Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5988' (ECDSA) to the list of known hosts. 2023/03/27 10:57:12 fuzzer started 2023/03/27 10:57:12 dialing manager at localhost:45291 syzkaller login: [ 35.904233] cgroup: Unknown subsys name 'net' [ 36.010785] cgroup: Unknown subsys name 'rlimit' 2023/03/27 10:57:26 syscalls: 2217 2023/03/27 10:57:26 code coverage: enabled 2023/03/27 10:57:26 comparison tracing: enabled 2023/03/27 10:57:26 extra coverage: enabled 2023/03/27 10:57:26 setuid sandbox: enabled 2023/03/27 10:57:26 namespace sandbox: enabled 2023/03/27 10:57:26 Android sandbox: enabled 2023/03/27 10:57:26 fault injection: enabled 2023/03/27 10:57:26 leak checking: enabled 2023/03/27 10:57:26 net packet injection: enabled 2023/03/27 10:57:26 net device setup: enabled 2023/03/27 10:57:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/03/27 10:57:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/03/27 10:57:26 USB emulation: enabled 2023/03/27 10:57:26 hci packet injection: enabled 2023/03/27 10:57:26 wifi device emulation: enabled 2023/03/27 10:57:26 802.15.4 emulation: enabled 2023/03/27 10:57:26 fetching corpus: 0, signal 0/2000 (executing program) 2023/03/27 10:57:26 fetching corpus: 37, signal 20402/23757 (executing program) 2023/03/27 10:57:26 fetching corpus: 87, signal 45201/49066 (executing program) 2023/03/27 10:57:26 fetching corpus: 137, signal 54925/59455 (executing program) 2023/03/27 10:57:26 fetching corpus: 187, signal 62419/67487 (executing program) 2023/03/27 10:57:26 fetching corpus: 237, signal 69010/74449 (executing program) 2023/03/27 10:57:26 fetching corpus: 285, signal 76132/81674 (executing program) 2023/03/27 10:57:27 fetching corpus: 334, signal 79705/85569 (executing program) 2023/03/27 10:57:27 fetching corpus: 384, signal 83953/89918 (executing program) 2023/03/27 10:57:27 fetching corpus: 434, signal 88791/94642 (executing program) 2023/03/27 10:57:27 fetching corpus: 484, signal 91263/97283 (executing program) 2023/03/27 10:57:27 fetching corpus: 534, signal 94409/100416 (executing program) 2023/03/27 10:57:27 fetching corpus: 584, signal 97293/103188 (executing program) 2023/03/27 10:57:28 fetching corpus: 634, signal 100370/106040 (executing program) 2023/03/27 10:57:28 fetching corpus: 683, signal 102959/108435 (executing program) 2023/03/27 10:57:28 fetching corpus: 733, signal 104796/110168 (executing program) 2023/03/27 10:57:28 fetching corpus: 783, signal 107274/112308 (executing program) 2023/03/27 10:57:28 fetching corpus: 833, signal 109492/114234 (executing program) 2023/03/27 10:57:29 fetching corpus: 883, signal 111985/116288 (executing program) 2023/03/27 10:57:29 fetching corpus: 933, signal 114909/118482 (executing program) 2023/03/27 10:57:29 fetching corpus: 983, signal 116911/119961 (executing program) 2023/03/27 10:57:29 fetching corpus: 1033, signal 118988/121431 (executing program) 2023/03/27 10:57:29 fetching corpus: 1083, signal 121398/123059 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124725 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124745 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124777 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124812 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124853 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124896 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124934 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/124975 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/125000 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/125043 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/125071 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/125100 (executing program) 2023/03/27 10:57:29 fetching corpus: 1126, signal 123911/125134 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125165 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125195 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125225 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125262 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125296 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125332 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125369 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125400 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125428 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125458 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125490 (executing program) 2023/03/27 10:57:29 fetching corpus: 1127, signal 123912/125522 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125553 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125587 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125615 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125646 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125687 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125720 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125768 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125795 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125834 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125858 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125887 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125916 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125939 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125967 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125997 (executing program) 2023/03/27 10:57:30 fetching corpus: 1127, signal 123912/125997 (executing program) 2023/03/27 10:57:32 starting 8 fuzzer processes 10:57:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:57:32 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11) 10:57:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 10:57:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x10, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) 10:57:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@dfltgid}]}}) 10:57:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:57:32 executing program 6: semctl$SEM_INFO(0x0, 0x0, 0x13, 0xffffffffffffffff) 10:57:32 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x19}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 55.695539] audit: type=1400 audit(1679914652.979:6): avc: denied { execmem } for