ? get_vma_policy+0x23b/0x350 [ 569.862232] vma_alloc_folio_noprof+0xe9/0x440 [ 569.862266] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 569.862303] ? lock_release+0xc8/0x270 [ 569.862344] __handle_mm_fault+0x145c/0x2fa0 [ 569.862378] ? __pfx_perf_trace_lock+0x10/0x10 [ 569.862408] ? __pfx___handle_mm_fault+0x10/0x10 [ 569.862436] ? __pte_offset_map_lock+0x190/0x330 [ 569.862479] ? follow_page_pte+0x4f9/0x1170 [ 569.862516] handle_mm_fault+0x2d8/0x750 [ 569.862553] __get_user_pages+0x587/0x2fb0 [ 569.862598] ? find_held_lock+0x2b/0x80 [ 569.862635] ? __pfx___get_user_pages+0x10/0x10 [ 569.862670] ? lock_is_held_type+0x9e/0x120 [ 569.862705] faultin_page_range+0x2f3/0x9d0 [ 569.862746] madvise_do_behavior+0x918/0xef0 [ 569.862780] ? __pfx_madvise_do_behavior+0x10/0x10 [ 569.862810] ? down_read+0x1b1/0x450 [ 569.862852] ? find_held_lock+0x2b/0x80 [ 569.862894] do_madvise+0x16b/0x240 [ 569.862918] ? __pfx_do_madvise+0x10/0x10 [ 569.862941] ? kernel_write+0x5f3/0x660 [ 569.862988] ? __fget_files+0x20d/0x3b0 [ 569.863020] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 569.863051] ? ksys_write+0x1a3/0x240 [ 569.863086] ? __pfx_ksys_write+0x10/0x10 [ 569.863120] ? irqentry_exit+0xee/0x650 [ 569.863148] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 569.863175] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 569.863208] __x64_sys_madvise+0xa9/0x110 [ 569.863232] ? do_syscall_64+0x85/0x420 [ 569.863267] do_syscall_64+0xbf/0x420 [ 569.863302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.863326] RIP: 0033:0x7f494b73bb19 [ 569.863345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.863367] RSP: 002b:00007f4948c90188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 569.863389] RAX: ffffffffffffffda RBX: 00007f494b84f020 RCX: 00007f494b73bb19 [ 569.863405] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 569.863419] RBP: 00007f4948c901d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.863432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.863445] R13: 00007fff7141d11f R14: 00007f4948c90300 R15: 0000000000022000 [ 569.863479] [ 569.921151] FAULT_INJECTION: forcing a failure. [ 569.921151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.923185] CPU: 1 UID: 0 PID: 6029 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 569.923215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 569.923229] Call Trace: [ 569.923236] [ 569.923245] dump_stack_lvl+0xfa/0x120 [ 569.923285] should_fail_ex+0x4d7/0x5e0 [ 569.923323] should_fail_alloc_page+0xe0/0x110 [ 569.923358] prepare_alloc_pages+0x1eb/0x550 [ 569.923390] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 569.923420] ? __lock_acquire+0x451/0x2250 [ 569.923446] ? look_up_lock_class+0x66/0x130 [ 569.923478] ? register_lock_class+0x3f/0x790 [ 569.923506] ? perf_trace_lock+0xb5/0x5d0 [ 569.923533] ? __lock_acquire+0x451/0x2250 [ 569.923567] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.923598] ? perf_trace_lock+0xb5/0x5d0 [ 569.923636] ? __lock_acquire+0x451/0x2250 [ 569.923668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.923705] ? policy_nodemask+0xeb/0x4e0 [ 569.923740] alloc_pages_mpol+0xed/0x340 [ 569.923771] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 569.923802] ? __pfx_perf_trace_lock+0x10/0x10 [ 569.923832] ? get_vma_policy+0x23b/0x350 [ 569.923869] vma_alloc_folio_noprof+0xe9/0x440 [ 569.923903] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 569.923939] ? lock_release+0xc8/0x270 [ 569.923973] __handle_mm_fault+0x145c/0x2fa0 [ 569.924007] ? __pfx_perf_trace_lock+0x10/0x10 [ 569.924037] ? __pfx___handle_mm_fault+0x10/0x10 [ 569.924065] ? __pte_offset_map_lock+0x190/0x330 [ 569.924108] ? follow_page_pte+0x4f9/0x1170 [ 569.924145] handle_mm_fault+0x2d8/0x750 [ 569.924182] __get_user_pages+0x587/0x2fb0 [ 569.924227] ? find_held_lock+0x2b/0x80 [ 569.924264] ? __pfx___get_user_pages+0x10/0x10 [ 569.924299] ? lock_is_held_type+0x9e/0x120 [ 569.924334] faultin_page_range+0x2f3/0x9d0 [ 569.924375] madvise_do_behavior+0x918/0xef0 [ 569.924409] ? __pfx_madvise_do_behavior+0x10/0x10 [ 569.924439] ? down_read+0x1b1/0x450 [ 569.924480] ? find_held_lock+0x2b/0x80 [ 569.924540] do_madvise+0x16b/0x240 [ 569.924564] ? __pfx_do_madvise+0x10/0x10 [ 569.924588] ? kernel_write+0x5f3/0x660 [ 569.924634] ? __fget_files+0x20d/0x3b0 [ 569.924666] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 569.924698] ? ksys_write+0x1a3/0x240 [ 569.924733] ? __pfx_ksys_write+0x10/0x10 [ 569.924766] ? irqentry_exit+0xee/0x650 [ 569.924795] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 569.924822] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 569.924854] __x64_sys_madvise+0xa9/0x110 [ 569.924878] ? do_syscall_64+0x85/0x420 [ 569.924913] do_syscall_64+0xbf/0x420 [ 569.924948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.924972] RIP: 0033:0x7fbf3563bb19 [ 569.924991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.925012] RSP: 002b:00007fbf32b90188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 569.925035] RAX: ffffffffffffffda RBX: 00007fbf3574f020 RCX: 00007fbf3563bb19 [ 569.925050] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 569.925063] RBP: 00007fbf32b901d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.925077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.925090] R13: 00007fff0cae72ef R14: 00007fbf32b90300 R15: 0000000000022000 [ 569.925124] 02:10:32 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 570.001332] FAULT_INJECTION: forcing a failure. [ 570.001332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.004898] CPU: 1 UID: 0 PID: 6028 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 570.004930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.004943] Call Trace: [ 570.004951] [ 570.004959] dump_stack_lvl+0xfa/0x120 [ 570.005000] should_fail_ex+0x4d7/0x5e0 [ 570.005038] should_fail_alloc_page+0xe0/0x110 [ 570.005066] prepare_alloc_pages+0x1eb/0x550 [ 570.005091] ? arch_stack_walk+0x9c/0xf0 [ 570.005121] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 570.005161] ? perf_trace_lock+0xb5/0x5d0 [ 570.005189] ? __lock_acquire+0x451/0x2250 [ 570.005222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 570.005253] ? perf_trace_lock+0xb5/0x5d0 [ 570.005291] ? __lock_acquire+0x451/0x2250 [ 570.005324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 570.005368] ? policy_nodemask+0xeb/0x4e0 [ 570.005403] alloc_pages_mpol+0xed/0x340 [ 570.005434] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 570.005466] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.005495] ? get_vma_policy+0x23b/0x350 [ 570.005532] vma_alloc_folio_noprof+0xe9/0x440 [ 570.005567] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 570.005603] ? lock_release+0xc8/0x270 [ 570.005637] __handle_mm_fault+0x145c/0x2fa0 [ 570.005671] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.005701] ? __pfx___handle_mm_fault+0x10/0x10 [ 570.005730] ? __pte_offset_map_lock+0x190/0x330 [ 570.005772] ? follow_page_pte+0x4f9/0x1170 [ 570.005810] handle_mm_fault+0x2d8/0x750 [ 570.005846] __get_user_pages+0x587/0x2fb0 [ 570.005892] ? find_held_lock+0x2b/0x80 [ 570.005929] ? __pfx___get_user_pages+0x10/0x10 [ 570.005964] ? lock_is_held_type+0x9e/0x120 [ 570.005999] faultin_page_range+0x2f3/0x9d0 [ 570.006041] madvise_do_behavior+0x918/0xef0 [ 570.006074] ? __pfx_madvise_do_behavior+0x10/0x10 [ 570.006105] ? down_read+0x1b1/0x450 [ 570.006146] ? find_held_lock+0x2b/0x80 [ 570.006188] do_madvise+0x16b/0x240 [ 570.006213] ? __pfx_do_madvise+0x10/0x10 [ 570.006236] ? kernel_write+0x5f3/0x660 [ 570.006283] ? __fget_files+0x20d/0x3b0 [ 570.006315] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 570.006347] ? ksys_write+0x1a3/0x240 [ 570.006382] ? __pfx_ksys_write+0x10/0x10 [ 570.006425] __x64_sys_madvise+0xa9/0x110 [ 570.006449] ? do_syscall_64+0x85/0x420 [ 570.006484] do_syscall_64+0xbf/0x420 [ 570.006520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.006544] RIP: 0033:0x7f6da0d61b19 [ 570.006562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.006584] RSP: 002b:00007f6d9e2b6188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c 02:10:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x27}}, 0x0) [ 570.006606] RAX: ffffffffffffffda RBX: 00007f6da0e75020 RCX: 00007f6da0d61b19 [ 570.006621] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 570.006636] RBP: 00007f6d9e2b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.006649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.006662] R13: 00007fff299db15f R14: 00007f6d9e2b6300 R15: 0000000000022000 [ 570.006696] [ 570.129299] 9p: Bad value for 'wfdno' [ 570.149866] 9p: Bad value for 'rfdno' 02:10:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 6) 02:10:32 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 5) [ 570.309241] FAULT_INJECTION: forcing a failure. [ 570.309241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.312707] CPU: 1 UID: 0 PID: 6043 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 570.312750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.312769] Call Trace: [ 570.312780] [ 570.312792] dump_stack_lvl+0xfa/0x120 [ 570.312835] should_fail_ex+0x4d7/0x5e0 [ 570.312873] should_fail_alloc_page+0xe0/0x110 [ 570.312900] prepare_alloc_pages+0x1eb/0x550 [ 570.312932] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 570.312962] ? __lock_acquire+0x451/0x2250 [ 570.312988] ? look_up_lock_class+0x66/0x130 [ 570.313020] ? register_lock_class+0x3f/0x790 [ 570.313048] ? perf_trace_lock+0xb5/0x5d0 [ 570.313075] ? __lock_acquire+0x451/0x2250 [ 570.313110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 570.313141] ? perf_trace_lock+0xb5/0x5d0 [ 570.313179] ? __lock_acquire+0x451/0x2250 [ 570.313211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 570.313248] ? policy_nodemask+0xeb/0x4e0 [ 570.313283] alloc_pages_mpol+0xed/0x340 [ 570.313314] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 570.313353] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.313383] ? get_vma_policy+0x23b/0x350 [ 570.313420] vma_alloc_folio_noprof+0xe9/0x440 [ 570.313454] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 570.313490] ? lock_release+0xc8/0x270 [ 570.313524] __handle_mm_fault+0x145c/0x2fa0 [ 570.313557] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.313587] ? __pfx___handle_mm_fault+0x10/0x10 [ 570.313616] ? __pte_offset_map_lock+0x190/0x330 [ 570.313658] ? follow_page_pte+0x4f9/0x1170 [ 570.313696] handle_mm_fault+0x2d8/0x750 [ 570.313732] __get_user_pages+0x587/0x2fb0 [ 570.313778] ? find_held_lock+0x2b/0x80 [ 570.313815] ? __pfx___get_user_pages+0x10/0x10 [ 570.313850] ? lock_is_held_type+0x9e/0x120 [ 570.313884] faultin_page_range+0x2f3/0x9d0 [ 570.313926] madvise_do_behavior+0x918/0xef0 [ 570.313959] ? __pfx_madvise_do_behavior+0x10/0x10 [ 570.313990] ? down_read+0x1b1/0x450 [ 570.314031] ? find_held_lock+0x2b/0x80 [ 570.314073] do_madvise+0x16b/0x240 [ 570.314098] ? __pfx_do_madvise+0x10/0x10 [ 570.314121] ? kernel_write+0x5f3/0x660 [ 570.314168] ? __fget_files+0x20d/0x3b0 [ 570.314177] FAULT_INJECTION: forcing a failure. [ 570.314177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.314199] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 570.314232] ? ksys_write+0x1a3/0x240 [ 570.314267] ? __pfx_ksys_write+0x10/0x10 [ 570.314300] ? irqentry_exit+0xee/0x650 [ 570.314329] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 570.314356] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 570.314389] __x64_sys_madvise+0xa9/0x110 [ 570.314413] ? do_syscall_64+0x85/0x420 [ 570.314448] do_syscall_64+0xbf/0x420 [ 570.314483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.314507] RIP: 0033:0x7f494b73bb19 [ 570.314526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.314547] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 570.314570] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 570.314585] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 570.314599] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.314612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.314626] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 570.314659] [ 570.369061] CPU: 0 UID: 0 PID: 6042 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 570.369091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.369105] Call Trace: [ 570.369113] [ 570.369123] dump_stack_lvl+0xfa/0x120 [ 570.369171] should_fail_ex+0x4d7/0x5e0 [ 570.369219] should_fail_alloc_page+0xe0/0x110 [ 570.369251] prepare_alloc_pages+0x1eb/0x550 [ 570.369296] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 570.369331] ? perf_tp_event+0x807/0xe70 [ 570.369393] ? perf_trace_run_bpf_submit+0xef/0x180 [ 570.369424] ? __pfx_perf_tp_event+0x10/0x10 [ 570.369466] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 570.369499] ? __pfx_perf_tp_event+0x10/0x10 [ 570.369568] ? perf_trace_run_bpf_submit+0xef/0x180 [ 570.369600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 570.369643] ? policy_nodemask+0xeb/0x4e0 [ 570.369687] alloc_pages_mpol+0xed/0x340 [ 570.369722] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 570.369757] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.369792] ? get_vma_policy+0x23b/0x350 [ 570.369837] vma_alloc_folio_noprof+0xe9/0x440 [ 570.369874] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 570.369914] ? lock_release+0xc8/0x270 [ 570.369961] __handle_mm_fault+0x145c/0x2fa0 [ 570.370003] ? __pfx_perf_trace_lock+0x10/0x10 [ 570.370037] ? __pfx___handle_mm_fault+0x10/0x10 [ 570.370117] ? follow_page_pte+0x4f9/0x1170 [ 570.370167] handle_mm_fault+0x2d8/0x750 [ 570.370217] __get_user_pages+0x587/0x2fb0 [ 570.370300] ? __pfx___get_user_pages+0x10/0x10 [ 570.370343] ? lock_is_held_type+0x9e/0x120 [ 570.370388] faultin_page_range+0x2f3/0x9d0 [ 570.370445] madvise_do_behavior+0x918/0xef0 [ 570.370492] ? __pfx_madvise_do_behavior+0x10/0x10 [ 570.370532] ? down_read+0x1b1/0x450 [ 570.370588] ? find_held_lock+0x2b/0x80 [ 570.370643] do_madvise+0x16b/0x240 [ 570.370671] ? __pfx_do_madvise+0x10/0x10 [ 570.370693] ? kernel_write+0x5f3/0x660 [ 570.370759] ? __fget_files+0x20d/0x3b0 [ 570.370806] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 570.370841] ? ksys_write+0x1a3/0x240 [ 570.370878] ? __pfx_ksys_write+0x10/0x10 [ 570.370910] ? irqentry_exit+0xee/0x650 [ 570.370940] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 570.370967] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 570.371007] __x64_sys_madvise+0xa9/0x110 [ 570.371031] ? do_syscall_64+0x85/0x420 [ 570.371069] do_syscall_64+0xbf/0x420 [ 570.371110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.371134] RIP: 0033:0x7fbf3563bb19 [ 570.371154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.371174] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 570.371195] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 570.371209] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 570.371222] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.371235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.371247] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 570.371308] 02:10:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 02:10:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 6) 02:10:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 7) 02:10:41 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x95a) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 02:10:41 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x2c}}, 0x0) 02:10:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 8) [ 578.550983] 9p: Bad value for 'rfdno' [ 578.552445] 9p: Bad value for 'wfdno' [ 578.568672] FAULT_INJECTION: forcing a failure. [ 578.568672] name failslab, interval 1, probability 0, space 0, times 0 [ 578.569819] CPU: 1 UID: 0 PID: 6058 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 578.569835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.569842] Call Trace: [ 578.569846] [ 578.569851] dump_stack_lvl+0xfa/0x120 [ 578.569875] should_fail_ex+0x4d7/0x5e0 [ 578.569896] ? jbd2__journal_start+0x193/0x820 [ 578.569913] should_failslab+0xc2/0x120 [ 578.569927] kmem_cache_alloc_noprof+0x80/0x760 [ 578.569942] ? ktime_get_coarse_real_ts64_mg+0x1bb/0x2a0 [ 578.569964] ? jbd2__journal_start+0x193/0x820 [ 578.569980] jbd2__journal_start+0x193/0x820 [ 578.569999] __ext4_journal_start_sb+0x325/0x580 [ 578.570014] ? ext4_dirty_inode+0xa5/0x130 [ 578.570031] ext4_dirty_inode+0xa5/0x130 [ 578.570045] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 578.570057] __mark_inode_dirty+0x1b7/0x13c0 [ 578.570076] generic_update_time+0xcb/0xf0 [ 578.570092] file_update_time_flags+0x3f7/0x4f0 [ 578.570110] ext4_page_mkwrite+0x329/0x1710 [ 578.570129] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 578.570145] ? find_held_lock+0x2b/0x80 [ 578.570166] do_page_mkwrite+0x17a/0x370 [ 578.570180] do_wp_page+0xf80/0x2fe0 [ 578.570196] ? ___pte_offset_map+0x33/0x390 [ 578.570210] ? __pfx_do_wp_page+0x10/0x10 [ 578.570224] ? do_raw_spin_lock+0x123/0x260 [ 578.570241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.570263] __handle_mm_fault+0xd9e/0x2fa0 [ 578.570280] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.570296] ? __pfx___handle_mm_fault+0x10/0x10 [ 578.570310] ? __pte_offset_map_lock+0x190/0x330 [ 578.570336] ? follow_page_pte+0x4f9/0x1170 [ 578.570356] handle_mm_fault+0x2d8/0x750 [ 578.570374] __get_user_pages+0x587/0x2fb0 [ 578.570397] ? find_held_lock+0x2b/0x80 [ 578.570416] ? __pfx___get_user_pages+0x10/0x10 [ 578.570433] ? lock_is_held_type+0x9e/0x120 [ 578.570452] faultin_page_range+0x2f3/0x9d0 [ 578.570473] madvise_do_behavior+0x918/0xef0 [ 578.570490] ? __pfx_madvise_do_behavior+0x10/0x10 [ 578.570506] ? down_read+0x1b1/0x450 [ 578.570528] ? find_held_lock+0x2b/0x80 [ 578.570549] do_madvise+0x16b/0x240 [ 578.570561] ? __pfx_do_madvise+0x10/0x10 [ 578.570573] ? kernel_write+0x5f3/0x660 [ 578.570597] ? __fget_files+0x20d/0x3b0 [ 578.570613] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 578.570630] ? ksys_write+0x1a3/0x240 [ 578.570648] ? __pfx_ksys_write+0x10/0x10 [ 578.570665] ? irqentry_exit+0xee/0x650 [ 578.570680] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.570693] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.570710] __x64_sys_madvise+0xa9/0x110 [ 578.570722] ? do_syscall_64+0x85/0x420 [ 578.570740] do_syscall_64+0xbf/0x420 [ 578.570758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.570771] RIP: 0033:0x7f494b73bb19 [ 578.570780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.570792] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 578.570804] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 578.570811] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 578.570818] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.570825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.570832] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 578.570849] [ 578.615014] FAULT_INJECTION: forcing a failure. [ 578.615014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.616775] CPU: 0 UID: 0 PID: 6065 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 578.616804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.616818] Call Trace: [ 578.616825] [ 578.616834] dump_stack_lvl+0xfa/0x120 [ 578.616876] should_fail_ex+0x4d7/0x5e0 [ 578.616914] _copy_from_user+0x30/0xd0 [ 578.616947] copy_mount_options+0x76/0x180 [ 578.616982] __x64_sys_mount+0x1ab/0x310 [ 578.617008] ? __pfx___x64_sys_mount+0x10/0x10 [ 578.617032] ? irqentry_exit+0xee/0x650 [ 578.617061] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.617089] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.617126] do_syscall_64+0xbf/0x420 [ 578.617161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.617185] RIP: 0033:0x7f214b05fb19 [ 578.617203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.617224] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 578.617245] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 578.617259] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 578.617272] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 578.617285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 02:10:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:41 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 578.617298] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 578.617329] 02:10:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 9) [ 578.671285] FAULT_INJECTION: forcing a failure. [ 578.671285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.673080] CPU: 0 UID: 0 PID: 6064 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 578.673109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.673122] Call Trace: [ 578.673131] [ 578.673141] dump_stack_lvl+0xfa/0x120 [ 578.673186] should_fail_ex+0x4d7/0x5e0 [ 578.673234] should_fail_alloc_page+0xe0/0x110 [ 578.673267] prepare_alloc_pages+0x1eb/0x550 [ 578.673312] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 578.673354] ? perf_tp_event+0x807/0xe70 [ 578.673408] ? perf_trace_run_bpf_submit+0xef/0x180 [ 578.673438] ? __pfx_perf_tp_event+0x10/0x10 [ 578.673481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 578.673514] ? __pfx_perf_tp_event+0x10/0x10 [ 578.673583] ? perf_trace_run_bpf_submit+0xef/0x180 [ 578.673615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 578.673658] ? policy_nodemask+0xeb/0x4e0 [ 578.673702] alloc_pages_mpol+0xed/0x340 [ 578.673737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 578.673771] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.673807] ? get_vma_policy+0x23b/0x350 [ 578.673852] vma_alloc_folio_noprof+0xe9/0x440 [ 578.673889] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 578.673929] ? lock_release+0xc8/0x270 [ 578.673977] __handle_mm_fault+0x145c/0x2fa0 [ 578.674020] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.674053] ? __pfx___handle_mm_fault+0x10/0x10 [ 578.674134] ? follow_page_pte+0x4f9/0x1170 [ 578.674185] handle_mm_fault+0x2d8/0x750 [ 578.674234] __get_user_pages+0x587/0x2fb0 [ 578.674318] ? __pfx___get_user_pages+0x10/0x10 [ 578.674362] ? lock_is_held_type+0x9e/0x120 [ 578.674406] faultin_page_range+0x2f3/0x9d0 [ 578.674463] madvise_do_behavior+0x918/0xef0 [ 578.674511] ? __pfx_madvise_do_behavior+0x10/0x10 [ 578.674550] ? down_read+0x1b1/0x450 [ 578.674605] ? find_held_lock+0x2b/0x80 [ 578.674661] do_madvise+0x16b/0x240 [ 578.674689] ? __pfx_do_madvise+0x10/0x10 [ 578.674712] ? kernel_write+0x5f3/0x660 [ 578.674776] ? __fget_files+0x20d/0x3b0 [ 578.674824] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 578.674860] ? ksys_write+0x1a3/0x240 [ 578.674897] ? __pfx_ksys_write+0x10/0x10 [ 578.674929] ? irqentry_exit+0xee/0x650 [ 578.674959] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.674985] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.675025] __x64_sys_madvise+0xa9/0x110 [ 578.675049] ? do_syscall_64+0x85/0x420 [ 578.675088] do_syscall_64+0xbf/0x420 [ 578.675128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.675152] RIP: 0033:0x7fbf3563bb19 [ 578.675172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.675192] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 578.675213] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 578.675228] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 578.675241] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.675253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.675266] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 578.675326] 02:10:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 8) [ 578.765620] 9p: Bad value for 'rfdno' [ 578.767927] 9p: Bad value for 'wfdno' 02:10:41 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x30}}, 0x0) [ 578.844256] FAULT_INJECTION: forcing a failure. [ 578.844256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.845292] CPU: 1 UID: 0 PID: 6075 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 578.845335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.845353] Call Trace: [ 578.845363] [ 578.845375] dump_stack_lvl+0xfa/0x120 [ 578.845405] should_fail_ex+0x4d7/0x5e0 [ 578.845426] should_fail_alloc_page+0xe0/0x110 [ 578.845441] prepare_alloc_pages+0x1eb/0x550 [ 578.845455] ? __lock_acquire+0x451/0x2250 [ 578.845472] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 578.845489] ? perf_trace_lock+0xb5/0x5d0 [ 578.845504] ? perf_trace_lock+0xa2/0x5d0 [ 578.845519] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.845537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 578.845553] ? find_held_lock+0x2b/0x80 [ 578.845570] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 578.845596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 578.845615] ? policy_nodemask+0xeb/0x4e0 [ 578.845634] alloc_pages_mpol+0xed/0x340 [ 578.845650] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 578.845666] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.845681] ? get_vma_policy+0x23b/0x350 [ 578.845700] vma_alloc_folio_noprof+0xe9/0x440 [ 578.845718] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 578.845736] ? lock_release+0xc8/0x270 [ 578.845753] __handle_mm_fault+0x145c/0x2fa0 [ 578.845771] ? __pfx_perf_trace_lock+0x10/0x10 [ 578.845786] ? __pfx___handle_mm_fault+0x10/0x10 [ 578.845800] ? __pte_offset_map_lock+0x190/0x330 [ 578.845822] ? follow_page_pte+0x4f9/0x1170 [ 578.845841] handle_mm_fault+0x2d8/0x750 [ 578.845859] __get_user_pages+0x587/0x2fb0 [ 578.845882] ? down_read_killable+0x1d4/0x4d0 [ 578.845902] ? __pfx___get_user_pages+0x10/0x10 [ 578.845920] ? lock_is_held_type+0x9e/0x120 [ 578.845938] faultin_page_range+0x2f3/0x9d0 [ 578.845959] madvise_do_behavior+0x918/0xef0 [ 578.845976] ? __pfx_madvise_do_behavior+0x10/0x10 [ 578.845992] ? down_read+0x1b1/0x450 [ 578.846012] ? find_held_lock+0x2b/0x80 [ 578.846033] do_madvise+0x16b/0x240 [ 578.846045] ? __pfx_do_madvise+0x10/0x10 [ 578.846057] ? kernel_write+0x5f3/0x660 [ 578.846082] ? __fget_files+0x20d/0x3b0 [ 578.846098] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 578.846115] ? ksys_write+0x1a3/0x240 [ 578.846133] ? __pfx_ksys_write+0x10/0x10 [ 578.846150] ? irqentry_exit+0xee/0x650 [ 578.846164] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.846178] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.846194] __x64_sys_madvise+0xa9/0x110 [ 578.846206] ? do_syscall_64+0x85/0x420 [ 578.846225] do_syscall_64+0xbf/0x420 [ 578.846243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.846255] RIP: 0033:0x7f6da0d61b19 [ 578.846265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.846277] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 578.846289] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 578.846296] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 578.846303] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.846310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.846317] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 578.846334] 02:10:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 02:10:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 02:10:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 9) 02:10:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 7) 02:10:41 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = getpid() pidfd_open(r2, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0xff, 0x6, 0x0, 0x0, 0xfff, 0x203, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000100), 0xb}, 0xa0, 0xe11, 0x6, 0x5, 0x2, 0x3498, 0x0, 0x0, 0xffff, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r0, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x1, 0x1, 0xc9, 0x0, 0x4, 0xc104, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x1, 0x4}, 0x2000, 0x9, 0xb6ad, 0x6, 0x178, 0x8, 0x1f, 0x0, 0x10000, 0x0, 0x3}, r2, 0x3, r3, 0x4) r4 = pidfd_open(r1, 0x0) pidfd_getfd(r4, r0, 0x0) [ 578.954308] 9p: Bad value for 'wfdno' [ 578.955539] FAULT_INJECTION: forcing a failure. [ 578.955539] name failslab, interval 1, probability 0, space 0, times 0 [ 578.956570] CPU: 1 UID: 0 PID: 6087 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 578.956585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.956593] Call Trace: [ 578.956597] [ 578.956601] dump_stack_lvl+0xfa/0x120 [ 578.956635] should_fail_ex+0x4d7/0x5e0 [ 578.956656] ? getname_flags.part.0+0x48/0x540 [ 578.956672] should_failslab+0xc2/0x120 [ 578.956685] kmem_cache_alloc_noprof+0x80/0x760 [ 578.956707] ? getname_flags.part.0+0x48/0x540 [ 578.956720] getname_flags.part.0+0x48/0x540 [ 578.956736] getname_flags+0x95/0xe0 [ 578.956754] user_path_at+0x27/0x90 [ 578.956772] __x64_sys_mount+0x1fb/0x310 [ 578.956786] ? __pfx___x64_sys_mount+0x10/0x10 [ 578.956806] do_syscall_64+0xbf/0x420 [ 578.956824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.956837] RIP: 0033:0x7f214b05fb19 [ 578.956847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.956859] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 578.956870] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 578.956878] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 578.956885] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 578.956892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.956899] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 578.956915] 02:10:41 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x39}}, 0x0) 02:10:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 02:10:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 579.019411] FAULT_INJECTION: forcing a failure. [ 579.019411] name failslab, interval 1, probability 0, space 0, times 0 [ 579.020362] CPU: 1 UID: 0 PID: 6088 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 579.020377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 579.020385] Call Trace: [ 579.020390] [ 579.020396] dump_stack_lvl+0xfa/0x120 [ 579.020423] should_fail_ex+0x4d7/0x5e0 [ 579.020452] ? jbd2__journal_start+0x193/0x820 [ 579.020470] should_failslab+0xc2/0x120 [ 579.020486] kmem_cache_alloc_noprof+0x80/0x760 [ 579.020503] ? ktime_get_coarse_real_ts64_mg+0x1bb/0x2a0 [ 579.020534] ? jbd2__journal_start+0x193/0x820 [ 579.020550] jbd2__journal_start+0x193/0x820 [ 579.020576] __ext4_journal_start_sb+0x325/0x580 [ 579.020592] ? ext4_dirty_inode+0xa5/0x130 [ 579.020615] ext4_dirty_inode+0xa5/0x130 [ 579.020640] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 579.020654] __mark_inode_dirty+0x1b7/0x13c0 [ 579.020681] generic_update_time+0xcb/0xf0 [ 579.020700] file_update_time_flags+0x3f7/0x4f0 [ 579.020725] ext4_page_mkwrite+0x329/0x1710 [ 579.020753] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 579.020769] ? perf_trace_run_bpf_submit+0xef/0x180 [ 579.020787] ? find_held_lock+0x2b/0x80 [ 579.020814] do_page_mkwrite+0x17a/0x370 [ 579.020834] do_wp_page+0xf80/0x2fe0 [ 579.020856] ? ___pte_offset_map+0x33/0x390 [ 579.020875] ? __pfx_do_wp_page+0x10/0x10 [ 579.020893] ? do_raw_spin_lock+0x123/0x260 [ 579.020913] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 579.020945] __handle_mm_fault+0xd9e/0x2fa0 [ 579.020967] ? __pfx_perf_trace_lock+0x10/0x10 [ 579.020986] ? __pfx___handle_mm_fault+0x10/0x10 [ 579.021029] ? follow_page_pte+0x4f9/0x1170 [ 579.021056] handle_mm_fault+0x2d8/0x750 [ 579.021083] __get_user_pages+0x587/0x2fb0 [ 579.021129] ? __pfx___get_user_pages+0x10/0x10 [ 579.021152] ? lock_is_held_type+0x9e/0x120 [ 579.021176] faultin_page_range+0x2f3/0x9d0 [ 579.021207] madvise_do_behavior+0x918/0xef0 [ 579.021233] ? __pfx_madvise_do_behavior+0x10/0x10 [ 579.021255] ? down_read+0x1b1/0x450 [ 579.021285] ? find_held_lock+0x2b/0x80 [ 579.021315] do_madvise+0x16b/0x240 [ 579.021330] ? __pfx_do_madvise+0x10/0x10 [ 579.021346] ? kernel_write+0x5f3/0x660 [ 579.021381] ? __fget_files+0x20d/0x3b0 [ 579.021408] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 579.021428] ? ksys_write+0x1a3/0x240 [ 579.021448] ? __pfx_ksys_write+0x10/0x10 [ 579.021465] ? irqentry_exit+0xee/0x650 [ 579.021481] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 579.021495] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 579.021517] __x64_sys_madvise+0xa9/0x110 [ 579.021530] ? do_syscall_64+0x85/0x420 [ 579.021552] do_syscall_64+0xbf/0x420 [ 579.021573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.021587] RIP: 0033:0x7fbf3563bb19 [ 579.021598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.021609] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 579.021621] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 579.021629] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 579.021636] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.021643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.021649] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 579.021682] [ 579.048433] FAULT_INJECTION: forcing a failure. [ 579.048433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.049410] CPU: 1 UID: 0 PID: 6089 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 579.049426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 579.049432] Call Trace: [ 579.049437] [ 579.049441] dump_stack_lvl+0xfa/0x120 [ 579.049461] should_fail_ex+0x4d7/0x5e0 [ 579.049480] should_fail_alloc_page+0xe0/0x110 [ 579.049495] prepare_alloc_pages+0x1eb/0x550 [ 579.049509] ? __lock_acquire+0x451/0x2250 [ 579.049525] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 579.049542] ? perf_trace_lock+0xb5/0x5d0 [ 579.049557] ? perf_trace_lock+0xa2/0x5d0 [ 579.049574] ? __pfx_perf_trace_lock+0x10/0x10 [ 579.049599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.049619] ? find_held_lock+0x2b/0x80 [ 579.049639] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 579.049674] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.049698] ? policy_nodemask+0xeb/0x4e0 [ 579.049718] alloc_pages_mpol+0xed/0x340 [ 579.049737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.049756] ? __pfx_perf_trace_lock+0x10/0x10 [ 579.049778] ? get_vma_policy+0x23b/0x350 [ 579.049798] vma_alloc_folio_noprof+0xe9/0x440 [ 579.049819] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 579.049841] ? lock_release+0xc8/0x270 [ 579.049861] __handle_mm_fault+0x145c/0x2fa0 [ 579.049879] ? __pfx_perf_trace_lock+0x10/0x10 [ 579.049895] ? __pfx___handle_mm_fault+0x10/0x10 [ 579.049910] ? __pte_offset_map_lock+0x190/0x330 [ 579.049931] ? follow_page_pte+0x4f9/0x1170 [ 579.049951] handle_mm_fault+0x2d8/0x750 [ 579.049971] __get_user_pages+0x587/0x2fb0 [ 579.049995] ? down_read_killable+0x1d4/0x4d0 [ 579.050014] ? __pfx___get_user_pages+0x10/0x10 [ 579.050032] ? lock_is_held_type+0x9e/0x120 [ 579.050051] faultin_page_range+0x2f3/0x9d0 [ 579.050074] madvise_do_behavior+0x918/0xef0 [ 579.050091] ? __pfx_madvise_do_behavior+0x10/0x10 [ 579.050107] ? down_read+0x1b1/0x450 [ 579.050128] ? find_held_lock+0x2b/0x80 [ 579.050151] do_madvise+0x16b/0x240 [ 579.050164] ? __pfx_do_madvise+0x10/0x10 [ 579.050176] ? kernel_write+0x5f3/0x660 [ 579.050200] ? __fget_files+0x20d/0x3b0 [ 579.050216] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 579.050233] ? ksys_write+0x1a3/0x240 [ 579.050253] ? __pfx_ksys_write+0x10/0x10 [ 579.050270] ? irqentry_exit+0xee/0x650 [ 579.050284] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 579.050298] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 579.050314] __x64_sys_madvise+0xa9/0x110 [ 579.050327] ? do_syscall_64+0x85/0x420 [ 579.050350] do_syscall_64+0xbf/0x420 [ 579.050368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.050380] RIP: 0033:0x7f494b73bb19 [ 579.050389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.050400] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 579.050411] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 579.050418] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 579.050425] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.050432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.050439] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 579.050456] [ 579.091152] 9p: Bad value for 'wfdno' 02:10:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 579.150883] 9p: Bad value for 'wfdno' 02:10:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 10) 02:10:51 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 02:10:51 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = signalfd4(r0, &(0x7f0000000080)={[0xe0]}, 0x8, 0x81800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_getfd(r4, r1, 0x0) r5 = getpgrp(r3) pidfd_open(r5, 0x0) 02:10:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 10) 02:10:51 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) 02:10:51 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:10:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 8) [ 588.887735] FAULT_INJECTION: forcing a failure. [ 588.887735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.888735] CPU: 1 UID: 0 PID: 6115 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 588.888751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 588.888766] Call Trace: [ 588.888771] [ 588.888776] dump_stack_lvl+0xfa/0x120 [ 588.888804] should_fail_ex+0x4d7/0x5e0 [ 588.888826] should_fail_alloc_page+0xe0/0x110 [ 588.888842] prepare_alloc_pages+0x1eb/0x550 [ 588.888856] ? __lock_acquire+0x451/0x2250 [ 588.888874] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 588.888890] ? perf_trace_lock+0xb5/0x5d0 [ 588.888906] ? perf_trace_lock+0xa2/0x5d0 [ 588.888921] ? __pfx_perf_trace_lock+0x10/0x10 [ 588.888940] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 588.888956] ? perf_trace_lock+0xb5/0x5d0 [ 588.888975] ? perf_trace_lock+0xb5/0x5d0 [ 588.888988] ? __lock_acquire+0x451/0x2250 [ 588.889004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.889024] ? policy_nodemask+0xeb/0x4e0 [ 588.889042] alloc_pages_mpol+0xed/0x340 [ 588.889058] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 588.889074] ? __pfx_perf_trace_lock+0x10/0x10 [ 588.889089] ? get_vma_policy+0x23b/0x350 [ 588.889108] vma_alloc_folio_noprof+0xe9/0x440 [ 588.889126] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 588.889145] ? lock_release+0xc8/0x270 [ 588.889162] __handle_mm_fault+0x145c/0x2fa0 [ 588.889180] ? __pfx_perf_trace_lock+0x10/0x10 [ 588.889195] ? __pfx___handle_mm_fault+0x10/0x10 [ 588.889209] ? __pte_offset_map_lock+0x190/0x330 [ 588.889231] ? follow_page_pte+0x4f9/0x1170 [ 588.889252] handle_mm_fault+0x2d8/0x750 [ 588.889270] __get_user_pages+0x587/0x2fb0 [ 588.889293] ? down_read_killable+0x1d4/0x4d0 [ 588.889313] ? __pfx___get_user_pages+0x10/0x10 [ 588.889335] ? lock_is_held_type+0x9e/0x120 [ 588.889354] faultin_page_range+0x2f3/0x9d0 [ 588.889375] madvise_do_behavior+0x918/0xef0 [ 588.889393] ? __pfx_madvise_do_behavior+0x10/0x10 [ 588.889408] ? down_read+0x1b1/0x450 [ 588.889428] ? find_held_lock+0x2b/0x80 [ 588.889450] do_madvise+0x16b/0x240 [ 588.889463] ? __pfx_do_madvise+0x10/0x10 [ 588.889474] ? kernel_write+0x5f3/0x660 [ 588.889499] ? __fget_files+0x20d/0x3b0 [ 588.889516] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 588.889533] ? ksys_write+0x1a3/0x240 [ 588.889551] ? __pfx_ksys_write+0x10/0x10 [ 588.889568] ? irqentry_exit+0xee/0x650 [ 588.889582] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 588.889596] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 588.889612] __x64_sys_madvise+0xa9/0x110 [ 588.889624] ? do_syscall_64+0x85/0x420 [ 588.889643] do_syscall_64+0xbf/0x420 [ 588.889661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.889674] RIP: 0033:0x7f494b73bb19 [ 588.889684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 588.889696] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 588.889708] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 588.889716] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 588.889723] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.889730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.889737] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 588.889754] [ 588.932864] FAULT_INJECTION: forcing a failure. [ 588.932864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.934827] CPU: 0 UID: 0 PID: 6118 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 588.934859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 588.934872] Call Trace: [ 588.934881] [ 588.934892] dump_stack_lvl+0xfa/0x120 [ 588.934950] should_fail_ex+0x4d7/0x5e0 [ 588.934993] strncpy_from_user+0x3b/0x2f0 [ 588.935025] getname_flags.part.0+0x8d/0x540 [ 588.935060] getname_flags+0x95/0xe0 [ 588.935095] user_path_at+0x27/0x90 [ 588.935133] __x64_sys_mount+0x1fb/0x310 [ 588.935162] ? __pfx___x64_sys_mount+0x10/0x10 [ 588.935186] ? irqentry_exit+0xee/0x650 [ 588.935217] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 588.935256] do_syscall_64+0xbf/0x420 [ 588.935293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.935318] RIP: 0033:0x7f214b05fb19 02:10:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 9) [ 588.935346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 588.935368] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.935391] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 588.935406] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 588.935420] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 588.935434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.935448] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 588.935481] [ 589.027214] FAULT_INJECTION: forcing a failure. [ 589.027214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.028128] FAULT_INJECTION: forcing a failure. [ 589.028128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.028211] CPU: 0 UID: 0 PID: 6119 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 589.028240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.028254] Call Trace: [ 589.028272] [ 589.028284] dump_stack_lvl+0xfa/0x120 [ 589.028334] should_fail_ex+0x4d7/0x5e0 [ 589.028385] should_fail_alloc_page+0xe0/0x110 [ 