Warning: Permanently added '[localhost]:32557' (ECDSA) to the list of known hosts. 2023/03/27 12:28:32 fuzzer started 2023/03/27 12:28:32 dialing manager at localhost:45291 syzkaller login: [ 39.527484] cgroup: Unknown subsys name 'net' [ 39.612602] cgroup: Unknown subsys name 'rlimit' 2023/03/27 12:28:45 syscalls: 2217 2023/03/27 12:28:45 code coverage: enabled 2023/03/27 12:28:45 comparison tracing: enabled 2023/03/27 12:28:45 extra coverage: enabled 2023/03/27 12:28:45 setuid sandbox: enabled 2023/03/27 12:28:45 namespace sandbox: enabled 2023/03/27 12:28:45 Android sandbox: enabled 2023/03/27 12:28:45 fault injection: enabled 2023/03/27 12:28:45 leak checking: enabled 2023/03/27 12:28:45 net packet injection: enabled 2023/03/27 12:28:45 net device setup: enabled 2023/03/27 12:28:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/03/27 12:28:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/03/27 12:28:45 USB emulation: enabled 2023/03/27 12:28:45 hci packet injection: enabled 2023/03/27 12:28:45 wifi device emulation: enabled 2023/03/27 12:28:45 802.15.4 emulation: enabled 2023/03/27 12:28:45 fetching corpus: 0, signal 0/2000 (executing program) 2023/03/27 12:28:46 fetching corpus: 48, signal 32265/35801 (executing program) 2023/03/27 12:28:46 fetching corpus: 98, signal 45535/50551 (executing program) 2023/03/27 12:28:46 fetching corpus: 148, signal 52416/58921 (executing program) 2023/03/27 12:28:46 fetching corpus: 198, signal 62210/69947 (executing program) 2023/03/27 12:28:46 fetching corpus: 248, signal 67274/76317 (executing program) 2023/03/27 12:28:46 fetching corpus: 298, signal 73291/83470 (executing program) 2023/03/27 12:28:46 fetching corpus: 348, signal 80932/92109 (executing program) 2023/03/27 12:28:46 fetching corpus: 398, signal 85864/98119 (executing program) 2023/03/27 12:28:47 fetching corpus: 448, signal 90344/103642 (executing program) 2023/03/27 12:28:47 fetching corpus: 498, signal 93908/108248 (executing program) 2023/03/27 12:28:47 fetching corpus: 548, signal 98409/113685 (executing program) 2023/03/27 12:28:47 fetching corpus: 598, signal 102329/118477 (executing program) 2023/03/27 12:28:47 fetching corpus: 648, signal 105638/122678 (executing program) 2023/03/27 12:28:47 fetching corpus: 698, signal 110374/128135 (executing program) 2023/03/27 12:28:47 fetching corpus: 748, signal 113477/132087 (executing program) 2023/03/27 12:28:47 fetching corpus: 798, signal 117067/136461 (executing program) 2023/03/27 12:28:48 fetching corpus: 848, signal 121255/141245 (executing program) 2023/03/27 12:28:48 fetching corpus: 898, signal 124447/145092 (executing program) 2023/03/27 12:28:48 fetching corpus: 948, signal 126115/147604 (executing program) 2023/03/27 12:28:48 fetching corpus: 998, signal 128702/150893 (executing program) 2023/03/27 12:28:48 fetching corpus: 1048, signal 130258/153232 (executing program) 2023/03/27 12:28:48 fetching corpus: 1098, signal 132428/156084 (executing program) 2023/03/27 12:28:48 fetching corpus: 1148, signal 135126/159375 (executing program) 2023/03/27 12:28:48 fetching corpus: 1198, signal 137518/162367 (executing program) 2023/03/27 12:28:48 fetching corpus: 1248, signal 139579/165054 (executing program) 2023/03/27 12:28:49 fetching corpus: 1298, signal 140979/167169 (executing program) 2023/03/27 12:28:49 fetching corpus: 1348, signal 142288/169134 (executing program) 2023/03/27 12:28:49 fetching corpus: 1398, signal 144572/171871 (executing program) 2023/03/27 12:28:49 fetching corpus: 1448, signal 146672/174442 (executing program) 2023/03/27 12:28:49 fetching corpus: 1498, signal 148417/176716 (executing program) 2023/03/27 12:28:49 fetching corpus: 1548, signal 150045/178898 (executing program) 2023/03/27 12:28:49 fetching corpus: 1598, signal 151657/181015 (executing program) 2023/03/27 12:28:49 fetching corpus: 1648, signal 152743/182708 (executing program) 2023/03/27 12:28:50 fetching corpus: 1698, signal 153829/184409 (executing program) 2023/03/27 12:28:50 fetching corpus: 1748, signal 155138/186218 (executing program) 2023/03/27 12:28:50 fetching corpus: 1798, signal 156419/188015 (executing program) 2023/03/27 12:28:50 fetching corpus: 1848, signal 157905/189961 (executing program) 2023/03/27 12:28:50 fetching corpus: 1898, signal 159712/192074 (executing program) 2023/03/27 12:28:50 fetching corpus: 1948, signal 161320/194067 (executing program) 2023/03/27 12:28:50 fetching corpus: 1998, signal 162817/195892 (executing program) 2023/03/27 12:28:50 fetching corpus: 2048, signal 164114/197629 (executing program) 2023/03/27 12:28:50 fetching corpus: 2098, signal 165376/199284 (executing program) 2023/03/27 12:28:51 fetching corpus: 2148, signal 166659/200979 (executing program) 2023/03/27 12:28:51 fetching corpus: 2198, signal 167931/202632 (executing program) 2023/03/27 12:28:51 fetching corpus: 2248, signal 169486/204422 (executing program) 2023/03/27 12:28:51 fetching corpus: 2298, signal 170275/205679 (executing program) 2023/03/27 12:28:51 fetching corpus: 2348, signal 171322/207131 (executing program) 2023/03/27 12:28:51 fetching corpus: 2398, signal 172595/208637 (executing program) 2023/03/27 12:28:51 fetching corpus: 2448, signal 173584/209988 (executing program) 2023/03/27 12:28:51 fetching corpus: 2498, signal 174464/211241 (executing program) 2023/03/27 12:28:51 fetching corpus: 2548, signal 175716/212752 (executing program) 2023/03/27 12:28:52 fetching corpus: 2598, signal 177035/214249 (executing program) 2023/03/27 12:28:52 fetching corpus: 2648, signal 178102/215562 (executing program) 2023/03/27 12:28:52 fetching corpus: 2698, signal 179056/216842 (executing program) 2023/03/27 12:28:52 fetching corpus: 2748, signal 180191/218244 (executing program) 2023/03/27 12:28:52 fetching corpus: 2798, signal 181111/219468 (executing program) 2023/03/27 12:28:52 fetching corpus: 2848, signal 182243/220755 (executing program) 2023/03/27 12:28:52 fetching corpus: 2898, signal 183628/222215 (executing program) 2023/03/27 12:28:52 fetching corpus: 2948, signal 184524/223348 (executing program) 2023/03/27 12:28:53 fetching corpus: 2998, signal 185400/224483 (executing program) 2023/03/27 12:28:53 fetching corpus: 3048, signal 185971/225424 (executing program) 2023/03/27 12:28:53 fetching corpus: 3098, signal 186990/226631 (executing program) 2023/03/27 12:28:53 fetching corpus: 3148, signal 187827/227674 (executing program) 2023/03/27 12:28:53 fetching corpus: 3198, signal 188865/228814 (executing program) 2023/03/27 12:28:53 fetching corpus: 3248, signal 189990/230008 (executing program) 2023/03/27 12:28:53 fetching corpus: 3298, signal 190795/230974 (executing program) 2023/03/27 12:28:53 fetching corpus: 3348, signal 191808/232088 (executing program) 2023/03/27 12:28:54 fetching corpus: 3398, signal 192619/233122 (executing program) 2023/03/27 12:28:54 fetching corpus: 3448, signal 193497/234129 (executing program) 2023/03/27 12:28:54 fetching corpus: 3498, signal 194146/235033 (executing program) 2023/03/27 12:28:54 fetching corpus: 3548, signal 195187/236107 (executing program) 2023/03/27 12:28:54 fetching corpus: 3598, signal 196296/237169 (executing program) 2023/03/27 12:28:54 fetching corpus: 3648, signal 197126/238115 (executing program) 2023/03/27 12:28:54 fetching corpus: 3698, signal 197757/238954 (executing program) 2023/03/27 12:28:54 fetching corpus: 3748, signal 198627/239853 (executing program) 2023/03/27 12:28:55 fetching corpus: 3798, signal 199570/240822 (executing program) 2023/03/27 12:28:55 fetching corpus: 3848, signal 200611/241838 (executing program) 2023/03/27 12:28:55 fetching corpus: 3898, signal 201287/242659 (executing program) 2023/03/27 12:28:55 fetching corpus: 3948, signal 201873/243442 (executing program) 2023/03/27 12:28:55 fetching corpus: 3998, signal 202321/244164 (executing program) 2023/03/27 12:28:55 fetching corpus: 4048, signal 203076/244953 (executing program) 2023/03/27 12:28:55 fetching corpus: 4098, signal 203490/245610 (executing program) 2023/03/27 12:28:55 fetching corpus: 4148, signal 204289/246423 (executing program) 2023/03/27 12:28:55 fetching corpus: 4198, signal 205682/247450 (executing program) 2023/03/27 12:28:56 fetching corpus: 4248, signal 206568/248239 (executing program) 2023/03/27 12:28:56 fetching corpus: 4298, signal 207036/248855 (executing program) 2023/03/27 12:28:56 fetching corpus: 4348, signal 207576/249532 (executing program) 2023/03/27 12:28:56 fetching corpus: 4398, signal 208069/250227 (executing program) 2023/03/27 12:28:56 fetching corpus: 4448, signal 208705/250913 (executing program) 2023/03/27 12:28:56 fetching corpus: 4498, signal 209371/251624 (executing program) 2023/03/27 12:28:56 fetching corpus: 4548, signal 209885/252281 (executing program) 2023/03/27 12:28:56 fetching corpus: 4598, signal 210570/252942 (executing program) 2023/03/27 12:28:56 fetching corpus: 4648, signal 211153/253540 (executing program) 2023/03/27 12:28:57 fetching corpus: 4698, signal 211919/254209 (executing program) 2023/03/27 12:28:57 fetching corpus: 4748, signal 212500/254862 (executing program) 2023/03/27 12:28:57 fetching corpus: 4798, signal 213308/255566 (executing program) 2023/03/27 12:28:57 fetching corpus: 4848, signal 213817/256135 (executing program) 2023/03/27 12:28:57 fetching corpus: 4898, signal 214252/256682 (executing program) 2023/03/27 12:28:57 fetching corpus: 4948, signal 214618/257210 (executing program) 2023/03/27 12:28:57 fetching corpus: 4998, signal 215370/257846 (executing program) 2023/03/27 12:28:57 fetching corpus: 5048, signal 216218/258476 (executing program) 2023/03/27 12:28:58 fetching corpus: 5098, signal 216866/259030 (executing program) 2023/03/27 12:28:58 fetching corpus: 5148, signal 217423/259572 (executing program) 2023/03/27 12:28:58 fetching corpus: 5198, signal 217986/260109 (executing program) 2023/03/27 12:28:58 fetching corpus: 5248, signal 218529/260664 (executing program) 2023/03/27 12:28:58 fetching corpus: 5298, signal 219051/261146 (executing program) 2023/03/27 12:28:58 fetching corpus: 5348, signal 219524/261626 (executing program) 2023/03/27 12:28:58 fetching corpus: 5398, signal 220211/262173 (executing program) 2023/03/27 12:28:58 fetching corpus: 5448, signal 220883/262693 (executing program) 2023/03/27 12:28:59 fetching corpus: 5498, signal 221182/263114 (executing program) 2023/03/27 12:28:59 fetching corpus: 5548, signal 221640/263589 (executing program) 2023/03/27 12:28:59 fetching corpus: 5598, signal 222138/264050 (executing program) 2023/03/27 12:28:59 fetching corpus: 5648, signal 222488/264465 (executing program) 2023/03/27 12:28:59 fetching corpus: 5698, signal 222807/264875 (executing program) 2023/03/27 12:28:59 fetching corpus: 5748, signal 223226/265301 (executing program) 2023/03/27 12:28:59 fetching corpus: 5798, signal 223803/265713 (executing program) 2023/03/27 12:28:59 fetching corpus: 5848, signal 224335/266119 (executing program) 2023/03/27 12:28:59 fetching corpus: 5898, signal 224797/266534 (executing program) 2023/03/27 12:29:00 fetching corpus: 5948, signal 225174/266912 (executing program) 2023/03/27 12:29:00 fetching corpus: 5998, signal 225611/267346 (executing program) 2023/03/27 12:29:00 fetching corpus: 6048, signal 226234/267736 (executing program) 2023/03/27 12:29:00 fetching corpus: 