pid=261 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 56.842225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.844446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.846159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.856017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.862230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.865426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.897917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.901755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.904358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.923812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.928710] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.930063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.977754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.980924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.982390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.984616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.986201] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.987375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.001797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.005248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.006976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.008259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.010790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.012385] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.013463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.022495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.027384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.036507] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.038624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.039862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.042255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.043441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.044714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.046439] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 57.047589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.051468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.052651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.057841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 57.059178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.060365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.086683] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 57.087841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.101355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.102680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.143950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.144890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.150864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.152012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.929743] Bluetooth: hci0: command 0x0409 tx timeout [ 58.993304] Bluetooth: hci1: command 0x0409 tx timeout [ 59.058238] Bluetooth: hci3: command 0x0409 tx timeout [ 59.058279] Bluetooth: hci5: command 0x0409 tx timeout [ 59.122273] Bluetooth: hci7: command 0x0409 tx timeout [ 59.122399] Bluetooth: hci6: command 0x0409 tx timeout [ 59.185344] Bluetooth: hci4: command 0x0409 tx timeout [ 59.249446] Bluetooth: hci2: command 0x0409 tx timeout [ 60.978200] Bluetooth: hci0: command 0x041b tx timeout [ 61.042260] Bluetooth: hci1: command 0x041b tx timeout [ 61.105206] Bluetooth: hci5: command 0x041b tx timeout [ 61.105217] Bluetooth: hci3: command 0x041b tx timeout [ 61.169386] Bluetooth: hci7: command 0x041b tx timeout [ 61.170198] Bluetooth: hci6: command 0x041b tx timeout [ 61.233176] Bluetooth: hci4: command 0x041b tx timeout [ 61.298378] Bluetooth: hci2: command 0x041b tx timeout [ 63.025217] Bluetooth: hci0: command 0x040f tx timeout [ 63.089161] Bluetooth: hci1: command 0x040f tx timeout [ 63.153208] Bluetooth: hci5: command 0x040f tx timeout [ 63.154286] Bluetooth: hci3: command 0x040f tx timeout [ 63.217182] Bluetooth: hci7: command 0x040f tx timeout [ 63.218348] Bluetooth: hci6: command 0x040f tx timeout [ 63.281493] Bluetooth: hci4: command 0x040f tx timeout [ 63.345171] Bluetooth: hci2: command 0x040f tx timeout [ 65.073198] Bluetooth: hci0: command 0x0419 tx timeout [ 65.137227] Bluetooth: hci1: command 0x0419 tx timeout [ 65.201186] Bluetooth: hci3: command 0x0419 tx timeout [ 65.201222] Bluetooth: hci5: command 0x0419 tx timeout [ 65.265178] Bluetooth: hci6: command 0x0419 tx timeout [ 65.265203] Bluetooth: hci7: command 0x0419 tx timeout [ 65.330197] Bluetooth: hci4: command 0x0419 tx timeout [ 65.393159] Bluetooth: hci2: command 0x0419 tx timeout [ 98.965450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.966059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.967361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.116900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.117524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.118817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.816744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.817361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.818820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.938466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.939075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.940505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:58:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 10:58:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 10:58:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 100.590745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.591502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.593012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.655041] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 100.696859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.697781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.699286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:58:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x19}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:18 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) [ 100.809376] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3724 