589.028419] prepare_alloc_pages+0x1eb/0x550 [ 589.028468] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 589.028505] ? perf_tp_event+0x807/0xe70 [ 589.028564] ? perf_trace_run_bpf_submit+0xef/0x180 [ 589.028596] ? __pfx_perf_tp_event+0x10/0x10 [ 589.028642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.028679] ? __pfx_perf_tp_event+0x10/0x10 [ 589.028753] ? perf_trace_run_bpf_submit+0xef/0x180 [ 589.028807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.028852] ? policy_nodemask+0xeb/0x4e0 [ 589.028907] alloc_pages_mpol+0xed/0x340 [ 589.028961] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.028999] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.029036] ? get_vma_policy+0x23b/0x350 [ 589.029085] vma_alloc_folio_noprof+0xe9/0x440 [ 589.029124] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 589.029168] ? lock_release+0xc8/0x270 [ 589.029218] __handle_mm_fault+0x145c/0x2fa0 [ 589.029264] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.029300] ? __pfx___handle_mm_fault+0x10/0x10 [ 589.029386] ? follow_page_pte+0x4f9/0x1170 [ 589.029440] handle_mm_fault+0x2d8/0x750 [ 589.029492] __get_user_pages+0x587/0x2fb0 [ 589.029568] ? down_read_killable+0x1d4/0x4d0 [ 589.029615] ? __pfx___get_user_pages+0x10/0x10 [ 589.029661] ? lock_is_held_type+0x9e/0x120 [ 589.029709] faultin_page_range+0x2f3/0x9d0 [ 589.029769] madvise_do_behavior+0x918/0xef0 [ 589.029822] ? __pfx_madvise_do_behavior+0x10/0x10 [ 589.029864] ? down_read+0x1b1/0x450 [ 589.029942] ? find_held_lock+0x2b/0x80 [ 589.030004] do_madvise+0x16b/0x240 [ 589.030033] ? __pfx_do_madvise+0x10/0x10 [ 589.030058] ? kernel_write+0x5f3/0x660 [ 589.030127] ? __fget_files+0x20d/0x3b0 [ 589.030178] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 589.030218] ? ksys_write+0x1a3/0x240 [ 589.030254] ? xfd_validate_state+0x55/0x180 [ 589.030290] ? __pfx_ksys_write+0x10/0x10 [ 589.030348] __x64_sys_madvise+0xa9/0x110 [ 589.030375] ? do_syscall_64+0x85/0x420 [ 589.030415] do_syscall_64+0xbf/0x420 [ 589.030459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.030484] RIP: 0033:0x7f6da0d61b19 [ 589.030505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.030527] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 589.030550] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 589.030565] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 589.030579] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.030592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.030606] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 589.030670] [ 589.055488] CPU: 1 UID: 0 PID: 6127 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 589.055506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.055514] Call Trace: [ 589.055519] [ 589.055525] dump_stack_lvl+0xfa/0x120 [ 589.055557] should_fail_ex+0x4d7/0x5e0 [ 589.055585] should_fail_alloc_page+0xe0/0x110 [ 589.055604] prepare_alloc_pages+0x1eb/0x550 [ 589.055630] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 589.055649] ? perf_tp_event+0x807/0xe70 [ 589.055686] ? __pfx_perf_tp_event+0x10/0x10 [ 589.055709] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.055727] ? __pfx_perf_tp_event+0x10/0x10 [ 589.055765] ? perf_trace_run_bpf_submit+0xef/0x180 [ 589.055782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.055807] ? policy_nodemask+0xeb/0x4e0 [ 589.055832] alloc_pages_mpol+0xed/0x340 [ 589.055851] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.055870] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.055892] ? get_vma_policy+0x23b/0x350 [ 589.055916] vma_alloc_folio_noprof+0xe9/0x440 [ 589.055937] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 589.055959] ? lock_release+0xc8/0x270 [ 589.055985] __handle_mm_fault+0x145c/0x2fa0 [ 589.056010] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.056028] ? __pfx___handle_mm_fault+0x10/0x10 [ 589.056071] ? follow_page_pte+0x4f9/0x1170 [ 589.056100] handle_mm_fault+0x2d8/0x750 [ 589.056126] __get_user_pages+0x587/0x2fb0 [ 589.056164] ? down_read_killable+0x1d4/0x4d0 [ 589.056189] ? __pfx___get_user_pages+0x10/0x10 [ 589.056213] ? lock_is_held_type+0x9e/0x120 [ 589.056238] faultin_page_range+0x2f3/0x9d0 [ 589.056269] madvise_do_behavior+0x918/0xef0 [ 589.056297] ? __pfx_madvise_do_behavior+0x10/0x10 [ 589.056318] ? down_read+0x1b1/0x450 [ 589.056352] ? find_held_lock+0x2b/0x80 [ 589.056383] do_madvise+0x16b/0x240 [ 589.056398] ? __pfx_do_madvise+0x10/0x10 [ 589.056411] ? kernel_write+0x5f3/0x660 [ 589.056447] ? __fget_files+0x20d/0x3b0 [ 589.056473] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 589.056497] ? ksys_write+0x1a3/0x240 [ 589.056517] ? __pfx_ksys_write+0x10/0x10 [ 589.056534] ? irqentry_exit+0xee/0x650 [ 589.056551] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 589.056566] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 589.056587] __x64_sys_madvise+0xa9/0x110 [ 589.056601] ? do_syscall_64+0x85/0x420 [ 589.056622] do_syscall_64+0xbf/0x420 [ 589.056644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.056658] RIP: 0033:0x7fbf3563bb19 [ 589.056670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.056682] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 589.056694] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 589.056702] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 589.056709] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.056715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.056722] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 589.056755] 02:10:51 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 02:10:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 11) 02:10:51 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x2}}, 0x0) [ 589.206217] FAULT_INJECTION: forcing a failure. [ 589.206217] name failslab, interval 1, probability 0, space 0, times 0 [ 589.207177] CPU: 1 UID: 0 PID: 6134 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 589.207193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.207201] Call Trace: [ 589.207206] [ 589.207211] dump_stack_lvl+0xfa/0x120 [ 589.207239] should_fail_ex+0x4d7/0x5e0 [ 589.207260] ? alloc_fs_context+0x57/0xb10 [ 589.207273] should_failslab+0xc2/0x120 [ 589.207287] __kmalloc_cache_noprof+0x80/0x780 [ 589.207304] ? __get_fs_type+0xe6/0x160 [ 589.207323] ? alloc_fs_context+0x57/0xb10 [ 589.207338] alloc_fs_context+0x57/0xb10 [ 589.207353] path_mount+0xd8d/0x2140 [ 589.207370] ? kasan_quarantine_put+0x84/0x1e0 [ 589.207382] ? __pfx_path_mount+0x10/0x10 [ 589.207394] ? kmem_cache_free+0x2cd/0x660 [ 589.207411] ? putname.part.0+0xc0/0x160 [ 589.207430] ? putname.part.0+0xc0/0x160 [ 589.207443] ? putname.part.0+0xc0/0x160 [ 589.207459] __x64_sys_mount+0x293/0x310 [ 589.207473] ? __pfx___x64_sys_mount+0x10/0x10 [ 589.207486] ? irqentry_exit+0xee/0x650 [ 589.207502] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 589.207523] do_syscall_64+0xbf/0x420 [ 589.207542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.207556] RIP: 0033:0x7f214b05fb19 [ 589.207565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.207577] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.207589] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 589.207597] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 589.207604] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 589.207612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.207619] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 589.207636] [ 589.236939] FAULT_INJECTION: forcing a failure. [ 589.236939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.237941] CPU: 1 UID: 0 PID: 6135 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 589.237957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.237964] Call Trace: [ 589.237968] [ 589.237973] dump_stack_lvl+0xfa/0x120 [ 589.237993] should_fail_ex+0x4d7/0x5e0 [ 589.238012] should_fail_alloc_page+0xe0/0x110 [ 589.238026] prepare_alloc_pages+0x1eb/0x550 [ 589.238040] ? __lock_acquire+0x451/0x2250 [ 589.238056] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 589.238073] ? perf_trace_lock+0xb5/0x5d0 [ 589.238089] ? perf_trace_lock+0xa2/0x5d0 [ 589.238104] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.238123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.238139] ? perf_trace_lock+0xb5/0x5d0 [ 589.238158] ? __lock_acquire+0x451/0x2250 [ 589.238174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.238194] ? policy_nodemask+0xeb/0x4e0 [ 589.238213] alloc_pages_mpol+0xed/0x340 [ 589.238229] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.238245] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.238260] ? get_vma_policy+0x23b/0x350 [ 589.238279] vma_alloc_folio_noprof+0xe9/0x440 [ 589.238297] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 589.238316] ? lock_release+0xc8/0x270 [ 589.238337] __handle_mm_fault+0x145c/0x2fa0 [ 589.238357] ? __pfx_perf_trace_lock+0x10/0x10 [ 589.238372] ? __pfx___handle_mm_fault+0x10/0x10 [ 589.238387] ? __pte_offset_map_lock+0x190/0x330 [ 589.238409] ? follow_page_pte+0x4f9/0x1170 [ 589.238430] handle_mm_fault+0x2d8/0x750 [ 589.238448] __get_user_pages+0x587/0x2fb0 [ 589.238471] ? down_read_killable+0x1d4/0x4d0 [ 589.238491] ? __pfx___get_user_pages+0x10/0x10 [ 589.238509] ? lock_is_held_type+0x9e/0x120 [ 589.238527] faultin_page_range+0x2f3/0x9d0 [ 589.238548] madvise_do_behavior+0x918/0xef0 [ 589.238565] ? __pfx_madvise_do_behavior+0x10/0x10 [ 589.238580] ? down_read+0x1b1/0x450 [ 589.238601] ? find_held_lock+0x2b/0x80 [ 589.238622] do_madvise+0x16b/0x240 [ 589.238635] ? __pfx_do_madvise+0x10/0x10 [ 589.238647] ? kernel_write+0x5f3/0x660 [ 589.238671] ? __fget_files+0x20d/0x3b0 [ 589.238687] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 589.238704] ? ksys_write+0x1a3/0x240 [ 589.238722] ? __pfx_ksys_write+0x10/0x10 [ 589.238739] ? irqentry_exit+0xee/0x650 [ 589.238754] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 589.238768] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 589.238784] __x64_sys_madvise+0xa9/0x110 [ 589.238796] ? do_syscall_64+0x85/0x420 [ 589.238814] do_syscall_64+0xbf/0x420 [ 589.238832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.238844] RIP: 0033:0x7f494b73bb19 [ 589.238853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.238865] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 589.238876] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 589.238884] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 589.238891] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.238898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.238905] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 589.238922] 02:11:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 12) 02:11:00 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) 02:11:00 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 02:11:00 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x4}}, 0x0) 02:11:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 11) 02:11:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4e294a0a30186385}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x14043, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x410200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000020100000018000400", @ANYRES32=r3, @ANYBLOB="02000000080000002e2f66696c653000"]) r4 = pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000580)="f5a875218a6c02e07f6027eee1b2121da727fa0782c1900eff4ac91bb4023e42bae5a30cd1065b9faef6d13773c91486d2d7b3541b854bf4cc24636421943855006697ea9258e2004a9b49793e13b22a03f9b2cc3147ca76c5a073a9631965f6ce2ae50561ad6fed794309dff7e1c24e", 0x70, 0x6053, 0x0, 0x1, r2}, &(0x7f0000000600)) pidfd_getfd(r4, r0, 0x0) r6 = getpid() pidfd_open(r6, 0x0) ptrace$poke(0x4, r6, &(0x7f0000000140), 0x7) 02:11:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 10) [ 597.571538] FAULT_INJECTION: forcing a failure. [ 597.571538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.573116] CPU: 0 UID: 0 PID: 6144 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 597.573142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 597.573153] Call Trace: [ 597.573159] [ 597.573168] dump_stack_lvl+0xfa/0x120 [ 597.573210] should_fail_ex+0x4d7/0x5e0 [ 597.573253] should_fail_alloc_page+0xe0/0x110 [ 597.573281] prepare_alloc_pages+0x1eb/0x550 [ 597.573321] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 597.573356] ? perf_tp_event+0x807/0xe70 [ 597.573404] ? perf_trace_run_bpf_submit+0xef/0x180 [ 597.573431] ? __pfx_perf_tp_event+0x10/0x10 [ 597.573468] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.573496] ? __pfx_perf_tp_event+0x10/0x10 [ 597.573554] ? perf_trace_run_bpf_submit+0xef/0x180 [ 597.573581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.573614] ? policy_nodemask+0xeb/0x4e0 [ 597.573653] alloc_pages_mpol+0xed/0x340 [ 597.573682] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 597.573711] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.573743] ? get_vma_policy+0x23b/0x350 [ 597.573782] vma_alloc_folio_noprof+0xe9/0x440 [ 597.573815] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 597.573850] ? lock_release+0xc8/0x270 [ 597.573891] __handle_mm_fault+0x145c/0x2fa0 [ 597.573927] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.573956] ? __pfx___handle_mm_fault+0x10/0x10 [ 597.574019] ? follow_page_pte+0x4f9/0x1170 [ 597.574063] handle_mm_fault+0x2d8/0x750 [ 597.574105] __get_user_pages+0x587/0x2fb0 [ 597.574164] ? down_read_killable+0x1d4/0x4d0 [ 597.574203] ? __pfx___get_user_pages+0x10/0x10 [ 597.574241] ? lock_is_held_type+0x9e/0x120 [ 597.574281] faultin_page_range+0x2f3/0x9d0 [ 597.574330] madvise_do_behavior+0x918/0xef0 [ 597.574369] ? __pfx_madvise_do_behavior+0x10/0x10 [ 597.574404] ? down_read+0x1b1/0x450 [ 597.574449] ? find_held_lock+0x2b/0x80 [ 597.574491] do_madvise+0x16b/0x240 [ 597.574509] ? __pfx_do_madvise+0x10/0x10 [ 597.574524] ? kernel_write+0x5f3/0x660 [ 597.574566] ? __fget_files+0x20d/0x3b0 [ 597.574597] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 597.574621] ? ksys_write+0x1a3/0x240 [ 597.574644] ? __pfx_ksys_write+0x10/0x10 [ 597.574665] ? irqentry_exit+0xee/0x650 [ 597.574684] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 597.574701] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 597.574727] __x64_sys_madvise+0xa9/0x110 [ 597.574743] ? do_syscall_64+0x85/0x420 [ 597.574768] do_syscall_64+0xbf/0x420 [ 597.574793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.574810] RIP: 0033:0x7f494b73bb19 [ 597.574824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 597.574837] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 597.574851] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 597.574860] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 597.574869] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.574878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.574886] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 597.574927] [ 597.629870] FAULT_INJECTION: forcing a failure. [ 597.629870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.632299] CPU: 1 UID: 0 PID: 6149 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 597.632332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 597.632353] Call Trace: [ 597.632362] [ 597.632371] dump_stack_lvl+0xfa/0x120 [ 597.632415] should_fail_ex+0x4d7/0x5e0 [ 597.632456] should_fail_alloc_page+0xe0/0x110 [ 597.632486] prepare_alloc_pages+0x1eb/0x550 [ 597.632513] ? __lock_acquire+0x451/0x2250 [ 597.632548] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 597.632581] ? perf_trace_lock+0xb5/0x5d0 [ 597.632613] ? perf_trace_lock+0xa2/0x5d0 [ 597.632645] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.632684] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.632718] ? perf_trace_lock+0xb5/0x5d0 [ 597.632759] ? __lock_acquire+0x451/0x2250 [ 597.632793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.632832] ? policy_nodemask+0xeb/0x4e0 [ 597.632870] alloc_pages_mpol+0xed/0x340 [ 597.632918] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 597.632953] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.632985] ? get_vma_policy+0x23b/0x350 [ 597.633024] vma_alloc_folio_noprof+0xe9/0x440 [ 597.633061] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 597.633102] ? lock_release+0xc8/0x270 [ 597.633149] __handle_mm_fault+0x145c/0x2fa0 [ 597.633201] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.633240] ? __pfx___handle_mm_fault+0x10/0x10 [ 597.633270] ? __pte_offset_map_lock+0x190/0x330 [ 597.633316] ? follow_page_pte+0x4f9/0x1170 [ 597.633356] handle_mm_fault+0x2d8/0x750 [ 597.633395] __get_user_pages+0x587/0x2fb0 [ 597.633444] ? down_read_killable+0x1d4/0x4d0 [ 597.633485] ? __pfx___get_user_pages+0x10/0x10 [ 597.633523] ? lock_is_held_type+0x9e/0x120 [ 597.633561] faultin_page_range+0x2f3/0x9d0 [ 597.633605] madvise_do_behavior+0x918/0xef0 [ 597.633641] ? __pfx_madvise_do_behavior+0x10/0x10 [ 597.633674] ? down_read+0x1b1/0x450 [ 597.633717] ? find_held_lock+0x2b/0x80 [ 597.633763] do_madvise+0x16b/0x240 [ 597.633789] ? __pfx_do_madvise+0x10/0x10 [ 597.633814] ? kernel_write+0x5f3/0x660 [ 597.633864] ? __fget_files+0x20d/0x3b0 [ 597.633898] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 597.633933] ? ksys_write+0x1a3/0x240 [ 597.633970] ? __pfx_ksys_write+0x10/0x10 [ 597.634006] ? irqentry_exit+0xee/0x650 [ 597.634037] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 597.634065] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 597.634102] __x64_sys_madvise+0xa9/0x110 [ 597.634128] ? do_syscall_64+0x85/0x420 [ 597.634165] do_syscall_64+0xbf/0x420 [ 597.634202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.634228] RIP: 0033:0x7f6da0d61b19 [ 597.634248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 597.634270] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 597.634294] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 597.634310] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 597.634325] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.634339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.634353] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 597.634389] 02:11:00 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) 02:11:00 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x8}}, 0x0) 02:11:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 13) [ 597.826742] FAULT_INJECTION: forcing a failure. [ 597.826742] name failslab, interval 1, probability 0, space 0, times 0 [ 597.828602] CPU: 0 UID: 0 PID: 6155 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 597.828650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 597.828670] Call Trace: [ 597.828683] [ 597.828701] dump_stack_lvl+0xfa/0x120 [ 597.828772] should_fail_ex+0x4d7/0x5e0 [ 597.828850] ? jbd2__journal_start+0x193/0x820 [ 597.828921] should_failslab+0xc2/0x120 [ 597.828969] kmem_cache_alloc_noprof+0x80/0x760 [ 597.829023] ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0 [ 597.829074] ? ktime_get_coarse_real_ts64_mg+0x1bb/0x2a0 [ 597.829132] ? lock_is_held_type+0x9e/0x120 [ 597.829216] ? jbd2__journal_start+0x193/0x820 [ 597.829275] jbd2__journal_start+0x193/0x820 [ 597.829371] __ext4_journal_start_sb+0x325/0x580 [ 597.829419] ? ext4_dirty_inode+0xa5/0x130 [ 597.829497] ext4_dirty_inode+0xa5/0x130 [ 597.829554] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 597.829599] __mark_inode_dirty+0x1b7/0x13c0 [ 597.829675] generic_update_time+0xcb/0xf0 [ 597.829712] file_update_time_flags+0x3f7/0x4f0 [ 597.829761] ext4_page_mkwrite+0x329/0x1710 [ 597.829818] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 597.829857] ? find_held_lock+0x2b/0x80 [ 597.829913] do_page_mkwrite+0x17a/0x370 [ 597.829951] __handle_mm_fault+0x1096/0x2fa0 [ 597.829995] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.830032] ? __pfx___handle_mm_fault+0x10/0x10 [ 597.830118] ? follow_page_pte+0x4f9/0x1170 [ 597.830172] handle_mm_fault+0x2d8/0x750 [ 597.830225] __get_user_pages+0x587/0x2fb0 [ 597.830315] ? __pfx___get_user_pages+0x10/0x10 [ 597.830362] ? lock_is_held_type+0x9e/0x120 [ 597.830409] faultin_page_range+0x2f3/0x9d0 [ 597.830470] madvise_do_behavior+0x918/0xef0 [ 597.830520] ? __pfx_madvise_do_behavior+0x10/0x10 [ 597.830563] ? down_read+0x1b1/0x450 [ 597.830621] ? find_held_lock+0x2b/0x80 [ 597.830681] do_madvise+0x16b/0x240 [ 597.830711] ? __pfx_do_madvise+0x10/0x10 [ 597.830735] ? kernel_write+0x5f3/0x660 [ 597.830804] ? __fget_files+0x20d/0x3b0 [ 597.830854] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 597.830892] ? ksys_write+0x1a3/0x240 [ 597.830931] ? __pfx_ksys_write+0x10/0x10 [ 597.830966] ? irqentry_exit+0xee/0x650 [ 597.830998] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 597.831026] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 597.831069] __x64_sys_madvise+0xa9/0x110 [ 597.831095] ? do_syscall_64+0x85/0x420 [ 597.831136] do_syscall_64+0xbf/0x420 [ 597.831179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.831205] RIP: 0033:0x7fbf3563bb19 [ 597.831227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 597.831249] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 597.831271] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 597.831286] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 597.831300] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.831314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.831327] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 597.831392] [ 597.943758] FAULT_INJECTION: forcing a failure. [ 597.943758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.945700] CPU: 1 UID: 0 PID: 6163 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 597.945744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 597.945763] Call Trace: [ 597.945774] [ 597.945785] dump_stack_lvl+0xfa/0x120 [ 597.945827] should_fail_ex+0x4d7/0x5e0 [ 597.945865] should_fail_alloc_page+0xe0/0x110 [ 597.945892] prepare_alloc_pages+0x1eb/0x550 [ 597.945917] ? __lock_acquire+0x451/0x2250 [ 597.945949] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 597.945980] ? perf_trace_lock+0xb5/0x5d0 [ 597.946010] ? perf_trace_lock+0xa2/0x5d0 [ 597.946039] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.946075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.946106] ? perf_trace_lock+0xb5/0x5d0 [ 597.946143] ? __lock_acquire+0x451/0x2250 [ 597.946175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.946213] ? policy_nodemask+0xeb/0x4e0 [ 597.946248] alloc_pages_mpol+0xed/0x340 [ 597.946279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 597.946311] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.946349] ? get_vma_policy+0x23b/0x350 [ 597.946386] vma_alloc_folio_noprof+0xe9/0x440 [ 597.946419] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 597.946455] ? lock_release+0xc8/0x270 [ 597.946488] __handle_mm_fault+0x145c/0x2fa0 [ 597.946522] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.946552] ? __pfx___handle_mm_fault+0x10/0x10 [ 597.946580] ? __pte_offset_map_lock+0x190/0x330 [ 597.946621] ? follow_page_pte+0x4f9/0x1170 [ 597.946658] handle_mm_fault+0x2d8/0x750 [ 597.946694] __get_user_pages+0x587/0x2fb0 [ 597.946760] ? down_read_killable+0x1d4/0x4d0 [ 597.946799] ? __pfx___get_user_pages+0x10/0x10 [ 597.946834] ? lock_is_held_type+0x9e/0x120 [ 597.946869] faultin_page_range+0x2f3/0x9d0 [ 597.946910] madvise_do_behavior+0x918/0xef0 [ 597.946943] ? __pfx_madvise_do_behavior+0x10/0x10 [ 597.946973] ? down_read+0x1b1/0x450 [ 597.947013] ? find_held_lock+0x2b/0x80 [ 597.947055] do_madvise+0x16b/0x240 [ 597.947079] ? __pfx_do_madvise+0x10/0x10 [ 597.947102] ? kernel_write+0x5f3/0x660 [ 597.947149] ? __fget_files+0x20d/0x3b0 [ 597.947180] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 597.947212] ? ksys_write+0x1a3/0x240 [ 597.947246] ? __pfx_ksys_write+0x10/0x10 [ 597.947279] ? irqentry_exit+0xee/0x650 [ 597.947308] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 597.947334] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 597.947366] __x64_sys_madvise+0xa9/0x110 [ 597.947390] ? do_syscall_64+0x85/0x420 [ 597.947425] do_syscall_64+0xbf/0x420 [ 597.947461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.947485] RIP: 0033:0x7f494b73bb19 [ 597.947504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 597.947526] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 597.947548] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 597.947563] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 597.947576] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.947590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.947603] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 597.947636] 02:11:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x1, 0x7f, 0x5, 0x0, 0x1ff, 0x10042, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x5}, 0x1001, 0x2, 0x280, 0x5, 0x3b, 0x6, 0x9, 0x0, 0x5, 0x0, 0x100}, 0x0, 0x7, r0, 0x9) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x7fff, 0x28200, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x7}, 0x4000, 0x8000, 0xffffffff, 0x1, 0x7, 0x8001, 0xff, 0x0, 0x1}, r4, 0xc, r0, 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000340)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x8000000}}, './file0\x00'}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xff, 0x8, 0x0, 0x1, 0x0, 0xffffffffffffffab, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x2}, 0x24800, 0x5, 0x1, 0x4, 0x5b, 0x8, 0x9, 0x0, 0x1, 0x0, 0x101}, r5, 0x7, r6, 0xb) dup(r0) process_madvise(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="0d89eb06f8f9e213974c21e1d66876082127bdd0ce6be31455bfd24ce1dda88fe2ea16e390c40e7f90d14864bae0a0a4f8b8c196049972fc5ae7d13bf23db4613cdec77eb309ee066653a3fec40cdc8bc263532d456491d50204cf567d882be7fa553795fd30846ec59c1e7eef5a2f534551f2a683c11fe77a31fc89cae8bdf31996369095fe60aa0897541771177c1b9fde38b7c8e417ea088fa71a878130ee0b3dbcf3e48d900f1d73d777373267ee1740f9d1bf5c4f49da36f1c48f7d73c5658e91c36da46b2e06a63f592b2bad01e986477e38fb66f0344ba81e9a451e686543d04d8aa3f7737c06", 0xea}, {&(0x7f0000000240)="a3", 0x1}, {&(0x7f0000000280)="0c09c5e238c251df51e776cf913c602ebf1ee98e65ac63f25064ab06bc1e857380c65906a2e037dad54e564c5ccfdc07e8ca6668324bfc3aebe44d742a607efe49b234534eb6b03728f30ee9df345e649462052d5526dae2a3757b5eb52867cea6f8837dd9cfd3e3", 0x68}], 0x3, 0x13, 0x0) fork() pidfd_getfd(r2, r0, 0x0) 02:11:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 14) 02:11:09 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) 02:11:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 11) 02:11:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 02:11:09 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:11:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x2f}}, 0x0) 02:11:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 12) 02:11:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0xf0}}, 0x0) [ 607.110235] FAULT_INJECTION: forcing a failure. [ 607.110235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.111333] CPU: 1 UID: 0 PID: 6177 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.111349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.111357] Call Trace: [ 607.111361] [ 607.111365] dump_stack_lvl+0xfa/0x120 [ 607.111393] should_fail_ex+0x4d7/0x5e0 [ 607.111413] should_fail_alloc_page+0xe0/0x110 [ 607.111428] prepare_alloc_pages+0x1eb/0x550 [ 607.111442] ? __lock_acquire+0x451/0x2250 [ 607.111460] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 607.111476] ? perf_trace_lock+0xb5/0x5d0 [ 607.111492] ? perf_trace_lock+0xa2/0x5d0 [ 607.111507] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.111525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.111541] ? perf_trace_lock+0xb5/0x5d0 [ 607.111560] ? __lock_acquire+0x451/0x2250 [ 607.111577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.111596] ? policy_nodemask+0xeb/0x4e0 [ 