6098, signal 226700/268109 (executing program) 2023/03/27 12:29:00 fetching corpus: 6148, signal 227134/268474 (executing program) 2023/03/27 12:29:00 fetching corpus: 6198, signal 227849/268884 (executing program) 2023/03/27 12:29:00 fetching corpus: 6248, signal 228422/269236 (executing program) 2023/03/27 12:29:00 fetching corpus: 6298, signal 229113/269596 (executing program) 2023/03/27 12:29:00 fetching corpus: 6348, signal 229540/269949 (executing program) 2023/03/27 12:29:01 fetching corpus: 6398, signal 230108/270292 (executing program) 2023/03/27 12:29:01 fetching corpus: 6448, signal 230638/270655 (executing program) 2023/03/27 12:29:01 fetching corpus: 6498, signal 231309/271029 (executing program) 2023/03/27 12:29:01 fetching corpus: 6548, signal 231790/271334 (executing program) 2023/03/27 12:29:01 fetching corpus: 6598, signal 232267/271642 (executing program) 2023/03/27 12:29:01 fetching corpus: 6648, signal 232550/271955 (executing program) 2023/03/27 12:29:01 fetching corpus: 6698, signal 232960/272304 (executing program) 2023/03/27 12:29:01 fetching corpus: 6748, signal 233507/272610 (executing program) 2023/03/27 12:29:01 fetching corpus: 6798, signal 233996/272651 (executing program) 2023/03/27 12:29:02 fetching corpus: 6848, signal 234642/272651 (executing program) 2023/03/27 12:29:02 fetching corpus: 6898, signal 235063/272651 (executing program) 2023/03/27 12:29:02 fetching corpus: 6948, signal 235513/272651 (executing program) 2023/03/27 12:29:02 fetching corpus: 6998, signal 235825/272652 (executing program) 2023/03/27 12:29:02 fetching corpus: 7048, signal 236102/272652 (executing program) 2023/03/27 12:29:02 fetching corpus: 7098, signal 236425/272652 (executing program) 2023/03/27 12:29:02 fetching corpus: 7148, signal 236747/272652 (executing program) 2023/03/27 12:29:02 fetching corpus: 7198, signal 237059/272652 (executing program) 2023/03/27 12:29:02 fetching corpus: 7248, signal 237453/272652 (executing program) 2023/03/27 12:29:03 fetching corpus: 7298, signal 237905/272652 (executing program) 2023/03/27 12:29:03 fetching corpus: 7348, signal 238220/272653 (executing program) 2023/03/27 12:29:03 fetching corpus: 7398, signal 238601/272653 (executing program) 2023/03/27 12:29:03 fetching corpus: 7448, signal 238986/272671 (executing program) 2023/03/27 12:29:03 fetching corpus: 7498, signal 239572/272672 (executing program) 2023/03/27 12:29:03 fetching corpus: 7548, signal 240129/272677 (executing program) 2023/03/27 12:29:03 fetching corpus: 7598, signal 240486/272683 (executing program) 2023/03/27 12:29:03 fetching corpus: 7648, signal 241299/272683 (executing program) 2023/03/27 12:29:03 fetching corpus: 7698, signal 241628/272688 (executing program) 2023/03/27 12:29:04 fetching corpus: 7748, signal 241971/272688 (executing program) 2023/03/27 12:29:04 fetching corpus: 7798, signal 242368/272689 (executing program) 2023/03/27 12:29:04 fetching corpus: 7848, signal 242763/272689 (executing program) 2023/03/27 12:29:04 fetching corpus: 7898, signal 243063/272693 (executing program) 2023/03/27 12:29:04 fetching corpus: 7948, signal 243394/272693 (executing program) 2023/03/27 12:29:04 fetching corpus: 7998, signal 243850/272693 (executing program) 2023/03/27 12:29:04 fetching corpus: 8048, signal 244160/272693 (executing program) 2023/03/27 12:29:04 fetching corpus: 8098, signal 244452/272697 (executing program) 2023/03/27 12:29:04 fetching corpus: 8148, signal 244783/272697 (executing program) 2023/03/27 12:29:05 fetching corpus: 8198, signal 245086/272697 (executing program) 2023/03/27 12:29:05 fetching corpus: 8248, signal 245484/272697 (executing program) 2023/03/27 12:29:05 fetching corpus: 8298, signal 246105/272699 (executing program) 2023/03/27 12:29:05 fetching corpus: 8348, signal 246663/272704 (executing program) 2023/03/27 12:29:05 fetching corpus: 8398, signal 247100/272704 (executing program) 2023/03/27 12:29:05 fetching corpus: 8448, signal 247599/272706 (executing program) 2023/03/27 12:29:05 fetching corpus: 8498, signal 247918/272706 (executing program) 2023/03/27 12:29:05 fetching corpus: 8548, signal 248225/272707 (executing program) 2023/03/27 12:29:05 fetching corpus: 8598, signal 248649/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8648, signal 248983/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8698, signal 249223/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8748, signal 249552/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8798, signal 249945/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8848, signal 250367/272707 (executing program) 2023/03/27 12:29:06 fetching corpus: 8898, signal 250920/272708 (executing program) 2023/03/27 12:29:06 fetching corpus: 8948, signal 251360/272723 (executing program) 2023/03/27 12:29:06 fetching corpus: 8998, signal 251702/272723 (executing program) 2023/03/27 12:29:06 fetching corpus: 9048, signal 252036/272723 (executing program) 2023/03/27 12:29:07 fetching corpus: 9098, signal 252288/272723 (executing program) 2023/03/27 12:29:07 fetching corpus: 9148, signal 252727/272723 (executing program) 2023/03/27 12:29:07 fetching corpus: 9198, signal 252987/272723 (executing program) 2023/03/27 12:29:07 fetching corpus: 9248, signal 253279/272726 (executing program) 2023/03/27 12:29:07 fetching corpus: 9298, signal 253710/272726 (executing program) 2023/03/27 12:29:07 fetching corpus: 9348, signal 254190/272726 (executing program) 2023/03/27 12:29:07 fetching corpus: 9398, signal 254505/272726 (executing program) 2023/03/27 12:29:07 fetching corpus: 9448, signal 254955/272726 (executing program) 2023/03/27 12:29:07 fetching corpus: 9498, signal 255164/272727 (executing program) 2023/03/27 12:29:07 fetching corpus: 9548, signal 255432/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9598, signal 255818/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9648, signal 256057/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9698, signal 256256/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9748, signal 256586/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9798, signal 256759/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9848, signal 257099/272727 (executing program) 2023/03/27 12:29:08 fetching corpus: 9898, signal 257526/272729 (executing program) 2023/03/27 12:29:08 fetching corpus: 9948, signal 258009/272729 (executing program) 2023/03/27 12:29:08 fetching corpus: 9998, signal 258417/272729 (executing program) 2023/03/27 12:29:09 fetching corpus: 10048, signal 258776/272729 (executing program) 2023/03/27 12:29:09 fetching corpus: 10098, signal 259184/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10148, signal 259507/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10198, signal 259875/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10248, signal 260201/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10298, signal 260459/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10348, signal 260728/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10398, signal 261007/272744 (executing program) 2023/03/27 12:29:09 fetching corpus: 10448, signal 261418/272744 (executing program) 2023/03/27 12:29:10 fetching corpus: 10498, signal 261721/272746 (executing program) 2023/03/27 12:29:10 fetching corpus: 10548, signal 262083/272746 (executing program) 2023/03/27 12:29:10 fetching corpus: 10598, signal 262361/272747 (executing program) 2023/03/27 12:29:10 fetching corpus: 10648, signal 262619/272747 (executing program) 2023/03/27 12:29:10 fetching corpus: 10698, signal 263100/272747 (executing program) 2023/03/27 12:29:10 fetching corpus: 10748, signal 263467/272747 (executing program) 2023/03/27 12:29:10 fetching corpus: 10798, signal 263797/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 10848, signal 264181/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 10898, signal 264397/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 10948, signal 264701/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 10998, signal 264979/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 11048, signal 265448/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 11098, signal 265697/272747 (executing program) 2023/03/27 12:29:11 fetching corpus: 11148, signal 266072/272751 (executing program) 2023/03/27 12:29:11 fetching corpus: 11198, signal 266315/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11248, signal 266706/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11298, signal 266963/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11348, signal 267675/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11398, signal 267971/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11448, signal 268205/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11498, signal 268506/272752 (executing program) 2023/03/27 12:29:12 fetching corpus: 11548, signal 268755/272754 (executing program) 2023/03/27 12:29:13 fetching corpus: 11598, signal 269107/272754 (executing program) 2023/03/27 12:29:13 fetching corpus: 11648, signal 269340/272756 (executing program) 2023/03/27 12:29:13 fetching corpus: 11685, signal 269511/272756 (executing program) 2023/03/27 12:29:13 fetching corpus: 11685, signal 269511/272756 (executing program) 2023/03/27 12:29:16 starting 8 fuzzer processes 12:29:16 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 12:29:16 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{}, {@subsystem='blkio'}]}) 12:29:16 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 12:29:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105442, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 12:29:16 executing program 4: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 82.738796] audit: type=1400 audit(1679920156.118:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:29:16 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 12:29:16 executing program 5: syz_emit_ethernet(0xa6, &(0x7f0000000380)={@random="e59d5193649e", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x70, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xc, "f14a2b6a61f1fa93ffbb74ea1402aaeb089c121c7685e148a4b7072b21bb267a51b7bb74e2491cb846e3cf6ab3ef6ef3a0c4d90231d54d09fa841520b265dc26f889d29e24534e56963916c27eec7255c5988b3af9fb51f9f4bc760843b9"}]}}}}}}, 0x0) 12:29:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 