'syz-executor.1' [ 100.822920] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 10:58:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x19}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:18 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) [ 100.986797] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 10:58:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x19}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 101.141930] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 102.616780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.617785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.619815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.732664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.733655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.739301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.381564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.382331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.383852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.424640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.425241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.426703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.726834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.727602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.729343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.764791] audit: type=1400 audit(1679914701.049:7): avc: denied { open } for pid=3883 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 103.766355] audit: type=1400 audit(1679914701.049:8): avc: denied { kernel } for pid=3883 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 103.823587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.824240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.825436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.841127] hrtimer: interrupt took 17994 ns [ 104.359253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.359886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.361488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.395399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.395955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.397473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.490214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.490841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.492544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.510451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.511016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.512344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.760910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:58:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:58:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x10, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) 10:58:22 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11) 10:58:22 executing program 6: semctl$SEM_INFO(0x0, 0x0, 0x13, 0xffffffffffffffff) 10:58:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@dfltgid}]}}) [ 104.947860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:58:22 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11) 10:58:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x10, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) 10:58:22 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 6: semctl$SEM_INFO(0x0, 0x0, 0x13, 0xffffffffffffffff) 10:58:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@dfltgid}]}}) 10:58:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 105.096864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:22 executing program 7: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:58:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x10, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) 10:58:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:58:22 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11) 10:58:22 executing program 6: semctl$SEM_INFO(0x0, 0x0, 0x13, 0xffffffffffffffff) 10:58:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) [ 105.185218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:22 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:58:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10:58:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getpriority(0x0, 0x0) 10:58:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:58:22 executing program 4: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 3: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 10:58:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@dfltgid}]}}) 10:58:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:58:22 executing program 4: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 3: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 10:58:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getpriority(0x0, 0x0) 10:58:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 10:58:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10:58:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getpriority(0x0, 0x0) 10:58:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:58:22 executing program 4: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) lseek(r0, 0x0, 0x3) 10:58:22 executing program 3: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 10:58:22 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10:58:22 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getpriority(0x0, 0x0) 10:58:22 executing program 3: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 10:58:22 executing program 4: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:22 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29) 10:58:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10:58:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x56c}], 0x1, 0x43) 10:58:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29) 10:58:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x56c}], 0x1, 0x43) 10:58:23 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 6: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 10:58:23 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) [ 105.862174] sit: non-ECT from 0.0.0.156 with TOS=0x3 [ 105.865463] sit: non-ECT from 0.0.0.156 with TOS=0x3 10:58:23 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29) 10:58:23 executing program 4: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x56c}], 0x1, 0x43) 10:58:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29) 10:58:23 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 6: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 10:58:23 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) [ 106.083616] sit: non-ECT from 0.0.0.156 with TOS=0x3 10:58:23 executing program 6: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 10:58:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x1, 0x0) 10:58:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x56c}], 0x1, 0x43) [ 106.189949] sit: non-ECT from 0.0.0.156 with TOS=0x3 10:58:23 executing program 6: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c00, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) [ 106.266292] sit: non-ECT from 0.0.0.156 with TOS=0x3 10:58:23 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMVOLCTRL(r0, 0x1261, 0x0) 10:58:23 executing program 4: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 10:58:23 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0xc) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x14d0c0, 0x142) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) [ 107.081625] loop0: detected capacity change from 0 to 40 10:58:24 executing program 1: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMVOLCTRL(r0, 0x1261, 0x0) 10:58:24 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f00000026c0)=""/4106, 0x100a}], 0x1, 0x3, 0x0) 10:58:24 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xffffffffffffff6c) 10:58:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x5a96) 10:58:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x1, 0x0) 10:58:24 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xffffffffffffff6c) [ 107.162345] general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 107.163766] KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] [ 107.164821] CPU: 0 PID: 4112 Comm: syz-executor.6 Not tainted 6.3.0-rc3-next-20230327 #1 [ 107.169793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 107.170748] RIP: 0010:do_iter_read+0x481/0x750 [ 107.171344] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 107.173530] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 107.174180] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 107.175058] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 107.175930] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 107.176795] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 107.177673] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 107.178718] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 107.179902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.180814] CR2: 0000000020001140 CR3: 00000000161d6000 CR4: 0000000000350ef0 [ 107.181917] Call Trace: [ 107.182341] [ 107.182725] ? import_iovec+0x87/0xb0 [ 107.183363] vfs_readv+0xe5/0x160 [ 107.183953] ? __pfx_vfs_readv+0x10/0x10 [ 107.184643] ? __fget_files+0x24e/0x480 [ 107.185316] ? lock_release+0x1e3/0x680 [ 107.186005] ? __schedule+0x995/0x2a00 [ 107.186673] ? __fget_files+0x270/0x480 [ 107.187343] __x64_sys_preadv+0x233/0x310 [ 107.188053] ? __pfx___x64_sys_preadv+0x10/0x10 [ 107.188911] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 107.189546] do_syscall_64+0x3f/0x90 [ 107.189905] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 107.190389] RIP: 0033:0x7f2b7ebf2b19 [ 107.190740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 107.192379] RSP: 002b:00007f2b7c168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 107.193036] RAX: ffffffffffffffda RBX: 00007f2b7ed05f60 RCX: 00007f2b7ebf2b19 [ 107.193687] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 107.194332] RBP: 00007f2b7ec4cf6d R08: 0000000000000000 R09: 0000000000000000 [ 107.194982] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 107.195623] R13: 00007ffd302eeb8f R14: 00007f2b7c168300 R15: 0000000000022000 [ 107.196273] [ 107.196492] Modules linked in: [ 107.196974] ---[ end trace 0000000000000000 ]--- [ 107.197419] RIP: 0010:do_iter_read+0x481/0x750 [ 107.197858] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 107.199508] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 107.200018] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 107.200711] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 107.202481] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 107.203309] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 107.203976] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 107.204664] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 107.205423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.205966] CR2: 0000000020001140 CR3: 00000000161d6000 CR4: 0000000000350ef0 10:58:24 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xffffffffffffff6c) 10:58:24 executing program 1: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMVOLCTRL(r0, 0x1261, 0x0) 10:58:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x5a96) 10:58:24 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xffffffffffffff6c) 10:58:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMVOLCTRL(r0, 0x1261, 0x0) 10:58:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x5a96) 10:58:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x5a96) 10:58:24 executing program 5: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:24 executing program 4: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:25 executing program 2: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) [ 108.011764] general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#2] PREEMPT SMP KASAN NOPTI [ 108.013485] KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] [ 108.014735] CPU: 0 PID: 4151 Comm: syz-executor.6 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 108.016093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.017272] RIP: 0010:do_iter_read+0x481/0x750 [ 108.017977] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 108.020588] RSP: 0018:ffff88803ed3fc78 EFLAGS: 00010216 [ 108.021178] RAX: 00000000200026c0 RBX: ffff88803ed3fd60 RCX: ffffc90002b95000 [ 