607.111615] alloc_pages_mpol+0xed/0x340 [ 607.111630] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.111646] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.111661] ? get_vma_policy+0x23b/0x350 [ 607.111680] vma_alloc_folio_noprof+0xe9/0x440 [ 607.111697] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.111715] ? lock_release+0xc8/0x270 [ 607.111732] __handle_mm_fault+0x145c/0x2fa0 [ 607.111750] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.111765] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.111780] ? __pte_offset_map_lock+0x190/0x330 [ 607.111802] ? follow_page_pte+0x4f9/0x1170 [ 607.111822] handle_mm_fault+0x2d8/0x750 [ 607.111840] __get_user_pages+0x587/0x2fb0 [ 607.111863] ? down_read_killable+0x1d4/0x4d0 [ 607.111883] ? __pfx___get_user_pages+0x10/0x10 [ 607.111900] ? lock_is_held_type+0x9e/0x120 [ 607.111919] faultin_page_range+0x2f3/0x9d0 [ 607.111939] madvise_do_behavior+0x918/0xef0 [ 607.111957] ? __pfx_madvise_do_behavior+0x10/0x10 [ 607.111975] ? down_read+0x1b1/0x450 [ 607.111998] ? find_held_lock+0x2b/0x80 [ 607.112019] do_madvise+0x16b/0x240 [ 607.112032] ? __pfx_do_madvise+0x10/0x10 [ 607.112043] ? kernel_write+0x5f3/0x660 [ 607.112068] ? __fget_files+0x20d/0x3b0 [ 607.112084] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.112101] ? ksys_write+0x1a3/0x240 [ 607.112119] ? __pfx_ksys_write+0x10/0x10 [ 607.112136] ? irqentry_exit+0xee/0x650 [ 607.112150] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 607.112164] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.112180] __x64_sys_madvise+0xa9/0x110 [ 607.112192] ? do_syscall_64+0x85/0x420 [ 607.112210] do_syscall_64+0xbf/0x420 [ 607.112228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.112241] RIP: 0033:0x7f494b73bb19 [ 607.112251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.112262] RSP: 002b:00007f4948cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 607.112274] RAX: ffffffffffffffda RBX: 00007f494b84ef60 RCX: 00007f494b73bb19 [ 607.112281] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 607.112288] RBP: 00007f4948cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.112295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.112302] R13: 00007fff7141d11f R14: 00007f4948cb1300 R15: 0000000000022000 [ 607.112319] [ 607.128558] FAULT_INJECTION: forcing a failure. [ 607.128558] name failslab, interval 1, probability 0, space 0, times 0 [ 607.141576] FAULT_INJECTION: forcing a failure. [ 607.141576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.141693] CPU: 0 UID: 0 PID: 6184 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.141725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.141739] Call Trace: [ 607.141747] [ 607.141756] dump_stack_lvl+0xfa/0x120 [ 607.141797] should_fail_ex+0x4d7/0x5e0 [ 607.141834] ? v9fs_init_fs_context+0x49/0x5b0 [ 607.141860] should_failslab+0xc2/0x120 [ 607.141886] __kmalloc_cache_noprof+0x80/0x780 [ 607.141923] ? lockdep_init_map_type+0x4b/0x220 [ 607.141957] ? v9fs_init_fs_context+0x49/0x5b0 [ 607.141984] v9fs_init_fs_context+0x49/0x5b0 [ 607.142013] alloc_fs_context+0x56d/0xb10 [ 607.142044] path_mount+0xd8d/0x2140 [ 607.142073] ? kasan_quarantine_put+0x84/0x1e0 [ 607.142097] ? __pfx_path_mount+0x10/0x10 [ 607.142121] ? kmem_cache_free+0x2cd/0x660 [ 607.142154] ? putname.part.0+0xc0/0x160 [ 607.142189] ? putname.part.0+0xc0/0x160 [ 607.142215] ? putname.part.0+0xc0/0x160 [ 607.142247] __x64_sys_mount+0x293/0x310 [ 607.142274] ? __pfx___x64_sys_mount+0x10/0x10 [ 607.142299] ? irqentry_exit+0xee/0x650 [ 607.142329] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.142374] do_syscall_64+0xbf/0x420 [ 607.142411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.142435] RIP: 0033:0x7f214b05fb19 [ 607.142454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.142476] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.142498] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 607.142513] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 607.142527] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 607.142541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.142555] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 607.142588] [ 607.159883] CPU: 1 UID: 0 PID: 6181 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.159900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.159907] Call Trace: [ 607.159911] [ 607.159917] dump_stack_lvl+0xfa/0x120 [ 607.159939] should_fail_ex+0x4d7/0x5e0 [ 607.159964] should_fail_alloc_page+0xe0/0x110 [ 607.159985] prepare_alloc_pages+0x1eb/0x550 [ 607.160009] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 607.160027] ? perf_tp_event+0x807/0xe70 [ 607.160057] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.160074] ? __pfx_perf_tp_event+0x10/0x10 [ 607.160097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.160115] ? __pfx_perf_tp_event+0x10/0x10 [ 607.160152] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.160170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.160192] ? policy_nodemask+0xeb/0x4e0 [ 607.160216] alloc_pages_mpol+0xed/0x340 [ 607.160235] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.160254] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.160273] ? get_vma_policy+0x23b/0x350 [ 607.160298] vma_alloc_folio_noprof+0xe9/0x440 [ 607.160317] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.160340] ? lock_release+0xc8/0x270 [ 607.160365] __handle_mm_fault+0x145c/0x2fa0 [ 607.160387] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.160405] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.160449] ? follow_page_pte+0x4f9/0x1170 [ 607.160476] handle_mm_fault+0x2d8/0x750 [ 607.160502] __get_user_pages+0x587/0x2fb0 [ 607.160540] ? down_read_killable+0x1d4/0x4d0 [ 607.160564] ? __pfx___get_user_pages+0x10/0x10 [ 607.160587] ? lock_is_held_type+0x9e/0x120 [ 607.160611] faultin_page_range+0x2f3/0x9d0 [ 607.160641] madvise_do_behavior+0x918/0xef0 [ 607.160666] ? __pfx_madvise_do_behavior+0x10/0x10 [ 607.160688] ? down_read+0x1b1/0x450 [ 607.160717] ? find_held_lock+0x2b/0x80 [ 607.160747] do_madvise+0x16b/0x240 [ 607.160762] ? __pfx_do_madvise+0x10/0x10 [ 607.160774] ? kernel_write+0x5f3/0x660 [ 607.160809] ? __fget_files+0x20d/0x3b0 [ 607.160835] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.160854] ? ksys_write+0x1a3/0x240 [ 607.160874] ? __pfx_ksys_write+0x10/0x10 [ 607.160903] __x64_sys_madvise+0xa9/0x110 [ 607.160916] ? do_syscall_64+0x85/0x420 [ 607.160938] do_syscall_64+0xbf/0x420 [ 607.160959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.160972] RIP: 0033:0x7fbf3563bb19 [ 607.160983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.160994] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 607.161005] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 607.161012] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 607.161029] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.161036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.161042] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 607.161075] 02:11:09 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) 02:11:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 12) 02:11:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x95a) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) [ 607.250705] FAULT_INJECTION: forcing a failure. [ 607.250705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.251689] CPU: 1 UID: 0 PID: 6190 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.251705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.251713] Call Trace: [ 607.251717] [ 607.251723] dump_stack_lvl+0xfa/0x120 [ 607.251748] should_fail_ex+0x4d7/0x5e0 [ 607.251775] should_fail_alloc_page+0xe0/0x110 [ 607.251792] prepare_alloc_pages+0x1eb/0x550 [ 607.251818] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 607.251837] ? perf_tp_event+0x807/0xe70 [ 607.251867] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.251883] ? __pfx_perf_tp_event+0x10/0x10 [ 607.251906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.251923] ? __pfx_perf_tp_event+0x10/0x10 [ 607.251961] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.251978] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.252002] ? policy_nodemask+0xeb/0x4e0 [ 607.252026] alloc_pages_mpol+0xed/0x340 [ 607.252045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.252064] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.252084] ? get_vma_policy+0x23b/0x350 [ 607.252112] vma_alloc_folio_noprof+0xe9/0x440 [ 607.252133] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.252154] ? lock_release+0xc8/0x270 [ 607.252180] __handle_mm_fault+0x145c/0x2fa0 [ 607.252203] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.252221] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.252264] ? follow_page_pte+0x4f9/0x1170 [ 607.252292] handle_mm_fault+0x2d8/0x750 [ 607.252318] __get_user_pages+0x587/0x2fb0 [ 607.252360] ? down_read_killable+0x1d4/0x4d0 [ 607.252386] ? __pfx___get_user_pages+0x10/0x10 [ 607.252412] ? lock_is_held_type+0x9e/0x120 [ 607.252437] faultin_page_range+0x2f3/0x9d0 [ 607.252473] madvise_do_behavior+0x918/0xef0 [ 607.252502] ? __pfx_madvise_do_behavior+0x10/0x10 [ 607.252530] ? down_read+0x1b1/0x450 [ 607.252562] ? find_held_lock+0x2b/0x80 [ 607.252596] do_madvise+0x16b/0x240 [ 607.252613] ? __pfx_do_madvise+0x10/0x10 [ 607.252627] ? kernel_write+0x5f3/0x660 [ 607.252674] ? __fget_files+0x20d/0x3b0 [ 607.252704] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.252729] ? ksys_write+0x1a3/0x240 [ 607.252750] ? __pfx_ksys_write+0x10/0x10 [ 607.252768] ? irqentry_exit+0xee/0x650 [ 607.252788] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 607.252803] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.252828] __x64_sys_madvise+0xa9/0x110 [ 607.252845] ? do_syscall_64+0x85/0x420 [ 607.252871] do_syscall_64+0xbf/0x420 [ 607.252900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.252917] RIP: 0033:0x7fbf3563bb19 [ 607.252932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.252947] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 607.252960] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 607.252969] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 607.252978] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.252986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.252994] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 607.253039] 02:11:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x2f00}}, 0x0) [ 607.288310] FAULT_INJECTION: forcing a failure. 02:11:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 13) [ 607.288310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.291529] CPU: 0 UID: 0 PID: 6172 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.291570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.291588] Call Trace: [ 607.291599] [ 607.291612] dump_stack_lvl+0xfa/0x120 [ 607.291669] should_fail_ex+0x4d7/0x5e0 [ 607.291733] should_fail_alloc_page+0xe0/0x110 [ 607.291779] prepare_alloc_pages+0x1eb/0x550 [ 607.291846] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 607.291896] ? perf_tp_event+0x807/0xe70 [ 607.291977] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.292022] ? __pfx_perf_tp_event+0x10/0x10 [ 607.292086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.292132] ? __pfx_perf_tp_event+0x10/0x10 [ 607.292231] ? perf_trace_run_bpf_submit+0xef/0x180 [ 607.292273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.292341] ? policy_nodemask+0xeb/0x4e0 [ 607.292407] alloc_pages_mpol+0xed/0x340 [ 607.292457] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.292507] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.292554] ? get_vma_policy+0x23b/0x350 [ 607.292618] vma_alloc_folio_noprof+0xe9/0x440 [ 607.292670] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.292726] ? lock_release+0xc8/0x270 [ 607.292788] __handle_mm_fault+0x145c/0x2fa0 [ 607.292850] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.292894] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.293001] ? follow_page_pte+0x4f9/0x1170 [ 607.293199] handle_mm_fault+0x2d8/0x750 [ 607.293266] __get_user_pages+0x587/0x2fb0 [ 607.293365] ? down_read_killable+0x1d4/0x4d0 [ 607.293421] ? __pfx___get_user_pages+0x10/0x10 [ 607.293484] ? lock_is_held_type+0x9e/0x120 [ 607.293539] faultin_page_range+0x2f3/0x9d0 [ 607.293601] madvise_do_behavior+0x918/0xef0 [ 607.293652] ? __pfx_madvise_do_behavior+0x10/0x10 [ 607.293695] ? down_read+0x1b1/0x450 [ 607.293753] ? find_held_lock+0x2b/0x80 [ 607.293815] do_madvise+0x16b/0x240 [ 607.293845] ? __pfx_do_madvise+0x10/0x10 [ 607.293870] ? kernel_write+0x5f3/0x660 [ 607.293940] ? __fget_files+0x20d/0x3b0 [ 607.293991] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.294031] ? ksys_write+0x1a3/0x240 [ 607.294071] ? __pfx_ksys_write+0x10/0x10 [ 607.294107] ? irqentry_exit+0xee/0x650 [ 607.294139] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 607.294168] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.294211] __x64_sys_madvise+0xa9/0x110 [ 607.294237] ? do_syscall_64+0x85/0x420 [ 607.294279] do_syscall_64+0xbf/0x420 [ 607.294323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.294350] RIP: 0033:0x7f6da0d61b19 [ 607.294372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.294395] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 607.294418] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 607.294433] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 607.294447] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.294461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.294475] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 607.294540] [ 607.354186] FAULT_INJECTION: forcing a failure. [ 607.354186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.355168] CPU: 1 UID: 0 PID: 6194 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.355184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.355191] Call