84.110534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.112297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.113862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.115441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.116941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.118349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.119578] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.121025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.122949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.123850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.125076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.126160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.127111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.128345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.129416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.130430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.132047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.132956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.133952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.134939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.136161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.136881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.137058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.138483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.148953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.150373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.151443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.151797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.156099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.158166] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.161577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.163115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.164142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.165284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.166255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.167263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.168162] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.169658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.170821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.172057] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.173423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.173664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.174529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.175227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.177081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.179550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.180740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.208014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.214555] Bluetooth: hci5: command 0x0409 tx timeout [ 86.215485] Bluetooth: hci7: command 0x0409 tx timeout [ 86.216277] Bluetooth: hci2: command 0x0409 tx timeout [ 86.217011] Bluetooth: hci0: command 0x0409 tx timeout [ 86.277789] Bluetooth: hci6: command 0x0409 tx timeout [ 86.278562] Bluetooth: hci3: command 0x0409 tx timeout [ 86.279273] Bluetooth: hci4: command 0x0409 tx timeout [ 86.279989] Bluetooth: hci1: command 0x0409 tx timeout [ 88.261780] Bluetooth: hci0: command 0x041b tx timeout [ 88.262172] Bluetooth: hci2: command 0x041b tx timeout [ 88.262531] Bluetooth: hci7: command 0x041b tx timeout [ 88.262925] Bluetooth: hci5: command 0x041b tx timeout [ 88.325737] Bluetooth: hci1: command 0x041b tx timeout [ 88.326158] Bluetooth: hci4: command 0x041b tx timeout [ 88.326503] Bluetooth: hci3: command 0x041b tx timeout [ 88.326878] Bluetooth: hci6: command 0x041b tx timeout [ 90.309938] Bluetooth: hci5: command 0x040f tx timeout [ 90.311405] Bluetooth: hci7: command 0x040f tx timeout [ 90.312139] Bluetooth: hci2: command 0x040f tx timeout [ 90.312837] Bluetooth: hci0: command 0x040f tx timeout [ 90.373795] Bluetooth: hci6: command 0x040f tx timeout [ 90.374527] Bluetooth: hci3: command 0x040f tx timeout [ 90.375263] Bluetooth: hci4: command 0x040f tx timeout [ 90.375963] Bluetooth: hci1: command 0x040f tx timeout [ 92.357782] Bluetooth: hci0: command 0x0419 tx timeout [ 92.358207] Bluetooth: hci2: command 0x0419 tx timeout [ 92.358588] Bluetooth: hci7: command 0x0419 tx timeout [ 92.358989] Bluetooth: hci5: command 0x0419 tx timeout [ 92.421741] Bluetooth: hci1: command 0x0419 tx timeout [ 92.422136] Bluetooth: hci4: command 0x0419 tx timeout [ 92.422497] Bluetooth: hci3: command 0x0419 tx timeout [ 92.422879] Bluetooth: hci6: command 0x0419 tx timeout [ 126.630126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.631223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.633858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.835039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.835614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.837029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.730267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.731388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.734212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.887465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.888862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.890986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.401031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.402098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.404137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.520417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.521459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.524740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.888635] audit: type=1400 audit(1679920203.268:7): avc: denied { open } for pid=3816 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.889982] audit: type=1400 audit(1679920203.268:8): avc: denied { kernel } for pid=3816 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.947693] hrtimer: interrupt took 19727 ns [ 129.990583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.991457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.992583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.091132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.092367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.095549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.336102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.337924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.340668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.426649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.428003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.430838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.807920] syz-executor.7 (3859) used greatest stack depth: 23960 bytes left [ 130.871351] cgroup: subsys name conflicts with all [ 130.965257] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3882 'syz-executor.3' [ 130.976316] loop3: detected capacity change from 0 to 40 [ 131.013240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.014140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.016650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.079354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.080470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.084784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.089724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.090370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.092292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.144370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.145016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.146320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.455414] audit: type=1400 audit(1679920204.835:9): avc: denied { execmod } for pid=3910 comm="syz-executor.1" path="/syzkaller-testdir328281890/syzkaller.rO5by3/0/file1" dev="sda" ino=15985 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 131.675084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.675771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.677105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.691984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.692802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.694931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:30:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:05 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x622e1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x10008c, 0x0, 0x0, {r0}}, 0x20) 12:30:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x4bfa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, "49d40b7b83f736a0"}) 12:30:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105442, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 12:30:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 12:30:05 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x5dc}], 0x1}}], 0x1, 0x0) 12:30:05 executing program 4: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 12:30:05 executing program 7: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 12:30:05 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 132.015388] loop3: detected capacity change from 0 to 40 12:30:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105442, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) [ 132.156595] loop3: detected capacity change from 0 to 40 12:30:06 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:30:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 12:30:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{}, {}, {0x8, 0x1}, {}, {}, {0x8, 0x1}, {}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:30:06 executing program 7: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="222ea32f554650de624a40a2cc78901564d9fc2bf29104018986a9d46c079501e9ac8fae4a3ee7d24deabd505110ea00fe4721e8d45ee0180f2082b18de28f871668dfd35f3daeca108bccca84eb2703cad4a6553e1e9292112b97e78626ed4d319b5d2a2fbaf8ed02ee365a31d5f0387041e2d077f410d9bbfbae0a5216d9eb675b81503b29b4727eb2f8a6c6181b99d2bff4ae5fa7aee8947c2f47ba2f6434c3d4328bec89901019df1cd316a2e96800d5f06bb9a6bb4ee53643cb4802554b431b8671675f1e1716fdb94e930104eea67b4513c4adee20e7fce3178dbed0b24c7499fed63d0cccac1231c3549966848149442d948ce72973aa420349b3") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 12:30:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:06 executing program 0: openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x31, 0x33, 0x2d, 0x37]}}}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) io_submit(0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:30:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105442, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) 12:30:06 executing program 4: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 132.911246] loop3: detected capacity change from 0 to 40 [ 132.930314] tmpfs: Bad value for 'mpol' [ 132.945223] tmpfs: Bad value for 'mpol' 12:30:06 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:30:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 12:30:06 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:30:06 executing program 4: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 12:30:06 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80) [ 133.233602] audit: type=1400 audit(1679920206.612:10): avc: denied { tracepoint } for pid=3966 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:30:06 executing program 7: chdir(&(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl(0x3, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x10, 0x0, 0x87ffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="0de2b50daea052a1ba8ece9575d43fa0e0b6d56538133aa4a8a424115b0d1a11317ecf9a567b2d93248d4c00b2cafaed8bab3e194c1bf3a718e025b22430a5344f3b3b550492d9d51e59d92a6b396754597f92d8a95377f1304e70600d1c640bd450bb401efcc9bebff8e2c4ee20ca25e464887c1ace18d2efa10867836f9defa34880f0b84266fdb949845e722a78ff1660bbca15cb9cfa7e8be6c85fb7cf66541066c81a574a19a8a7c1bbfe5ae300000000000000008402ba70d207093322c12ffbbd819000000000000000"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 12:30:06 executing program 6: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0xfffffffffffffffc) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 12:30:06 executing program 3: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/vcsu\x00', 0x0) 12:30:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x104, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1100000001}, @typed={0xe8, 0x6e, 0x0, 0x0, @str='@\xdf\xdfj\x10\v\x04\xdb\xb5z\xfb\x10\xd3;\xa9\x1f\x12\xd1\x8f\x7f\xf5\x9d\xc6\xdd\xe8em\x1bD9\xed\x88)\xab\x94N-\xf0\xc6\x046S\xb6,\xeb\x93,\x11\x1e\x8d\xb8\xa1X\x80\xa0\x8d9B4c:(\x81^\xf0\x82%\xc0g\x05K\xa9*\xa5H.\x95\xf4\xe9ta\xcc\xba\xa6\xd6\xcc\xa4\xb7\x89o\xee\x00\x00\x00\x00\x00\x00\xf5\xc4x\a\xbc\xecm\xd3^\xcfr\xec\xb4L\x8e\xc6\xf3.\xbf\xafk\x9c\x83L2g\\e\xf3\xe4\xa3p\xd7MyA\xf5\tK\x89\xb5\xfar{\xad\t\x96O\xb6\'\xcc\xbc\xd7\xba\xaa\n\x18MI\x01Sx\x1b\xad\xdfD\xef\xd0\xb8\x89\xa9\xe5\xb46n~\xe8&qi|\x9eg\xe9\xff\x96\x868M\xaba3\xcc\xa5\xe2\x82j\xb5#\xd9\xbd\xf9\xfe\xa6\xa7\a\x18\xb1\xb4\xff\x98/\xa5\xad\xd9\xd2c\x84\xf1\\\x825\xe8\xde\x14\x83\xaap\x80\xcc\xb3'}]}, 0x104}], 0x1}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f00000006c0)="3d9a57c4a7662d3a2107e5", 0xb}, {&(0x7f0000000700)="5ae749969148df6cbbf7352ef2d9ea46b47d12a14a30129f13519a0f61052aeed1da8ebae330889aac356682fc1e4942d8b82e1f71c0dd22708bcb094ad6b1b5115658cee0ff8b392a9e326439d83ac4d7db2dabacd3223311d0afdeb48b600bdfd9942a195d38ba1d7251df2146792bf70c9edf622fb121b9978e7f0db09ab1835703e2fc66d81c0206d0c9d0ec6f368cee7e3fab6392061dcfd08cb949788ab0760cfcc990a8491e625807688941", 0xaf}, {&(0x7f00000007c0)="0f1591e5d06eccc2c2da4401a24bc9ebc88014cab16de69a18827c4dc111f1c802cb10c2faa5fa60eb7979093a636c1b89b72f32f6915887cde413c00a0f9af09c762f991bb9", 0x46}, {&(0x7f0000000840)="5f0f3e90fe6b073e8010e5b41654381db7cb28faa2c93f35fca0e5c3c761f297293c8a5abcb10f", 0x27}, {&(0x7f0000000880)="d93ccb1202e7dc2ead1597ae8ab1648172ef4e572743ee4b717a8caf80fc56236015a0e46afc1207c93947166fb13a523de1ff195f170c35bad774f7228e5ccabe2b3c905a367bd97b2ade14fd1253", 0x4f}], 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 133.541875] loop3: detected capacity change from 0 to 40 [ 133.584236] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{}, {}, {0x8, 0x1}, {}, {}, {0x8, 0x1}, {}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:30:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x100000001, 0x6c}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0xfffffffeffffffff, 0x100, 0x6}) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 12:30:07 executing program 6: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:30:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x3, 0x7f, 0xf4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x7d88c0be, 0x0, 0x0, 0x2, 0x48, 0x0, 0x0, 0x0, 0x55ac}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) fchmod(r2, 0x108) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0x80000001, 0x0, 0x649}) syncfs(r1) 12:30:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x3, 0x7f, 0xf4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x7d88c0be, 0x0, 0x0, 0x2, 0x48, 0x0, 0x0, 0x0, 0x55ac}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) fchmod(r2, 0x108) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0x80000001, 0x0, 0x649}) syncfs(r1) 12:30:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x3, 0x7f, 0xf4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x7d88c0be, 0x0, 0x0, 0x2, 0x48, 0x0, 0x0, 0x0, 0x55ac}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) fchmod(r2, 0x108) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0x80000001, 0x0, 0x649}) syncfs(r1) 12:30:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x3, 0x7f, 0xf4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x7d88c0be, 0x0, 0x0, 0x2, 0x48, 0x0, 0x0, 0x0, 0x55ac}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) fchmod(r2, 0x108) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000200)={'\x00', 0x80000001, 0x0, 0x649}) syncfs(r1) 12:30:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 12:30:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 135.864151] syz-executor.3: attempt to access beyond end of device [ 135.864151] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 135.865201] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 136.295513] loop3: detected capacity change from 0 to 40 12:30:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getgid() fork() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)) 12:30:09 executing program 6: r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 12:30:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{}, {}, {0x8, 0x1}, {}, {}, {0x8, 0x1}, {}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:30:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2403, 0xffffffffffffffff) 12:30:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x104, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1100000001}, @typed={0xe8, 0x6e, 0x0, 0x0, @str='@\xdf\xdfj\x10\v\x04\xdb\xb5z\xfb\x10\xd3;\xa9\x1f\x12\xd1\x8f\x7f\xf5\x9d\xc6\xdd\xe8em\x1bD9\xed\x88)\xab\x94N-\xf0\xc6\x046S\xb6,\xeb\x93,\x11\x1e\x8d\xb8\xa1X\x80\xa0\x8d9B4c:(\x81^\xf0\x82%\xc0g\x05K\xa9*\xa5H.\x95\xf4\xe9ta\xcc\xba\xa6\xd6\xcc\xa4\xb7\x89o\xee\x00\x00\x00\x00\x00\x00\xf5\xc4x\a\xbc\xecm\xd3^\xcfr\xec\xb4L\x8e\xc6\xf3.\xbf\xafk\x9c\x83L2g\\e\xf3\xe4\xa3p\xd7MyA\xf5\tK\x89\xb5\xfar{\xad\t\x96O\xb6\'\xcc\xbc\xd7\xba\xaa\n\x18MI\x01Sx\x1b\xad\xdfD\xef\xd0\xb8\x89\xa9\xe5\xb46n~\xe8&qi|\x9eg\xe9\xff\x96\x868M\xaba3\xcc\xa5\xe2\x82j\xb5#\xd9\xbd\xf9\xfe\xa6\xa7\a\x18\xb1\xb4\xff\x98/\xa5\xad\xd9\xd2c\x84\xf1\\\x825\xe8\xde\x14\x83\xaap\x80\xcc\xb3'}]}, 0x104}], 0x1}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f00000006c0)="3d9a57c4a7662d3a2107e5", 0xb}, {&(0x7f0000000700)="5ae749969148df6cbbf7352ef2d9ea46b47d12a14a30129f13519a0f61052aeed1da8ebae330889aac356682fc1e4942d8b82e1f71c0dd22708bcb094ad6b1b5115658cee0ff8b392a9e326439d83ac4d7db2dabacd3223311d0afdeb48b600bdfd9942a195d38ba1d7251df2146792bf70c9edf622fb121b9978e7f0db09ab1835703e2fc66d81c0206d0c9d0ec6f368cee7e3fab6392061dcfd08cb949788ab0760cfcc990a8491e625807688941", 0xaf}, {&(0x7f00000007c0)="0f1591e5d06eccc2c2da4401a24bc9ebc88014cab16de69a18827c4dc111f1c802cb10c2faa5fa60eb7979093a636c1b89b72f32f6915887cde413c00a0f9af09c762f991bb9", 0x46}, {&(0x7f0000000840)="5f0f3e90fe6b073e8010e5b41654381db7cb28faa2c93f35fca0e5c3c761f297293c8a5abcb10f", 0x27}, {&(0x7f0000000880)="d93ccb1202e7dc2ead1597ae8ab1648172ef4e572743ee4b717a8caf80fc56236015a0e46afc1207c93947166fb13a523de1ff195f170c35bad774f7228e5ccabe2b3c905a367bd97b2ade14fd1253", 0x4f}], 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 136.307446] audit: type=1400 audit(1679920209.687:11): avc: denied { write } for pid=4070 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:30:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 136.347299] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "af2f1a9317bc6f"}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r8, r0, 0x0, 0x100000) 12:30:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@local, 0x49}) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80800) 12:30:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{}, {}, {0x8, 0x1}, {}, {}, {0x8, 0x1}, {}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 136.421182] syz-executor.3: attempt to access beyond end of device [ 136.421182] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.422148] Buffer I/O error on dev loop3, logical block 10, lost async page write 12:30:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x104, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1100000001}, @typed={0xe8, 0x6e, 0x0, 0x0, @str='@\xdf\xdfj\x10\v\x04\xdb\xb5z\xfb\x10\xd3;\xa9\x1f\x12\xd1\x8f\x7f\xf5\x9d\xc6\xdd\xe8em\x1bD9\xed\x88)\xab\x94N-\xf0\xc6\x046S\xb6,\xeb\x93,\x11\x1e\x8d\xb8\xa1X\x80\xa0\x8d9B4c:(\x81^\xf0\x82%\xc0g\x05K\xa9*\xa5H.\x95\xf4\xe9ta\xcc\xba\xa6\xd6\xcc\xa4\xb7\x89o\xee\x00\x00\x00\x00\x00\x00\xf5\xc4x\a\xbc\xecm\xd3^\xcfr\xec\xb4L\x8e\xc6\xf3.\xbf\xafk\x9c\x83L2g\\e\xf3\xe4\xa3p\xd7MyA\xf5\tK\x89\xb5\xfar{\xad\t\x96O\xb6\'\xcc\xbc\xd7\xba\xaa\n\x18MI\x01Sx\x1b\xad\xdfD\xef\xd0\xb8\x89\xa9\xe5\xb46n~\xe8&qi|\x9eg\xe9\xff\x96\x868M\xaba3\xcc\xa5\xe2\x82j\xb5#\xd9\xbd\xf9\xfe\xa6\xa7\a\x18\xb1\xb4\xff\x98/\xa5\xad\xd9\xd2c\x84\xf1\\\x825\xe8\xde\x14\x83\xaap\x80\xcc\xb3'}]}, 0x104}], 0x1}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f00000006c0)="3d9a57c4a7662d3a2107e5", 0xb}, {&(0x7f0000000700)="5ae749969148df6cbbf7352ef2d9ea46b47d12a14a30129f13519a0f61052aeed1da8ebae330889aac356682fc1e4942d8b82e1f71c0dd22708bcb094ad6b1b5115658cee0ff8b392a9e326439d83ac4d7db2dabacd3223311d0afdeb48b600bdfd9942a195d38ba1d7251df2146792bf70c9edf622fb121b9978e7f0db09ab1835703e2fc66d81c0206d0c9d0ec6f368cee7e3fab6392061dcfd08cb949788ab0760cfcc990a8491e625807688941", 0xaf}, {&(0x7f00000007c0)="0f1591e5d06eccc2c2da4401a24bc9ebc88014cab16de69a18827c4dc111f1c802cb10c2faa5fa60eb7979093a636c1b89b72f32f6915887cde413c00a0f9af09c762f991bb9", 0x46}, {&(0x7f0000000840)="5f0f3e90fe6b073e8010e5b41654381db7cb28faa2c93f35fca0e5c3c761f297293c8a5abcb10f", 0x27}, {&(0x7f0000000880)="d93ccb1202e7dc2ead1597ae8ab1648172ef4e572743ee4b717a8caf80fc56236015a0e46afc1207c93947166fb13a523de1ff195f170c35bad774f7228e5ccabe2b3c905a367bd97b2ade14fd1253", 0x4f}], 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:09 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000001580)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "281030", 0x10, 0x3a, 0x0, @private2, @local, {[], @ni={0x8c}}}}}}, 0x0) [ 136.556553] loop3: detected capacity change from 0 to 40 [ 136.579617] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:09 executing program 2: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) [ 136.714306] syz-executor.3: attempt to access beyond end of device [ 136.714306] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.715255] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 136.864298] syz-executor.4 (4063) used greatest stack depth: 23920 bytes left 12:30:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x104, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1100000001}, @typed={0xe8, 0x6e, 0x0, 0x0, @str='@\xdf\xdfj\x10\v\x04\xdb\xb5z\xfb\x10\xd3;\xa9\x1f\x12\xd1\x8f\x7f\xf5\x9d\xc6\xdd\xe8em\x1bD9\xed\x88)\xab\x94N-\xf0\xc6\x046S\xb6,\xeb\x93,\x11\x1e\x8d\xb8\xa1X\x80\xa0\x8d9B4c:(\x81^\xf0\x82%\xc0g\x05K\xa9*\xa5H.\x95\xf4\xe9ta\xcc\xba\xa6\xd6\xcc\xa4\xb7\x89o\xee\x00\x00\x00\x00\x00\x00\xf5\xc4x\a\xbc\xecm\xd3^\xcfr\xec\xb4L\x8e\xc6\xf3.