Trace: [ 607.355195] [ 607.355200] dump_stack_lvl+0xfa/0x120 [ 607.355226] should_fail_ex+0x4d7/0x5e0 [ 607.355247] should_fail_alloc_page+0xe0/0x110 [ 607.355262] prepare_alloc_pages+0x1eb/0x550 [ 607.355276] ? __lock_acquire+0x451/0x2250 [ 607.355293] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 607.355310] ? perf_trace_lock+0xb5/0x5d0 [ 607.355325] ? perf_trace_lock+0xa2/0x5d0 [ 607.355344] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.355363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.355378] ? perf_trace_lock+0xb5/0x5d0 [ 607.355397] ? __lock_acquire+0x451/0x2250 [ 607.355414] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.355434] ? policy_nodemask+0xeb/0x4e0 [ 607.355455] alloc_pages_mpol+0xed/0x340 [ 607.355472] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.355488] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.355503] ? get_vma_policy+0x23b/0x350 [ 607.355523] vma_alloc_folio_noprof+0xe9/0x440 [ 607.355541] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.355559] ? lock_release+0xc8/0x270 [ 607.355577] __handle_mm_fault+0x145c/0x2fa0 [ 607.355594] ? __pfx_perf_trace_lock+0x10/0x10 [ 607.355610] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.355624] ? __pte_offset_map_lock+0x190/0x330 [ 607.355646] ? follow_page_pte+0x4f9/0x1170 [ 607.355666] handle_mm_fault+0x2d8/0x750 [ 607.355685] __get_user_pages+0x587/0x2fb0 [ 607.355708] ? down_read_killable+0x1d4/0x4d0 [ 607.355728] ? __pfx___get_user_pages+0x10/0x10 [ 607.355746] ? lock_is_held_type+0x9e/0x120 [ 607.355765] faultin_page_range+0x2f3/0x9d0 [ 607.355786] madvise_do_behavior+0x918/0xef0 [ 607.355803] ? __pfx_madvise_do_behavior+0x10/0x10 [ 607.355819] ? down_read+0x1b1/0x450 [ 607.355839] ? find_held_lock+0x2b/0x80 [ 607.355861] do_madvise+0x16b/0x240 [ 607.355874] ? __pfx_do_madvise+0x10/0x10 [ 607.355885] ? kernel_write+0x5f3/0x660 [ 607.355910] ? __fget_files+0x20d/0x3b0 [ 607.355927] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.355944] ? ksys_write+0x1a3/0x240 [ 607.355961] ? __pfx_ksys_write+0x10/0x10 [ 607.355978] ? irqentry_exit+0xee/0x650 [ 607.355992] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 607.356006] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.356022] __x64_sys_madvise+0xa9/0x110 [ 607.356034] ? do_syscall_64+0x85/0x420 [ 607.356053] do_syscall_64+0xbf/0x420 [ 607.356071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.356083] RIP: 0033:0x7fbf3563bb19 [ 607.356093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.356104] RSP: 002b:00007fbf32b90188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 607.356116] RAX: ffffffffffffffda RBX: 00007fbf3574f020 RCX: 00007fbf3563bb19 [ 607.356124] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 607.356131] RBP: 00007fbf32b901d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.356138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.356145] R13: 00007fff0cae72ef R14: 00007fbf32b90300 R15: 0000000000022000 [ 607.356161] 02:11:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 02:11:10 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) [ 607.513072] FAULT_INJECTION: forcing a failure. [ 607.513072] name failslab, interval 1, probability 0, space 0, times 0 [ 607.514100] CPU: 1 UID: 0 PID: 6207 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 607.514122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.514130] Call Trace: [ 607.514134] [ 607.514139] dump_stack_lvl+0xfa/0x120 [ 607.514165] should_fail_ex+0x4d7/0x5e0 [ 607.514185] ? v9fs_init_fs_context+0x49/0x5b0 [ 607.514200] should_failslab+0xc2/0x120 [ 607.514213] __kmalloc_cache_noprof+0x80/0x780 [ 607.514232] ? lockdep_init_map_type+0x4b/0x220 [ 607.514249] ? v9fs_init_fs_context+0x49/0x5b0 [ 607.514262] v9fs_init_fs_context+0x49/0x5b0 [ 607.514277] alloc_fs_context+0x56d/0xb10 [ 607.514292] path_mount+0xd8d/0x2140 [ 607.514306] ? kasan_quarantine_put+0x84/0x1e0 [ 607.514318] ? __pfx_path_mount+0x10/0x10 [ 607.514335] ? kmem_cache_free+0x2cd/0x660 [ 607.514352] ? putname.part.0+0xc0/0x160 [ 607.514370] ? putname.part.0+0xc0/0x160 [ 607.514382] ? putname.part.0+0xc0/0x160 [ 607.514398] __x64_sys_mount+0x293/0x310 [ 607.514412] ? __pfx___x64_sys_mount+0x10/0x10 [ 607.514424] ? irqentry_exit+0xee/0x650 [ 607.514440] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 607.514458] do_syscall_64+0xbf/0x420 [ 607.514476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.514488] RIP: 0033:0x7f214b05fb19 [ 607.514498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.514509] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.514520] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 607.514528] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 607.514535] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 607.514542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.514549] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 607.514563] 02:11:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 14) 02:11:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 15) 02:11:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 02:11:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0xf000}}, 0x0) 02:11:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 13) 02:11:18 executing program 3: r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0xf6) write$binfmt_elf64(r1, &(0x7f00000015c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfb, 0x0, 0x81, 0x1, 0x7, 0x3, 0x3e, 0x1, 0xe1, 0x40, 0x379, 0x7312, 0x400, 0x38, 0x4, 0x4, 0x25, 0x1}, [{0x2, 0x1, 0x4, 0x103, 0xf3d, 0x100000001, 0x10001, 0x4}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000080)=0x8, 0x4) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 02:11:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x3ff, 0x1, 0x1a, 0xf8cd, 0x9}) 02:11:18 executing program 7: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) [ 615.354967] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 02:11:18 executing program 7: r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) [ 615.427662] FAULT_INJECTION: forcing a failure. [ 615.427662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.428636] CPU: 1 UID: 0 PID: 6222 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.428655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.428663] Call Trace: [ 615.428668] [ 615.428674] dump_stack_lvl+0xfa/0x120 [ 615.428705] should_fail_ex+0x4d7/0x5e0 [ 615.428733] should_fail_alloc_page+0xe0/0x110 [ 615.428752] prepare_alloc_pages+0x1eb/0x550 [ 615.428778] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 615.428797] ? perf_tp_event+0x807/0xe70 [ 615.428828] ? perf_trace_run_bpf_submit+0xef/0x180 [ 615.428844] ? __pfx_perf_tp_event+0x10/0x10 [ 615.428867] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 615.428885] ? __pfx_perf_tp_event+0x10/0x10 [ 615.428923] ? perf_trace_run_bpf_submit+0xef/0x180 [ 615.428941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.428966] ? policy_nodemask+0xeb/0x4e0 [ 615.428990] alloc_pages_mpol+0xed/0x340 [ 615.429010] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 615.429028] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.429049] ? get_vma_policy+0x23b/0x350 [ 615.429073] vma_alloc_folio_noprof+0xe9/0x440 [ 615.429093] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 615.429115] ? lock_release+0xc8/0x270 [ 615.429153] __handle_mm_fault+0x145c/0x2fa0 [ 615.429178] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.429196] ? __pfx___handle_mm_fault+0x10/0x10 [ 615.429239] ? follow_page_pte+0x4f9/0x1170 [ 615.429267] handle_mm_fault+0x2d8/0x750 [ 615.429293] __get_user_pages+0x587/0x2fb0 [ 615.429335] ? down_read_killable+0x1d4/0x4d0 [ 615.429360] ? __pfx___get_user_pages+0x10/0x10 [ 615.429384] ? lock_is_held_type+0x9e/0x120 [ 615.429409] faultin_page_range+0x2f3/0x9d0 [ 615.429439] madvise_do_behavior+0x918/0xef0 [ 615.429465] ? __pfx_madvise_do_behavior+0x10/0x10 [ 615.429487] ? down_read+0x1b1/0x450 [ 615.429518] ? find_held_lock+0x2b/0x80 [ 615.429552] do_madvise+0x16b/0x240 [ 615.429566] ? __pfx_do_madvise+0x10/0x10 [ 615.429578] ? kernel_write+0x5f3/0x660 [ 615.429615] ? __fget_files+0x20d/0x3b0 [ 615.429641] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 615.429663] ? ksys_write+0x1a3/0x240 [ 615.429684] ? __pfx_ksys_write+0x10/0x10 [ 615.429701] ? irqentry_exit+0xee/0x650 [ 615.429718] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 615.429732] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 615.429754] __x64_sys_madvise+0xa9/0x110 [ 615.429767] ? do_syscall_64+0x85/0x420 [ 615.429789] do_syscall_64+0xbf/0x420 [ 615.429811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.429826] RIP: 0033:0x7fbf3563bb19 [ 615.429837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.429849] RSP: 002b:00007fbf32bb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 615.429861] RAX: ffffffffffffffda RBX: 00007fbf3574ef60 RCX: 00007fbf3563bb19 [ 615.429869] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 615.429877] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.429884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.429891] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 615.429923] [ 615.479430] FAULT_INJECTION: forcing a failure. [ 615.479430] name failslab, interval 1, probability 0, space 0, times 0 [ 615.480435] CPU: 1 UID: 0 PID: 6230 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.480451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.480459] Call Trace: [ 615.480463] [ 615.480469] dump_stack_lvl+0xfa/0x120 [ 615.480496] should_fail_ex+0x4d7/0x5e0 [ 615.480517] should_failslab+0xc2/0x120 [ 615.480532] __kmalloc_node_track_caller_noprof+0xd7/0x890 [ 615.480554] ? __kmalloc_cache_noprof+0x4ae/0x780 [ 615.480570] ? v9fs_init_fs_context+0xf3/0x5b0 [ 615.480592] ? kstrdup+0x3e/0xc0 [ 615.480606] kstrdup+0x3e/0xc0 [ 615.480621] v9fs_init_fs_context+0xf3/0x5b0 [ 615.480636] alloc_fs_context+0x56d/0xb10 [ 615.480652] path_mount+0xd8d/0x2140 [ 615.480668] ? kasan_quarantine_put+0x84/0x1e0 [ 615.480681] ? __pfx_path_mount+0x10/0x10 [ 615.480693] ? kmem_cache_free+0x2cd/0x660 [ 615.480710] ? putname.part.0+0xc0/0x160 [ 615.480729] ? putname.part.0+0xc0/0x160 [ 615.480742] ? putname.part.0+0xc0/0x160 [ 615.480759] __x64_sys_mount+0x293/0x310 [ 615.480772] ? __pfx___x64_sys_mount+0x10/0x10 [ 615.480785] ? irqentry_exit+0xee/0x650 [ 615.480801] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 615.480821] do_syscall_64+0xbf/0x420 [ 615.480841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.480855] RIP: 0033:0x7f214b05fb19 [ 615.480867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.480879] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.480890] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 615.480898] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 615.480906] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 615.480913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.480920] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 615.480937] [ 615.504288] FAULT_INJECTION: forcing a failure. [ 615.504288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.506433] CPU: 0 UID: 0 PID: 6234 Comm: syz-executor.0 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.506469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.506485] Call Trace: [ 615.506494] [ 615.506504] dump_stack_lvl+0xfa/0x120 [ 615.506555] should_fail_ex+0x4d7/0x5e0 [ 615.506603] _copy_to_user+0x32/0xd0 [ 615.506648] simple_read_from_buffer+0xe0/0x180 [ 615.506697] proc_fail_nth_read+0x18a/0x240 [ 615.506733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.506769] ? security_file_permission+0x22/0x90 [ 615.506820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.506851] vfs_read+0x1eb/0xc70 [ 615.506897] ? __pfx___mutex_lock+0x10/0x10 [ 615.506936] ? __fget_files+0x34/0x3b0 [ 615.506962] ? __pfx_vfs_read+0x10/0x10 [ 615.507009] ? lock_release+0xc8/0x270 [ 615.507052] ? __fget_files+0x20d/0x3b0 [ 615.507095] ksys_read+0x121/0x240 [ 615.507139] ? __pfx_ksys_read+0x10/0x10 [ 615.507199] do_syscall_64+0xbf/0x420 [ 615.507244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.507273] RIP: 0033:0x7f494b6ee69c [ 615.507294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 615.507320] RSP: 002b:00007f4948c90170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.507349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f494b6ee69c [ 615.507364] RDX: 000000000000000f RSI: 00007f4948c901e0 RDI: 0000000000000005 [ 615.507380] RBP: 00007f4948c901d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.507394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.507409] R13: 00007fff7141d11f R14: 00007f4948c90300 R15: 0000000000022000 [ 615.507450] 02:11:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 15) 02:11:18 executing program 7: r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x54}}, 0x0) [ 615.551027] FAULT_INJECTION: forcing a failure. [ 615.551027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.552022] CPU: 1 UID: 0 PID: 6227 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.552062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.552072] Call Trace: [ 615.552077] [ 615.552082] dump_stack_lvl+0xfa/0x120 [ 615.552107] should_fail_ex+0x4d7/0x5e0 [ 615.552140] should_fail_alloc_page+0xe0/0x110 [ 615.552159] prepare_alloc_pages+0x1eb/0x550 [ 615.552178] ? __lock_acquire+0x451/0x2250 [ 615.552204] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 615.552229] ? perf_trace_lock+0xb5/0x5d0 [ 615.552247] ? perf_trace_lock+0xa2/0x5d0 [ 615.552271] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.552304] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 615.552334] ? perf_trace_lock+0xb5/0x5d0 [ 615.552357] ? __lock_acquire+0x451/0x2250 [ 615.552374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.552393] ? policy_nodemask+0xeb/0x4e0 [ 615.552412] alloc_pages_mpol+0xed/0x340 [ 615.552428] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 615.552445] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.552460] ? get_vma_policy+0x23b/0x350 [ 615.552479] vma_alloc_folio_noprof+0xe9/0x440 [ 615.552497] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 615.552515] ? lock_release+0xc8/0x270 [ 615.552533] __handle_mm_fault+0x145c/0x2fa0 [ 615.552551] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.552566] ? __pfx___handle_mm_fault+0x10/0x10 [ 615.552580] ? __pte_offset_map_lock+0x190/0x330 [ 615.552603] ? follow_page_pte+0x4f9/0x1170 [ 615.552623] handle_mm_fault+0x2d8/0x750 [ 615.552642] __get_user_pages+0x587/0x2fb0 [ 615.552665] ? down_read_killable+0x1d4/0x4d0 [ 615.552685] ? __pfx___get_user_pages+0x10/0x10 [ 615.552703] ? lock_is_held_type+0x9e/0x120 [ 615.552721] faultin_page_range+0x2f3/0x9d0 [ 615.552743] madvise_do_behavior+0x918/0xef0 [ 615.552760] ? __pfx_madvise_do_behavior+0x10/0x10 [ 615.552775] ? down_read+0x1b1/0x450 [ 615.552796] ? find_held_lock+0x2b/0x80 [ 615.552818] do_madvise+0x16b/0x240 [ 615.552831] ? __pfx_do_madvise+0x10/0x10 [ 615.552843] ? kernel_write+0x5f3/0x660 [ 615.552868] ? __fget_files+0x20d/0x3b0 [ 615.552884] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 615.552901] ? ksys_write+0x1a3/0x240 [ 615.552919] ? __pfx_ksys_write+0x10/0x10 [ 615.552936] ? irqentry_exit+0xee/0x650 [ 615.552951] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 615.552964] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 615.552981] __x64_sys_madvise+0xa9/0x110 [ 615.552993] ? do_syscall_64+0x85/0x420 [ 615.553011] do_syscall_64+0xbf/0x420 [ 615.553029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.553042] RIP: 0033:0x7f6da0d61b19 [ 615.553052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.553064] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 615.553075] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 615.553083] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 615.553090] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.553098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.553105] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 615.553122] 02:11:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 02:11:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0xf1, {0x29, 0x10040}}, 0x0) 02:11:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (fail_nth: 14) 02:11:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f00000000c0), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) [ 615.648322] FAULT_INJECTION: forcing a failure. [ 615.648322] name failslab, interval 1, probability 0, space 0, times 0 [ 615.649303] CPU: 1 UID: 0 PID: 6240 Comm: syz-executor.6 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.649319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.649326] Call Trace: [ 615.649334] [ 615.649338] dump_stack_lvl+0xfa/0x120 [ 615.649360] should_fail_ex+0x4d7/0x5e0 [ 615.649380] should_failslab+0xc2/0x120 [ 615.649394] __kmalloc_node_track_caller_noprof+0xd7/0x890 [ 615.649413] ? __kmalloc_cache_noprof+0x4ae/0x780 [ 615.649429] ? v9fs_init_fs_context+0xf3/0x5b0 [ 615.649447] ? kstrdup+0x3e/0xc0 [ 615.649462] kstrdup+0x3e/0xc0 [ 615.649477] v9fs_init_fs_context+0xf3/0x5b0 [ 615.649491] alloc_fs_context+0x56d/0xb10 [ 615.649507] path_mount+0xd8d/0x2140 [ 615.649523] ? kasan_quarantine_put+0x84/0x1e0 [ 615.649535] ? __pfx_path_mount+0x10/0x10 [ 615.649548] ? kmem_cache_free+0x2cd/0x660 [ 615.649564] ? putname.part.0+0xc0/0x160 [ 615.649582] ? putname.part.0+0xc0/0x160 [ 615.649595] ? putname.part.0+0xc0/0x160 [ 615.649611] __x64_sys_mount+0x293/0x310 [ 615.649624] ? __pfx___x64_sys_mount+0x10/0x10 [ 615.649636] ? irqentry_exit+0xee/0x650 [ 615.649651] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 615.649671] do_syscall_64+0xbf/0x420 [ 615.649690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.649703] RIP: 0033:0x7f214b05fb19 [ 615.649713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.649724] RSP: 002b:00007f21485d5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.649735] RAX: ffffffffffffffda RBX: 00007f214b172f60 RCX: 00007f214b05fb19 [ 615.649743] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 615.649750] RBP: 00007f21485d51d0 R08: 0000000020000400 R09: 0000000000000000 [ 615.649757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.649763] R13: 00007ffea4ca553f R14: 00007f21485d5300 R15: 0000000000022000 [ 615.649780] [ 615.694312] FAULT_INJECTION: forcing a failure. [ 615.694312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.695973] CPU: 1 UID: 0 PID: 6243 Comm: syz-executor.1 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.695988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.695996] Call Trace: [ 615.696000] [ 615.696004] dump_stack_lvl+0xfa/0x120 [ 615.696028] should_fail_ex+0x4d7/0x5e0 [ 615.696048] should_fail_alloc_page+0xe0/0x110 [ 615.696063] prepare_alloc_pages+0x1eb/0x550 [ 615.696077] ? __lock_acquire+0x451/0x2250 [ 615.696093] __alloc_frozen_pages_noprof+0x17f/0x1f70 [ 615.696110] ? perf_trace_lock+0xb5/0x5d0 [ 615.696126] ? perf_trace_lock+0xa2/0x5d0 [ 615.696144] ? perf_trace_lock+0xb5/0x5d0 [ 615.696157] ? __lock_acquire+0x451/0x2250 [ 615.696171] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 615.696187] ? perf_trace_lock+0xb5/0x5d0 [ 615.696206] ? __lock_acquire+0x451/0x2250 [ 615.696223] ? __sanitizer_cov_trace_switch+0x54/0x90 02:11:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x1, 0x7f, 0x5, 0x0, 0x1ff, 0x10042, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x5}, 0x1001, 0x2, 0x280, 0x5, 0x3b, 0x6, 0x9, 0x0, 0x5, 0x0, 0x100}, 0x0, 0x7, r0, 0x9) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r3}], 0x1, 0xf6) r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x7fff, 0x28200, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x7}, 0x4000, 0x8000, 0xffffffff, 0x1, 0x7, 0x8001, 0xff, 0x0, 0x1}, r4, 0xc, r0, 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000340)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x8000000}}, './file0\x00'}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xff, 0x8, 0x0, 0x1, 0x0, 0xffffffffffffffab, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x2}, 0x24800, 0x5, 0x1, 0x4, 0x5b, 0x8, 0x9, 0x0, 0x1, 0x0, 0x101}, r5, 0x7, r6, 0xb) dup(r0) process_madvise(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="0d89eb06f8f9e213974c21e1d66876082127bdd0ce6be31455bfd24ce1dda88fe2ea16e390c40e7f90d14864bae0a0a4f8b8c196049972fc5ae7d13bf23db4613cdec77eb309ee066653a3fec40cdc8bc263532d456491d50204cf567d882be7fa553795fd30846ec59c1e7eef5a2f534551f2a683c11fe77a31fc89cae8bdf31996369095fe60aa0897541771177c1b9fde38b7c8e417ea088fa71a878130ee0b3dbcf3e48d900f1d73d777373267ee1740f9d1bf5c4f49da36f1c48f7d73c5658e91c36da46b2e06a63f592b2bad01e986477e38fb66f0344ba81e9a451e686543d04d8aa3f7737c06", 0xea}, {&(0x7f0000000240)="a3", 0x1}, {&(0x7f0000000280)="0c09c5e238c251df51e776cf913c602ebf1ee98e65ac63f25064ab06bc1e857380c65906a2e037dad54e564c5ccfdc07e8ca6668324bfc3aebe44d742a607efe49b234534eb6b03728f30ee9df345e649462052d5526dae2a3757b5eb52867cea6f8837dd9cfd3e3", 0x68}], 0x3, 0x13, 0x0) fork() pidfd_getfd(r2, r0, 0x0) [ 615.696242] ? policy_nodemask+0xeb/0x4e0 [ 615.696260] alloc_pages_mpol+0xed/0x340 [ 615.696277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 615.696293] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.696308] ? get_vma_policy+0x23b/0x350 [ 615.696327] vma_alloc_folio_noprof+0xe9/0x440 [ 615.696350] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 615.696368] ? lock_release+0xc8/0x270 [ 615.696389] __handle_mm_fault+0x145c/0x2fa0 [ 615.696408] ? __pfx_perf_trace_lock+0x10/0x10 [ 615.696423] ? __pfx___handle_mm_fault+0x10/0x10 [ 615.696438] ? __pte_offset_map_lock+0x190/0x330 [ 615.696460] ? follow_page_pte+0x4f9/0x1170 [ 615.696480] handle_mm_fault+0x2d8/0x750 [ 615.696498] __get_user_pages+0x587/0x2fb0 [ 615.696521] ? down_read_killable+0x1d4/0x4d0 [ 615.696542] ? __pfx___get_user_pages+0x10/0x10 [ 615.696559] ? lock_is_held_type+0x9e/0x120 [ 615.696577] faultin_page_range+0x2f3/0x9d0 [ 615.696598] madvise_do_behavior+0x918/0xef0 [ 615.696616] ? __pfx_madvise_do_behavior+0x10/0x10 [ 615.696632] ? down_read+0x1b1/0x450 [ 615.696653] ? find_held_lock+0x2b/0x80 [ 615.696675] do_madvise+0x16b/0x240 [ 615.696687] ? __pfx_do_madvise+0x10/0x10 [ 615.696699] ? kernel_write+0x5f3/0x660 [ 615.696724] ? __fget_files+0x20d/0x3b0 [ 615.696741] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 615.696758] ? ksys_write+0x1a3/0x240 [ 615.696776] ? __pfx_ksys_write+0x10/0x10 [ 615.696793] ? irqentry_exit+0xee/0x650 [ 615.696807] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 615.696821] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 615.696837] __x64_sys_madvise+0xa9/0x110 [ 615.696850] ? do_syscall_64+0x85/0x420 [ 615.696868] do_syscall_64+0xbf/0x420 [ 615.696886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.696899] RIP: 0033:0x7f6da0d61b19 [ 615.696908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 615.696920] RSP: 002b:00007f6d9e2d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 615.696932] RAX: ffffffffffffffda RBX: 00007f6da0e74f60 RCX: 00007f6da0d61b19 [ 615.696940] RDX: 0000000000000017 RSI: 000000000000d000 RDI: 0000000020ff3000 [ 615.696947] RBP: 00007f6d9e2d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.696954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.696962] R13: 00007fff299db15f R14: 00007f6d9e2d7300 R15: 0000000000022000 [ 615.696980] [ 615.701905] FAULT_INJECTION: forcing a failure. [ 615.701905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.748603] CPU: 0 UID: 0 PID: 6239 Comm: syz-executor.2 Not tainted 6.19.0-rc4-next-20260106 #1 PREEMPT(voluntary) [ 615.748636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 615.748651] Call Trace: [ 615.748663] [ 615.748676] dump_stack_lvl+0xfa/0x120 [ 615.748727] should_fail_ex+0x4d7/0x5e0 [ 615.748778] _copy_to_user+0x32/0xd0 [ 615.748825] simple_read_from_buffer+0xe0/0x180 [ 615.748875] proc_fail_nth_read+0x18a/0x240 [ 615.748914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.748952] ? security_file_permission+0x22/0x90 [ 615.748999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.749034] vfs_read+0x1eb/0xc70 [ 615.749082] ? __pfx___mutex_lock+0x10/0x10 [ 615.749116] ? __fget_files+0x34/0x3b0 [ 615.749167] ? __pfx_vfs_read+0x10/0x10 [ 615.749214] ? lock_release+0xc8/0x270 [ 615.749261] ? __fget_files+0x20d/0x3b0 [ 615.749320] ksys_read+0x121/0x240 [ 615.749367] ? __pfx_ksys_read+0x10/0x10 [ 615.749437] do_syscall_64+0xbf/0x420 [ 615.749482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.749509] RIP: 0033:0x7fbf355ee69c [ 615.749532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 615.749555] RSP: 002b:00007fbf32bb1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.749578] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf355ee69c [ 615.749593] RDX: 000000000000000f RSI: 00007fbf32bb11e0 RDI: 0000000000000005 [ 615.749607] RBP: 00007fbf32bb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.749620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.749634] R13: 00007fff0cae72ef R14: 00007fbf32bb1300 R15: 0000000000022000 [ 615.749698] [ 625.042507] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800e031c00 (size 128): comm "syz-executor.6", pid 6230, jiffies 4295282302 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 96bdc52d): __kmalloc_cache_noprof+0x4a4/0x780 v9fs_init_fs_context+0x49/0x5b0 alloc_fs_context+0x56d/0xb10 path_mount+0xd8d/0x2140 __x64_sys_mount+0x293/0x310 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800dc7cd00 (size 128): comm "syz-executor.6", pid 6240, jiffies 4295282470 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 96bdc52d): __kmalloc_cache_noprof+0x4a4/0x780 v9fs_init_fs_context+0x49/0x5b0 alloc_fs_context+0x56d/0xb10 path_mount+0xd8d/0x2140 __x64_sys_mount+0x293/0x310 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 02:11:33 Registers: info registers vcpu 0 RAX=0000000000499435 RBX=0000000000000000 RCX=ffffffff84cda937 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d3e60 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c63ea R10=ffff88806ce31f53 R11=0000000000000001 R12=ffffffff86669350 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cd933e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e534d000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c002017018 CR3=000000001fed4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=532e29646d432a282e636578652f736f XMM03=00000000000000000000000000000000 XMM04=6b61656c2079726f6d656d203a475542 XMM05=78302f64386478302b746e756f6d5f68 XMM06=735f3436785f5f202020200a30343132 XMM07=302f33393278302b746e756f6d5f7379 XMM08=637379735f6f64202020200a30313378 XMM09=323478302f666278302b34365f6c6c61 XMM10=435359535f7972746e65202020200a30 XMM11=6677685f72657466615f34365f4c4c41 XMM12=0a0a663778302f373778302b656d6172 XMM13=7566206365786509006c61746f742063 XMM14=616469646e616320636578650e007a7a XMM15=00006873616d7320636578650a006574 info registers vcpu 1 RAX=0000000000193b21 RBX=0000000000000001 RCX=ffffffff84cda937 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d3e60 RBP=dffffc0000000000 RSP=ffff888009b2fe58 R8 =0000000000000001 R9 =ffffed100d9e63ea R10=ffff88806cf31f53 R11=0000000000000001 R12=ffffffff86669350 R13=1ffff11001365fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cd933e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e544d000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe560b8c30 CR3=000000001feb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2938323120657a697328203030633133 XMM03=3620646970202c22362e726f74756365 XMM04=30202020200a2e2e2e2e2e2e2e2e2e2e XMM05=20303020303020303020303020303020 XMM06=30203030203030202020200a3a297365 XMM07=75642078656820200a32303332383235 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000