\xbf\xafk\x9c\x83L2g\\e\xf3\xe4\xa3p\xd7MyA\xf5\tK\x89\xb5\xfar{\xad\t\x96O\xb6\'\xcc\xbc\xd7\xba\xaa\n\x18MI\x01Sx\x1b\xad\xdfD\xef\xd0\xb8\x89\xa9\xe5\xb46n~\xe8&qi|\x9eg\xe9\xff\x96\x868M\xaba3\xcc\xa5\xe2\x82j\xb5#\xd9\xbd\xf9\xfe\xa6\xa7\a\x18\xb1\xb4\xff\x98/\xa5\xad\xd9\xd2c\x84\xf1\\\x825\xe8\xde\x14\x83\xaap\x80\xcc\xb3'}]}, 0x104}], 0x1}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f00000006c0)="3d9a57c4a7662d3a2107e5", 0xb}, {&(0x7f0000000700)="5ae749969148df6cbbf7352ef2d9ea46b47d12a14a30129f13519a0f61052aeed1da8ebae330889aac356682fc1e4942d8b82e1f71c0dd22708bcb094ad6b1b5115658cee0ff8b392a9e326439d83ac4d7db2dabacd3223311d0afdeb48b600bdfd9942a195d38ba1d7251df2146792bf70c9edf622fb121b9978e7f0db09ab1835703e2fc66d81c0206d0c9d0ec6f368cee7e3fab6392061dcfd08cb949788ab0760cfcc990a8491e625807688941", 0xaf}, {&(0x7f00000007c0)="0f1591e5d06eccc2c2da4401a24bc9ebc88014cab16de69a18827c4dc111f1c802cb10c2faa5fa60eb7979093a636c1b89b72f32f6915887cde413c00a0f9af09c762f991bb9", 0x46}, {&(0x7f0000000840)="5f0f3e90fe6b073e8010e5b41654381db7cb28faa2c93f35fca0e5c3c761f297293c8a5abcb10f", 0x27}, {&(0x7f0000000880)="d93ccb1202e7dc2ead1597ae8ab1648172ef4e572743ee4b717a8caf80fc56236015a0e46afc1207c93947166fb13a523de1ff195f170c35bad774f7228e5ccabe2b3c905a367bd97b2ade14fd1253", 0x4f}], 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "af2f1a9317bc6f"}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r8, r0, 0x0, 0x100000) 12:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) 12:30:10 executing program 0: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "82a35ce13c78956e8fb76ce1ecb4ce00881c9af43ad3f88b2eef46bec473a6dfa24c73f7b8a5155e6fd952f629595aea390d224eb7e11ffe779e98e91ea942efd7c7062c94d1ca64e9c276915d7e76f45b03e72efccb0b54e850fef47f386eff0aa484c8838d222aa21dd2e8a923fff0021f3c5c2e5f0c345ea8c9d660b25fd1ecec4ec737f6c701702d07f4add95fbfa8b72f913b5a17b132555c94fedc1990bf7d9e7cfe79696b217ad7299d1f96cde69d28d4e70e7e1a321d9aeeade8b11f18f3cd33f9cb7724a9302d812530959da85731fea67d5b6b9f467a9067377551b95a9d10370ab70a1deb85a9d99956c7b9eb7fb2a281faae30ad2a49965415fe049f0b686a647b2a67d0f69426d104d274d12b06634c207c85f4971f7612608b6ba109eff3b1c645b3a3f1930a84473d1a36589ba11658c63857c89b2468b6c7fe6ef6343a3fafa583f0354b40d18c433cc9b5fb6b7e4c2cbde79dd9d22df0cf2b34bb259d4e8c58f45df640149e6abc80f6a8fdb6ddfa4dea6c0e47ac80627a1ffde5c68693f72607e2ed26f4b216f826d9d241bf343b42c96af8de1dfebab80a7df223ac8282e2ae8cda988346ed6f5c654c8b3faaafc87d77113528dc12a316333fe0b2445c24c7060f8fe3eb7ae28088870bbb6834f4dab8db78fa3c985d5f80a948cd40d72095579482eb44caa253c29fec12e0ae2150a6590c7165b71ef8242d8b00381614038470dbd42fa7a50ad04c9beae03d821114c6fa4706193f5a8e89509991a2514ea22cadbd182dd083d71102d2741fcf28d6e019774bb9c26b38785aba7f0c2e83592767f1978285d5a1f7b878a06e89b06c6800c80e7e0ee799abf17401ecdce329c98a8da12d78ebc629f6f995dabb483b1cbbb4ba7e0c08f3ed61a2cc3c69263c6338a1076b9b88414c9da8a6926fc5a0cc0cd037a1eec02d0666138a99240440fb565c93f215bcf1aceeeeb7d66b32ad8159d1f146f814e02dcf1962d552e65060ba5828cd14c353906d3fbe78bbcd90dd704142bc67cfcf50be018369a421e2ac895259fc40158e12e5a2e4f20a75f1ec935f05d4891ff13e9d667b4bcf9b27d0f72c08339dbb20f8149a7e5249319d721dc4854fbf98d80445666105e7b33e95ec2bdca4c2978b8d2fcdf4fd4297c93294e5336ae62a21e8490d897f3cbbad7fb9b3ce1272adebea1bdbb52e3ddbaea2bebb06968725e00a621df3cbd559a7018fd2cce1f3e0129f0f3e947d72d07b483f9ced2c981af5b51ca7bfdb8e5f39ce263ffbf79843618e8f77fb9275c1efd887a058ce6a097f7586dc574c165ffaeb0ddd5c7bdeb7762972e45fb7560ca119ce834c631d4a7817493d7b10cac929ed95f83baec6efbcdee4ac13b0bfbef4980d3bbba3ec11a819170137e5809ebab7d223583be341a11010f33cc5330e19c0c9870d1206be", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 12:30:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) close(r0) 12:30:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 12:30:10 executing program 2: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 137.269109] loop3: detected capacity change from 0 to 40 [ 137.584789] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.988147] syz-executor.3: attempt to access beyond end of device [ 137.988147] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 137.989178] Buffer I/O error on dev loop3, logical block 10, lost async page write 12:30:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) 12:30:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "af2f1a9317bc6f"}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r8, r0, 0x0, 0x100000) 12:30:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 12:30:11 executing program 0: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 2: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 3: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) close(r0) 12:30:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 12:30:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) 12:30:11 executing program 3: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "82a35ce13c78956e8fb76ce1ecb4ce00881c9af43ad3f88b2eef46bec473a6dfa24c73f7b8a5155e6fd952f629595aea390d224eb7e11ffe779e98e91ea942efd7c7062c94d1ca64e9c276915d7e76f45b03e72efccb0b54e850fef47f386eff0aa484c8838d222aa21dd2e8a923fff0021f3c5c2e5f0c345ea8c9d660b25fd1ecec4ec737f6c701702d07f4add95fbfa8b72f913b5a17b132555c94fedc1990bf7d9e7cfe79696b217ad7299d1f96cde69d28d4e70e7e1a321d9aeeade8b11f18f3cd33f9cb7724a9302d812530959da85731fea67d5b6b9f467a9067377551b95a9d10370ab70a1deb85a9d99956c7b9eb7fb2a281faae30ad2a49965415fe049f0b686a647b2a67d0f69426d104d274d12b06634c207c85f4971f7612608b6ba109eff3b1c645b3a3f1930a84473d1a36589ba11658c63857c89b2468b6c7fe6ef6343a3fafa583f0354b40d18c433cc9b5fb6b7e4c2cbde79dd9d22df0cf2b34bb259d4e8c58f45df640149e6abc80f6a8fdb6ddfa4dea6c0e47ac80627a1ffde5c68693f72607e2ed26f4b216f826d9d241bf343b42c96af8de1dfebab80a7df223ac8282e2ae8cda988346ed6f5c654c8b3faaafc87d77113528dc12a316333fe0b2445c24c7060f8fe3eb7ae28088870bbb6834f4dab8db78fa3c985d5f80a948cd40d72095579482eb44caa253c29fec12e0ae2150a6590c7165b71ef8242d8b00381614038470dbd42fa7a50ad04c9beae03d821114c6fa4706193f5a8e89509991a2514ea22cadbd182dd083d71102d2741fcf28d6e019774bb9c26b38785aba7f0c2e83592767f1978285d5a1f7b878a06e89b06c6800c80e7e0ee799abf17401ecdce329c98a8da12d78ebc629f6f995dabb483b1cbbb4ba7e0c08f3ed61a2cc3c69263c6338a1076b9b88414c9da8a6926fc5a0cc0cd037a1eec02d0666138a99240440fb565c93f215bcf1aceeeeb7d66b32ad8159d1f146f814e02dcf1962d552e65060ba5828cd14c353906d3fbe78bbcd90dd704142bc67cfcf50be018369a421e2ac895259fc40158e12e5a2e4f20a75f1ec935f05d4891ff13e9d667b4bcf9b27d0f72c08339dbb20f8149a7e5249319d721dc4854fbf98d80445666105e7b33e95ec2bdca4c2978b8d2fcdf4fd4297c93294e5336ae62a21e8490d897f3cbbad7fb9b3ce1272adebea1bdbb52e3ddbaea2bebb06968725e00a621df3cbd559a7018fd2cce1f3e0129f0f3e947d72d07b483f9ced2c981af5b51ca7bfdb8e5f39ce263ffbf79843618e8f77fb9275c1efd887a058ce6a097f7586dc574c165ffaeb0ddd5c7bdeb7762972e45fb7560ca119ce834c631d4a7817493d7b10cac929ed95f83baec6efbcdee4ac13b0bfbef4980d3bbba3ec11a819170137e5809ebab7d223583be341a11010f33cc5330e19c0c9870d1206be", "6725c7a097508a6fd94c7431ee6b7d7e471644c947ac5df9d33eab4ad1fb00aa58f6a31a50412d56093f68d0481fe3bfad9a55e09f8fb78f28c33a034240d45b6fa515929a2c4b1dd8afd5bea8c90efb29bbabcfe314baf11f6aed0b97db76ea53f2ca32c14c8a77ee63aba058717cf5435a76dce920a24896ec0c3b82696339a0e1e5cc14fc290658c9bdb0702cf78791c78f03643f534672f9be63d1bbbb490e832a16cee856c91e23dda30c0137ed264ae1fd83c8fbb31b5c6b627763689d73d13c9b80d52ba66fb0c54fe4746e11df18375805e6e4a24f7648b7badc1e80b1e97dd7fb212c3914a7562b2d5d46c1be93a6aa206ac78709c546fc114708249a8c61c9730a701c5d7a23cff86af7a1753d91f94d18a95b611f4589111b3a96e01c682a19a767b621a1526e9d62694069d1b170ab2db26e99c6a7389f98dee542173f77c24b180ae9240350925525774061b08b8386bfaa23ad38f4b0e7667477758b46f7b40ce6f95308a92b90ef1068a63cfccf346a4efd3d2344795cb7e35648422a1b7f0ccd253aaea3c71099312d9d237d9546900e39c3b0e7d15876041110034ab1e4f90715846c6b4ebbd697ff3dc006c471a712cfb4aa0284166354e1f1203ba48457cd80fc4f4b751772a732f1430c16c915c8939c49e044999116d1baa69692d40c249d460f8b18486c957c435e3ec6d3a8cc92e21260aba3e422190aaa06a40b77a4e485a3fe733ab9ec8352e36d6b8cd9f369c1986e4710b4351d85085b233baea2970fe63445f000e7aa91dc261eb1b4a371c48d6417b7796a784e514f2b6200d5c6d4a9e8dab0a9d121084b4e908215a017fc2bc25844138c9d070247db0df599f798df26602d65ae8abb3ed2f354ade024a59ddaa42c3a48060cc08c3dfc8a738d650d6b645c1b657eac29e1b9d30f35905f3ef1e39c6b09d6432fbdaae16469bd0e8158b1df539fbfbce0e75f6bd51971028f0346c4a5298ac96f82524fe895757b550274000ba7af58ce0a5b47cceeba8c38d1b5d850138818bd57093fcf6d91514cb90d3c2022dd60be0bd6e61b7f1d5baae046d4927b19a65a2d271d9dc7f06f861e61e2910b6dfa082dcea0bf93014fe71b61dbd82cbebfed6442973349a42f107ce2b621934d54de0e4107ddfe18dfc6a0116370b1d12768d8474aebc84bc7f0bac25d7838fe1ef872baf2e9099a0cd1bb2fe2d4445e83d2be59019f731a3bcc232c50e689ca2f015060856957b93c21f0429bc446cbf2e558795b0bcf8177133b3c0e6ca31ab87c6bbaf06b2339359eac0443415e7dbd23eb2dd1ddf95994b0d0460913ac6b86ceb344698b8717f60331401853ca154a03d89b6b51cf6c7aabbb9336d50ed0c6c53fb6bc9de5d299c0ce5f2be362eff182ea8a6814f128682fffe14f0a7eb0ac95539e9a4e083041391e1283403232"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 1: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "6725c7a097508a6fd94c7431ee6b7d7e471644c947ac5df9d33eab4ad1fb00aa58f6a31a50412d56093f68d0481fe3bfad9a55e09f8fb78f28c33a034240d45b6fa515929a2c4b1dd8afd5bea8c90efb29bbabcfe314baf11f6aed0b97db76ea53f2ca32c14c8a77ee63aba058717cf5435a76dce920a24896ec0c3b82696339a0e1e5cc14fc290658c9bdb0702cf78791c78f03643f534672f9be63d1bbbb490e832a16cee856c91e23dda30c0137ed264ae1fd83c8fbb31b5c6b627763689d73d13c9b80d52ba66fb0c54fe4746e11df18375805e6e4a24f7648b7badc1e80b1e97dd7fb212c3914a7562b2d5d46c1be93a6aa206ac78709c546fc114708249a8c61c9730a701c5d7a23cff86af7a1753d91f94d18a95b611f4589111b3a96e01c682a19a767b621a1526e9d62694069d1b170ab2db26e99c6a7389f98dee542173f77c24b180ae9240350925525774061b08b8386bfaa23ad38f4b0e7667477758b46f7b40ce6f95308a92b90ef1068a63cfccf346a4efd3d2344795cb7e35648422a1b7f0ccd253aaea3c71099312d9d237d9546900e39c3b0e7d15876041110034ab1e4f90715846c6b4ebbd697ff3dc006c471a712cfb4aa0284166354e1f1203ba48457cd80fc4f4b751772a732f1430c16c915c8939c49e044999116d1baa69692d40c249d460f8b18486c957c435e3ec6d3a8cc92e21260aba3e422190aaa06a40b77a4e485a3fe733ab9ec8352e36d6b8cd9f369c1986e4710b4351d85085b233baea2970fe63445f000e7aa91dc261eb1b4a371c48d6417b7796a784e514f2b6200d5c6d4a9e8dab0a9d121084b4e908215a017fc2bc25844138c9d070247db0df599f798df26602d65ae8abb3ed2f354ade024a59ddaa42c3a48060cc08c3dfc8a738d650d6b645c1b657eac29e1b9d30f35905f3ef1e39c6b09d6432fbdaae16469bd0e8158b1df539fbfbce0e75f6bd51971028f0346c4a5298ac96f82524fe895757b550274000ba7af58ce0a5b47cceeba8c38d1b5d850138818bd57093fcf6d91514cb90d3c2022dd60be0bd6e61b7f1d5baae046d4927b19a65a2d271d9dc7f06f861e61e2910b6dfa082dcea0bf93014fe71b61dbd82cbebfed6442973349a42f107ce2b621934d54de0e4107ddfe18dfc6a0116370b1d12768d8474aebc84bc7f0bac25d7838fe1ef872baf2e9099a0cd1bb2fe2d4445e83d2be59019f731a3bcc232c50e689ca2f015060856957b93c21f0429bc446cbf2e558795b0bcf8177133b3c0e6ca31ab87c6bbaf06b2339359eac0443415e7dbd23eb2dd1ddf95994b0d0460913ac6b86ceb344698b8717f60331401853ca154a03d89b6b51cf6c7aabbb9336d50ed0c6c53fb6bc9de5d299c0ce5f2be362eff182ea8a6814f128682fffe14f0a7eb0ac95539e9a4e083041391e1283403232"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 0: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "82a35ce13c78956e8fb76ce1ecb4ce00881c9af43ad3f88b2eef46bec473a6dfa24c73f7b8a5155e6fd952f629595aea390d224eb7e11ffe779e98e91ea942efd7c7062c94d1ca64e9c276915d7e76f45b03e72efccb0b54e850fef47f386eff0aa484c8838d222aa21dd2e8a923fff0021f3c5c2e5f0c345ea8c9d660b25fd1ecec4ec737f6c701702d07f4add95fbfa8b72f913b5a17b132555c94fedc1990bf7d9e7cfe79696b217ad7299d1f96cde69d28d4e70e7e1a321d9aeeade8b11f18f3cd33f9cb7724a9302d812530959da85731fea67d5b6b9f467a9067377551b95a9d10370ab70a1deb85a9d99956c7b9eb7fb2a281faae30ad2a49965415fe049f0b686a647b2a67d0f69426d104d274d12b06634c207c85f4971f7612608b6ba109eff3b1c645b3a3f1930a84473d1a36589ba11658c63857c89b2468b6c7fe6ef6343a3fafa583f0354b40d18c433cc9b5fb6b7e4c2cbde79dd9d22df0cf2b34bb259d4e8c58f45df640149e6abc80f6a8fdb6ddfa4dea6c0e47ac80627a1ffde5c68693f72607e2ed26f4b216f826d9d241bf343b42c96af8de1dfebab80a7df223ac8282e2ae8cda988346ed6f5c654c8b3faaafc87d77113528dc12a316333fe0b2445c24c7060f8fe3eb7ae28088870bbb6834f4dab8db78fa3c985d5f80a948cd40d72095579482eb44caa253c29fec12e0ae2150a6590c7165b71ef8242d8b00381614038470dbd42fa7a50ad04c9beae03d821114c6fa4706193f5a8e89509991a2514ea22cadbd182dd083d71102d2741fcf28d6e019774bb9c26b38785aba7f0c2e83592767f1978285d5a1f7b878a06e89b06c6800c80e7e0ee799abf17401ecdce329c98a8da12d78ebc629f6f995dabb483b1cbbb4ba7e0c08f3ed61a2cc3c69263c6338a1076b9b88414c9da8a6926fc5a0cc0cd037a1eec02d0666138a99240440fb565c93f215bcf1aceeeeb7d66b32ad8159d1f146f814e02dcf1962d552e65060ba5828cd14c353906d3fbe78bbcd90dd704142bc67cfcf50be018369a421e2ac895259fc40158e12e5a2e4f20a75f1ec935f05d4891ff13e9d667b4bcf9b27d0f72c08339dbb20f8149a7e5249319d721dc4854fbf98d80445666105e7b33e95ec2bdca4c2978b8d2fcdf4fd4297c93294e5336ae62a21e8490d897f3cbbad7fb9b3ce1272adebea1bdbb52e3ddbaea2bebb06968725e00a621df3cbd559a7018fd2cce1f3e0129f0f3e947d72d07b483f9ced2c981af5b51ca7bfdb8e5f39ce263ffbf79843618e8f77fb9275c1efd887a058ce6a097f7586dc574c165ffaeb0ddd5c7bdeb7762972e45fb7560ca119ce834c631d4a7817493d7b10cac929ed95f83baec6efbcdee4ac13b0bfbef4980d3bbba3ec11a819170137e5809ebab7d223583be341a11010f33cc5330e19c0c9870d1206be", "6725c7a097508a6fd94c7431ee6b7d7e471644c947ac5df9d33eab4ad1fb00aa58f6a31a50412d56093f68d0481fe3bfad9a55e09f8fb78f28c33a034240d45b6fa515929a2c4b1dd8afd5bea8c90efb29bbabcfe314baf11f6aed0b97db76ea53f2ca32c14c8a77ee63aba058717cf5435a76dce920a24896ec0c3b82696339a0e1e5cc14fc290658c9bdb0702cf78791c78f03643f534672f9be63d1bbbb490e832a16cee856c91e23dda30c0137ed264ae1fd83c8fbb31b5c6b627763689d73d13c9b80d52ba66fb0c54fe4746e11df18375805e6e4a24f7648b7badc1e80b1e97dd7fb212c3914a7562b2d5d46c1be93a6aa206ac78709c546fc114708249a8c61c9730a701c5d7a23cff86af7a1753d91f94d18a95b611f4589111b3a96e01c682a19a767b621a1526e9d62694069d1b170ab2db26e99c6a7389f98dee542173f77c24b180ae9240350925525774061b08b8386bfaa23ad38f4b0e7667477758b46f7b40ce6f95308a92b90ef1068a63cfccf346a4efd3d2344795cb7e35648422a1b7f0ccd253aaea3c71099312d9d237d9546900e39c3b0e7d15876041110034ab1e4f90715846c6b4ebbd697ff3dc006c471a712cfb4aa0284166354e1f1203ba48457cd80fc4f4b751772a732f1430c16c915c8939c49e044999116d1baa69692d40c249d460f8b18486c957c435e3ec6d3a8cc92e21260aba3e422190aaa06a40b77a4e485a3fe733ab9ec8352e36d6b8cd9f369c1986e4710b4351d85085b233baea2970fe63445f000e7aa91dc261eb1b4a371c48d6417b7796a784e514f2b6200d5c6d4a9e8dab0a9d121084b4e908215a017fc2bc25844138c9d070247db0df599f798df26602d65ae8abb3ed2f354ade024a59ddaa42c3a48060cc08c3dfc8a738d650d6b645c1b657eac29e1b9d30f35905f3ef1e39c6b09d6432fbdaae16469bd0e8158b1df539fbfbce0e75f6bd51971028f0346c4a5298ac96f82524fe895757b550274000ba7af58ce0a5b47cceeba8c38d1b5d850138818bd57093fcf6d91514cb90d3c2022dd60be0bd6e61b7f1d5baae046d4927b19a65a2d271d9dc7f06f861e61e2910b6dfa082dcea0bf93014fe71b61dbd82cbebfed6442973349a42f107ce2b621934d54de0e4107ddfe18dfc6a0116370b1d12768d8474aebc84bc7f0bac25d7838fe1ef872baf2e9099a0cd1bb2fe2d4445e83d2be59019f731a3bcc232c50e689ca2f015060856957b93c21f0429bc446cbf2e558795b0bcf8177133b3c0e6ca31ab87c6bbaf06b2339359eac0443415e7dbd23eb2dd1ddf95994b0d0460913ac6b86ceb344698b8717f60331401853ca154a03d89b6b51cf6c7aabbb9336d50ed0c6c53fb6bc9de5d299c0ce5f2be362eff182ea8a6814f128682fffe14f0a7eb0ac95539e9a4e083041391e1283403232"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) close(r0) [ 138.990167] syz-executor.7 (4131) used greatest stack depth: 23744 bytes left 12:30:12 executing program 1: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "6725c7a097508a6fd94c7431ee6b7d7e471644c947ac5df9d33eab4ad1fb00aa58f6a31a50412d56093f68d0481fe3bfad9a55e09f8fb78f28c33a034240d45b6fa515929a2c4b1dd8afd5bea8c90efb29bbabcfe314baf11f6aed0b97db76ea53f2ca32c14c8a77ee63aba058717cf5435a76dce920a24896ec0c3b82696339a0e1e5cc14fc290658c9bdb0702cf78791c78f03643f534672f9be63d1bbbb490e832a16cee856c91e23dda30c0137ed264ae1fd83c8fbb31b5c6b627763689d73d13c9b80d52ba66fb0c54fe4746e11df18375805e6e4a24f7648b7badc1e80b1e97dd7fb212c3914a7562b2d5d46c1be93a6aa206ac78709c546fc114708249a8c61c9730a701c5d7a23cff86af7a1753d91f94d18a95b611f4589111b3a96e01c682a19a767b621a1526e9d62694069d1b170ab2db26e99c6a7389f98dee542173f77c24b180ae9240350925525774061b08b8386bfaa23ad38f4b0e7667477758b46f7b40ce6f95308a92b90ef1068a63cfccf346a4efd3d2344795cb7e35648422a1b7f0ccd253aaea3c71099312d9d237d9546900e39c3b0e7d15876041110034ab1e4f90715846c6b4ebbd697ff3dc006c471a712cfb4aa0284166354e1f1203ba48457cd80fc4f4b751772a732f1430c16c915c8939c49e044999116d1baa69692d40c249d460f8b18486c957c435e3ec6d3a8cc92e21260aba3e422190aaa06a40b77a4e485a3fe733ab9ec8352e36d6b8cd9f369c1986e4710b4351d85085b233baea2970fe63445f000e7aa91dc261eb1b4a371c48d6417b7796a784e514f2b6200d5c6d4a9e8dab0a9d121084b4e908215a017fc2bc25844138c9d070247db0df599f798df26602d65ae8abb3ed2f354ade024a59ddaa42c3a48060cc08c3dfc8a738d650d6b645c1b657eac29e1b9d30f35905f3ef1e39c6b09d6432fbdaae16469bd0e8158b1df539fbfbce0e75f6bd51971028f0346c4a5298ac96f82524fe895757b550274000ba7af58ce0a5b47cceeba8c38d1b5d850138818bd57093fcf6d91514cb90d3c2022dd60be0bd6e61b7f1d5baae046d4927b19a65a2d271d9dc7f06f861e61e2910b6dfa082dcea0bf93014fe71b61dbd82cbebfed6442973349a42f107ce2b621934d54de0e4107ddfe18dfc6a0116370b1d12768d8474aebc84bc7f0bac25d7838fe1ef872baf2e9099a0cd1bb2fe2d4445e83d2be59019f731a3bcc232c50e689ca2f015060856957b93c21f0429bc446cbf2e558795b0bcf8177133b3c0e6ca31ab87c6bbaf06b2339359eac0443415e7dbd23eb2dd1ddf95994b0d0460913ac6b86ceb344698b8717f60331401853ca154a03d89b6b51cf6c7aabbb9336d50ed0c6c53fb6bc9de5d299c0ce5f2be362eff182ea8a6814f128682fffe14f0a7eb0ac95539e9a4e083041391e1283403232"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:12 executing program 2: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "82a35ce13c78956e8fb76ce1ecb4ce00881c9af43ad3f88b2eef46bec473a6dfa24c73f7b8a5155e6fd952f629595aea390d224eb7e11ffe779e98e91ea942efd7c7062c94d1ca64e9c276915d7e76f45b03e72efccb0b54e850fef47f386eff0aa484c8838d222aa21dd2e8a923fff0021f3c5c2e5f0c345ea8c9d660b25fd1ecec4ec737f6c701702d07f4add95fbfa8b72f913b5a17b132555c94fedc1990bf7d9e7cfe79696b217ad7299d1f96cde69d28d4e70e7e1a321d9aeeade8b11f18f3cd33f9cb7724a9302d812530959da85731fea67d5b6b9f467a9067377551b95a9d10370ab70a1deb85a9d99956c7b9eb7fb2a281faae30ad2a49965415fe049f0b686a647b2a67d0f69426d104d274d12b06634c207c85f4971f7612608b6ba109eff3b1c645b3a3f1930a84473d1a36589ba11658c63857c89b2468b6c7fe6ef6343a3fafa583f0354b40d18c433cc9b5fb6b7e4c2cbde79dd9d22df0cf2b34bb259d4e8c58f45df640149e6abc80f6a8fdb6ddfa4dea6c0e47ac80627a1ffde5c68693f72607e2ed26f4b216f826d9d241bf343b42c96af8de1dfebab80a7df223ac8282e2ae8cda988346ed6f5c654c8b3faaafc87d77113528dc12a316333fe0b2445c24c7060f8fe3eb7ae28088870bbb6834f4dab8db78fa3c985d5f80a948cd40d72095579482eb44caa253c29fec12e0ae2150a6590c7165b71ef8242d8b00381614038470dbd42fa7a50ad04c9beae03d821114c6fa4706193f5a8e89509991a2514ea22cadbd182dd083d71102d2741fcf28d6e019774bb9c26b38785aba7f0c2e83592767f1978285d5a1f7b878a06e89b06c6800c80e7e0ee799abf17401ecdce329c98a8da12d78ebc629f6f995dabb483b1cbbb4ba7e0c08f3ed61a2cc3c69263c6338a1076b9b88414c9da8a6926fc5a0cc0cd037a1eec02d0666138a99240440fb565c93f215bcf1aceeeeb7d66b32ad8159d1f146f814e02dcf1962d552e65060ba5828cd14c353906d3fbe78bbcd90dd704142bc67cfcf50be018369a421e2ac895259fc40158e12e5a2e4f20a75f1ec935f05d4891ff13e9d667b4bcf9b27d0f72c08339dbb20f8149a7e5249319d721dc4854fbf98d80445666105e7b33e95ec2bdca4c2978b8d2fcdf4fd4297c93294e5336ae62a21e8490d897f3cbbad7fb9b3ce1272adebea1bdbb52e3ddbaea2bebb06968725e00a621df3cbd559a7018fd2cce1f3e0129f0f3e947d72d07b483f9ced2c981af5b51ca7bfdb8e5f39ce263ffbf79843618e8f77fb9275c1efd887a058ce6a097f7586dc574c165ffaeb0ddd5c7bdeb7762972e45fb7560ca119ce834c631d4a7817493d7b10cac929ed95f83baec6efbcdee4ac13b0bfbef4980d3bbba3ec11a819170137e5809ebab7d223583be341a11010f33cc5330e19c0c9870d1206be", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:12 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 12:30:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) close(r0) 12:30:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000000000)={0x77359400}, 0x10) 12:30:12 executing program 3: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:12 executing program 4: add_key(&(0x7f0000000900)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 12:30:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "af2f1a9317bc6f"}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r8, r0, 0x0, 0x100000) 12:30:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181041, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x17000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:30:12 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 12:30:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 12:30:12 executing program 1: syz_io_uring_setup(0x3fb, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000003140)={0x1, 0x8f3, @start={0x0, 0x0, "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", "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"}, [0x6f3c, 0x598e, 0x4, 0x40, 0x8000, 0x7d21, 0x400, 0x2, 0x0, 0xfffffffffffffff7, 0x800, 0x9, 0x1ff, 0xe39, 0x4, 0x9, 0x20, 0x40, 0x9, 0xfff, 0x0, 0x48, 0x7, 0xcb89, 0x3, 0x7, 0x84, 0x7, 0x8, 0x3, 0x1, 0x80000000, 0x7f, 0x1000, 0x8dec, 0x1, 0x5, 0x4cc, 0x7fffffff, 0x8001, 0x4, 0x0, 0x3ff, 0x10000, 0x200, 0x6, 0x8, 0xda, 0x5, 0x3a3, 0xe6, 0x63bf, 0x101, 0x1ff, 0x2, 0x4, 0x7, 0x6, 0x5, 0x100000, 0x8, 0x9, 0x10000, 0xf78]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000003b80)={r1, 0x0, 0x1ff, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r4, 0x1, 0x2) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f00000030c0)={'trans=unix,', {[{@privport}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 12:30:12 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 12:30:12 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0xff22}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 12:30:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 12:30:12 executing program 0: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 12:30:13 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 12:30:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65902eae3ec94454, 0x401a012, r1, 0x0) ftruncate(r0, 0x9) 12:30:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x481, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 12:30:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 12:30:13 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, {}, &(0x7f0000000340)=""/148, 0x94, &(0x7f0000000440)=""/1, 0x0}, 0x58) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:30:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000019300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) dup2(r1, r0) [ 140.130097] syz-executor.5 (4179) used greatest stack depth: 23448 bytes left 12:30:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) 12:30:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x481, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 12:30:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 12:30:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 12:30:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000019300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) dup2(r1, r0) 12:30:13 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, {}, &(0x7f0000000340)=""/148, 0x94, &(0x7f0000000440)=""/1, 0x0}, 0x58) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:30:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000019300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) dup2(r1, r0) 12:30:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x481, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 12:30:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) 12:30:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 12:30:13 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 12:30:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000019300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) dup2(r1, r0) 12:30:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x481, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 12:30:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x4, 0x0, 0x6) 12:30:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1}, 0x20) 12:30:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='virtiofs\x00', 0x10400, &(0x7f00000005c0)='{&%:+\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="400000be8028ef370ecb002e2f66696c65310000000000000000"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='hugetlbfs\x00') r4 = epoll_create1(0x0) dup2(r4, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:30:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x300, 0x0) 12:30:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0x4, 0x0, 0x0) [ 140.687936] general protection fault, probably for non-canonical address 0xdffffc0004000048: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 140.688888] KASAN: probably user-memory-access in range [0x0000000020000240-0x0000000020000247] [ 140.689583] CPU: 1 PID: 4263 Comm: syz-executor.1 Not tainted 6.3.0-rc3-next-20230327 #1 [ 140.690222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.690965] RIP: 0010:do_iter_read+0x481/0x750 [ 140.693393] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 140.696108] RSP: 0018:ffff88804380fc78 EFLAGS: 00010216 [ 140.696515] RAX: 0000000020000240 RBX: ffff88804380fd60 RCX: ffffc900013f9000 [ 140.697077] RDX: 0000000004000048 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 140.697636] RBP: 000000000000009b R08: 0000000000000007 R09: 0000000000000000 [ 140.698234] R10: 000000000000009b R11: 0000000000000001 R12: ffff888016208000 [ 140.698889] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 140.699545] FS: 00007fb0fdcc5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 140.700286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.700829] CR2: 00007fb10085eaf8 CR3: 00000000099a6000 CR4: 0000000000350ee0 [ 140.701496] Call Trace: [ 140.701746] [ 140.701969] ? import_iovec+0x87/0xb0 [ 140.702342] vfs_readv+0xe5/0x160 [ 140.702685] ? __pfx_vfs_readv+0x10/0x10 [ 140.703078] ? __fget_files+0x24e/0x480 [ 140.703458] ? lock_release+0x1e3/0x680 [ 140.703861] ? __fget_files+0x270/0x480 [ 140.704245] __x64_sys_preadv+0x233/0x310 [ 140.704647] ? __pfx___x64_sys_preadv+0x10/0x10 [ 140.705105] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 140.705607] do_syscall_64+0x3f/0x90 [ 140.705965] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 140.706449] RIP: 0033:0x7fb10074fb19 [ 140.706802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.708444] RSP: 002b:00007fb0fdcc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 140.709156] RAX: ffffffffffffffda RBX: 00007fb100862f60 RCX: 00007fb10074fb19 [ 140.709807] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 140.710380] RBP: 00007fb1007a9f6d R08: 0000000000000000 R09: 0000000000000000 [ 140.710921] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 140.711458] R13: 00007ffc4d4fc70f R14: 00007fb0fdcc5300 R15: 0000000000022000 [ 140.712004] [ 140.712194] Modules linked in: [ 140.712519] ---[ end trace 0000000000000000 ]--- [ 140.712892] RIP: 0010:do_iter_read+0x481/0x750 [ 140.713281] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 140.714699] RSP: 0018:ffff88804380fc78 EFLAGS: 00010216 [ 140.715119] RAX: 0000000020000240 RBX: ffff88804380fd60 RCX: ffffc900013f9000 [ 140.715691] RDX: 0000000004000048 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 140.716247] RBP: 000000000000009b R08: 0000000000000007 R09: 0000000000000000 [ 140.716812] R10: 000000000000009b R11: 0000000000000001 R12: ffff888016208000 [ 140.717375] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 140.717943] FS: 00007fb0fdcc5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 140.718571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.719042] CR2: 00007fb10085eaf8 CR3: 00000000099a6000 CR4: 0000000000350ee0 12:30:14 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, {}, &(0x7f0000000340)=""/148, 0x94, &(0x7f0000000440)=""/1, 0x0}, 0x58) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:30:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:30:14 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 12:30:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='virtiofs\x00', 0x10400, &(0x7f00000005c0)='{&%:+\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="400000be8028ef370ecb002e2f66696c65310000000000000000"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='hugetlbfs\x00') r4 = epoll_create1(0x0) dup2(r4, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 141.590328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.654587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.695828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.697141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:30:15 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='virtiofs\x00', 0x10400, &(0x7f00000005c0)='{&%:+\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="400000be8028ef370ecb002e2f66696c65310000000000000000"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='hugetlbfs\x00') r4 = epoll_create1(0x0) dup2(r4, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 141.853253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.880724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:30:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 142.104453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.117662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:30:15 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, {}, &(0x7f0000000340)=""/148, 0x94, &(0x7f0000000440)=""/1, 0x0}, 0x58) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:30:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:15 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='virtiofs\x00', 0x10400, &(0x7f00000005c0)='{&%:+\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="400000be8028ef370ecb002e2f66696c65310000000000000000"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='hugetlbfs\x00') r4 = epoll_create1(0x0) dup2(r4, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:30:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="f011010807ff"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x0, @any, 0x3ff, 0x2}, @isdn={0x22, 0xff, 0x1}, @ax25={0x3, @default, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x80d, 0x0, 0x200, 0x88eb, 0x20}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file1/file0\x00', 0x500082, 0xc1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x20000, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x1) unlinkat(r5, &(0x7f0000000300)='./file1\x00', 0x200) sendfile(r2, r4, 0x0, 0x10000027f) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) signalfd4(r3, &(0x7f0000000380)={[0xd6e]}, 0x8, 0x800) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x5248, 0x4) 12:30:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 12:30:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 12:30:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 143.048711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.059300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:30:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:30:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0xe2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:30:16 executing program 0: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 12:30:16 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 143.293050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.294576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:30:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xc42cfaac0a954e4a, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000057b09d620000007e0000000800030020c0f9c46fb8193f4f5f80d5c3845892d2c58995620103da972233a1f616661db68055a7d69df3e1162cf2c51b9481b5f17ed9785405fe39b7b5", @ANYRES32=0x0, @ANYBLOB="046c40"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060007001100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00080211000059320f02aee94bddf1e3230000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:30:16 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:30:16 executing program 0: timer_create(0xa, 0x0, 0x0) 12:30:16 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, 0x0, 0x6}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 143.574785] loop1: detected capacity change from 0 to 40 [ 143.616066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:30:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000000)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@private}, 0x0, @in=@broadcast}}, 0xe8) 12:30:17 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}, 0x22}]}) [ 143.638931] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.674004] tmpfs: Bad value for 'mpol' [ 143.677093] tmpfs: Bad value for 'mpol' 12:30:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x101, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1d, 0x4) sendmmsg$inet6(r0, &(0x7f0000002e00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 12:30:17 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cubic\x00', 0x6) [ 143.825535] syz-executor.1: attempt to access beyond end of device [ 143.825535] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 143.826835] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 143.895004] loop2: detected capacity change from 0 to 40 12:30:17 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x8ac03, 0x0) 12:30:17 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) 12:30:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x84e02, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300)=0x7ff, 0x7f) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:17 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, 0x0, 0x6}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 12:30:17 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x94, 0xf2}, 0x20) 12:30:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xc5}) 12:30:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x2c}}}}]}) 12:30:17 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, @source_quench={0x2a, 0x2c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) [ 143.950025] loop1: detected capacity change from 0 to 40 12:30:17 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x6, &(0x7f0000002900)=[{&(0x7f0000000680)="97", 0x1, 0x8}, {&(0x7f0000000700)="89fe4ebcb32529c86d52be08dbd7f84ed8a8b34deaa0ca31f770c91fdfcf70762eeeea3177e0dfed90a8cbf9871bbe3d0cc1fd6337f2bf753914edc57d1cbce88346125d3ca12632c5e6567af5c7e58d1cecc6ebe8b203000c87ee8904bf", 0x5e, 0xfffffffffffffffd}, {&(0x7f0000001700)="c5", 0x1, 0x8}, {&(0x7f0000001740)="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", 0xbb7, 0xffffffffce6504d2}, {0x0, 0x0, 0x5}, {&(0x7f0000002840)='S', 0x1}], 0x0, &(0x7f00000029c0)={[{@nodots}, {@dots}, {@dots}], [{@subj_role={'subj_role', 0x3d, '!\\+{^\']*/*@-**'}}, {@subj_user={'subj_user', 0x3d, '*&)'}}]}) 12:30:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@private, {@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in, 0x0, 0x34b37ee4bde21c38}]}]}, 0x16c}}, 0x0) 12:30:17 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd(0xfffffffc) 12:30:17 executing program 0: ioprio_get$pid(0x1, 0xffffffffffffffff) 12:30:17 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() 12:30:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @mss], 0x2000000000000145) 12:30:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[], 0xfd5d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RSTAT(r1, &(0x7f0000000180)={0x4d, 0x7d, 0x0, {0x0, 0x46, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, ':*', 0xb, '[$+!t%-@,\',', 0x1, 'B', 0x5, '+]{&)'}}, 0x4d) 12:30:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 12:30:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@private, {@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in, 0x0, 0x34b37ee4bde21c38}]}]}, 0x16c}}, 0x0) 12:30:17 executing program 6: r0 = memfd_create(&(0x7f0000000100)='/d#>\xbb\xb3~\x89\xa4O{\xc3\xad *Zn\xad\x11\xf2u\xe3\xf5\xbd\x1d\xa5\xeb\xee\xeee\xf4\xaf\xf0\x81\xea|f\x1c\xe0\xc1\xd1\x19cr\xa1\x01\xc3g\x10#\xa1\xfa\xb2\xe7\xa4+\x9e\xd7\xa2\x04y\xc1\xcf-V\xc0\x18Ls\xe2I\x19:\xe7\xc6F\x96xM\x1a\x00\x00\x00\x9c*\x03\x1f\x94\x9a\xf1\xcb\xc9\xf1\x16I\x85\xc8x\xe0\xc7\xc7z\xfa\t\x85\t\xfc\xcc\v\xce\x1b\xa2\x1b\xb4+\xe7\xb4M\xf4\xa4\xef\x0eW\x7f\x13\xa9>\xcf;+-\xf1gT\xd0\xcc\xff#\x1b\xbc\xe2\x06\xdf\xc2\xcb \x149n\xf24x\xe4\x9b\xab\xf7E\x1c\xb2,\xec[|\xcc\x85{\xb3\x98\x139\xc4F\x9fE\xa7*\xa2\xc8\xa9H\xed\x9b@\x8bH\xe5\xb5\xa7\xae\x11\xa7N\x00\x00\x04\x00\x00\x00\x00\x00\x00', 0x0) lseek(r0, 0xfffffffffffffffb, 0x1) [ 144.152261] syz-executor.1: attempt to access beyond end of device [ 144.152261] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.153220] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 144.280152] syz-executor.2: attempt to access beyond end of device [ 144.280152] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.281619] Buffer I/O error on dev loop2, logical block 10, lost async page write 12:30:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x84e02, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300)=0x7ff, 0x7f) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:20 executing program 6: alarm(0x400) alarm(0x0) 12:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, 0x1a, 0x0, 0x3, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="ec2c"]}]}, 0x1c}}, 0x0) 12:30:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@private, {@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in, 0x0, 0x34b37ee4bde21c38}]}]}, 0x16c}}, 0x0) 12:30:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, 0x0, 0x6}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 12:30:20 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() 12:30:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd(0xfffffffc) 12:30:20 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() [ 147.162821] loop1: detected capacity change from 0 to 40 [ 147.165825] loop2: detected capacity change from 0 to 40 12:30:20 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x90d, 0x4) 12:30:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@private, {@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in, 0x0, 0x34b37ee4bde21c38}]}]}, 0x16c}}, 0x0) 12:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, 0x1a, 0x0, 0x3, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="ec2c"]}]}, 0x1c}}, 0x0) [ 147.328988] syz-executor.2: attempt to access beyond end of device [ 147.328988] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 147.330759] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 147.336274] syz-executor.1: attempt to access beyond end of device [ 147.336274] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 147.337724] Buffer I/O error on dev loop1, logical block 10, lost async page write 12:30:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000280)='./file0\x00') 12:30:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, 0x0, 0x6}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 147.418581] Process accounting resumed 12:30:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x84e02, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300)=0x7ff, 0x7f) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, 0x1a, 0x0, 0x3, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="ec2c"]}]}, 0x1c}}, 0x0) [ 147.461411] Process accounting resumed 12:30:20 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() 12:30:20 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() [ 147.476615] loop1: detected capacity change from 0 to 40 12:30:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5451, 0x0) 12:30:20 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x0, 0x20, [0x800, 0x9, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 147.483127] loop2: detected capacity change from 0 to 40 12:30:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000a3139d05b74513fd000508000300", @ANYRES32=r2], 0x1c}}, 0x0) [ 147.558819] syz-executor.2: attempt to access beyond end of device [ 147.558819] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 147.559756] Buffer I/O error on dev loop2, logical block 10, lost async page write 12:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, 0x1a, 0x0, 0x3, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="ec2c"]}]}, 0x1c}}, 0x0) 12:30:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) [ 147.638760] syz-executor.1: attempt to access beyond end of device [ 147.638760] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 147.639620] Buffer I/O error on dev loop1, logical block 10, lost async page write 12:30:21 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() [ 147.843842] loop2: detected capacity change from 0 to 40 12:30:21 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd(0xfffffffc) 12:30:21 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000f80)=""/251, &(0x7f0000001080)=0xfb) 12:30:21 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) r2 = socket(0x1e, 0x6, 0xffffffff) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x6, &(0x7f0000000080)=[0x0, 0x5, 0xffffffff, 0x0, 0x6, 0x736d], 0x7, 0x7, [0x4, 0xb1, 0x7, 0x400]}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000380)=""/29, &(0x7f00000003c0)=0x1d) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x180]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) fork() 12:30:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000400)) 12:30:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x84e02, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300)=0x7ff, 0x7f) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 12:30:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000a3139d05b74513fd000508000300", @ANYRES32=r2], 0x1c}}, 0x0) 12:30:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 12:30:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) [ 148.000287] audit: type=1400 audit(1679920221.380:12): avc: denied { read } for pid=4530 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 148.099350] syz-executor.2: attempt to access beyond end of device [ 148.099350] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 148.100419] Buffer I/O error on dev loop2, logical block 10, lost async page write 12:30:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000a3139d05b74513fd000508000300", @ANYRES32=r2], 0x1c}}, 0x0) 12:30:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 12:30:21 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DVD_AUTH(r0, 0x1267, &(0x7f0000000cc0)=@lsk={0x0, 0x0, "3c703b982d"}) 12:30:21 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) eventfd(0xfffffffc) 12:30:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 12:30:21 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000e80), &(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)={[{@huge_never}], [{@seclabel}]}) 12:30:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000380)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) r6 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r6, &(0x7f00000000c0)='9', 0x1, 0x8040000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000200)={0x1, @time={0x77a7, 0x3f}, 0x90, {0x3, 0xb3}, 0xd9}) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0a85322, &(0x7f0000000240)={0x7fffffff, 0x0, 'client0\x00', 0x0, "94d8106600524295", "a97d0f72cb1228c7fb3dc11fbf1629546c74ff866f0aeb312429193d08ebd556"}) 12:30:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x2, 0x12, 0xc0, 0x0, 0x8, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0x9}, 0x4000, 0x4, 0xc, 0x9, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x3, r3, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump}) 12:30:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 12:30:21 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_complete(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000240)=0x6e, 0x800) sendto$unix(r3, &(0x7f0000001300)="8c8b015b87c31a956585393a9472a085421b1ca1e007ffc1b532b5f4", 0x1c, 0x800, &(0x7f0000001340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) mknod$loop(0x0, 0xe73d0ce2c693bbfc, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000006c0)=@req={0x0, 0x140}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003ac0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001880)={&(0x7f00000013c0)=@sco, 0x80, 0x0, 0x0, &(0x7f00000039c0)=""/243, 0xf3}, 0x0, 0x0, 0x1}, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 12:30:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000a3139d05b74513fd000508000300", @ANYRES32=r2], 0x1c}}, 0x0) [ 148.275945] loop2: detected capacity change from 0 to 40 12:30:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 12:30:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 12:30:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 12:30:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x VM DIAGNOSIS: 12:30:14 Registers: info registers vcpu 0 RAX=1ffff11002527943 RBX=ffff88801293c9e8 RCX=1ffff110023c4414 RDX=dffffc0000000000 RSI=ffff888041df58d0 RDI=ffff88801293ca18 RBP=ffff888011e22070 RSP=ffff88801679f8f0 R8 =0000000000000001 R9 =0000000000000246 R10=ffffed1002cf3f0c R11=0000000000000001 R12=ffff888041df5828 R13=0000000000000000 R14=ffff888016fc7178 R15=ffff888016fc7130 RIP=ffffffff8183fa9e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556613400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f989e1ec3a4 CR3=0000000015a80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff824f8615 RDI=ffffffff87f0bdc0 RBP=ffffffff87f0bd80 RSP=ffff88804380f5c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff87f0bd80 R14=ffffffff87f0bdd0 R15=ffffffff87f0c038 RIP=ffffffff824f866d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb0fdcc5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb10085eaf8 CR3=00000000099a6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb1008367c000007fb1008367c8 XMM02=00007fb1008367e000007fb1008367c0 XMM03=00007fb1008367c800007fb1008367c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000