108.021842] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 108.022511] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 108.023171] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803cffca00 [ 108.023835] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 108.024508] FS: 00007f2b7c147700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 108.025249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.025801] CR2: 00007f2b7c125ff8 CR3: 00000000161d6000 CR4: 0000000000350ef0 [ 108.026462] Call Trace: [ 108.026707] [ 108.026929] ? import_iovec+0x87/0xb0 [ 108.027302] vfs_readv+0xe5/0x160 [ 108.027645] ? __pfx_vfs_readv+0x10/0x10 [ 108.028040] ? lock_release+0x4d8/0x680 [ 108.028443] ? lock_acquire+0x434/0x4c0 [ 108.028841] ? do_futex+0x13a/0x380 [ 108.029216] ? __fget_files+0x270/0x480 [ 108.029603] __x64_sys_preadv+0x233/0x310 [ 108.030011] ? __pfx___x64_sys_preadv+0x10/0x10 [ 108.030468] ? switch_fpu_return+0x157/0x2e0 [ 108.030896] do_syscall_64+0x3f/0x90 [ 108.031257] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 108.031747] RIP: 0033:0x7f2b7ebf2b19 [ 108.032102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.033747] RSP: 002b:00007f2b7c147188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 108.034450] RAX: ffffffffffffffda RBX: 00007f2b7ed06020 RCX: 00007f2b7ebf2b19 [ 108.035104] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 108.035764] RBP: 00007f2b7ec4cf6d R08: 0000000000000000 R09: 0000000000000000 [ 108.036424] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 108.037082] R13: 00007ffd302eeb8f R14: 00007f2b7c147300 R15: 0000000000022000 [ 108.037743] [ 108.037968] Modules linked in: [ 108.039672] ---[ end trace 0000000000000000 ]--- [ 108.040269] RIP: 0010:do_iter_read+0x481/0x750 [ 108.040733] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 108.042416] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 108.042919] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 108.043590] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 108.044260] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 108.044930] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 108.045608] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 108.046293] FS: 00007f2b7c147700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 108.047042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.047616] CR2: 00007f2b7c125ff8 CR3: 00000000161d6000 CR4: 0000000000350ef0 10:58:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x1, 0x0) 10:58:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f00000026c0)=""/4106, 0x100a}], 0x1, 0x3, 0x0) 10:58:26 executing program 5: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:26 executing program 2: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:26 executing program 4: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:26 executing program 3: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:26 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="394ae5105f2c216bbf0e782fdf7cf6292908840f09f0ccad6930d9479fd4028e505bd4dda22f53c6e5206504fcb000ef0f765f9cec198aca65d37782c8ca41250af3115caea19445ca66111262837c5b97d9f6bc382c8c76059855696d9cb73948031146812b91594adb242e4c3dacc84debcfe899e048d9ff5b4b016f6ac16166ea1f47668ae0bb7a366c88b863cf4ceeaf74be34cc659b9946442357bf58b525174ce2c018a7f56b1eaa0f84fd2cdf40b8d48b10bb6d14d730b3fbf8e7975d38e04e165beb8d2409e724ff27d5649c80d3101f9f2b2e7e507257f81214f70f9a0878c1d6cda65092c8e4d19e01bc72c42fcbbbb88d46c2e40d20", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 108.897590] loop0: detected capacity change from 0 to 40 10:58:26 executing program 1: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) [ 108.920609] general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#3] PREEMPT SMP KASAN NOPTI [ 108.921985] KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] [ 108.923025] CPU: 0 PID: 4166 Comm: syz-executor.6 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 108.924184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.925194] RIP: 0010:do_iter_read+0x481/0x750 [ 108.925781] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 108.927951] RSP: 0018:ffff88803c6dfc78 EFLAGS: 00010216 [ 108.928617] RAX: 00000000200026c0 RBX: ffff88803c6dfd60 RCX: ffffc90002994000 [ 108.929481] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 108.930326] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 108.931173] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c63c000 [ 108.932013] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 108.932881] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 108.933830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.934523] CR2: 0000001b2c329000 CR3: 0000000016d5a000 CR4: 0000000000350ef0 [ 108.935370] Call Trace: [ 108.935686] [ 108.935974] ? import_iovec+0x87/0xb0 [ 108.936463] vfs_readv+0xe5/0x160 [ 108.936904] ? __pfx_vfs_readv+0x10/0x10 [ 108.937411] ? lock_release+0x4d8/0x680 [ 108.937916] ? kmem_cache_free+0xff/0x4a0 [ 108.938458] ? __fget_files+0x270/0x480 [ 108.938954] __x64_sys_preadv+0x233/0x310 [ 108.939478] ? __pfx___x64_sys_preadv+0x10/0x10 [ 108.940067] do_syscall_64+0x3f/0x90 [ 108.940557] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 108.941189] RIP: 0033:0x7f2b7ebf2b19 [ 108.941646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.943756] RSP: 002b:00007f2b7c168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 108.944671] RAX: ffffffffffffffda RBX: 00007f2b7ed05f60 RCX: 00007f2b7ebf2b19 [ 108.945509] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 108.946350] RBP: 00007f2b7ec4cf6d R08: 0000000000000000 R09: 0000000000000000 [ 108.947197] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 108.948033] R13: 00007ffd302eeb8f R14: 00007f2b7c168300 R15: 0000000000022000 [ 108.948894] [ 108.949182] Modules linked in: [ 108.951034] ---[ end trace 0000000000000000 ]--- [ 108.951849] RIP: 0010:do_iter_read+0x481/0x750 [ 108.952491] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 108.954630] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 108.955315] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 108.956195] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 108.957055] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 108.957920] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 108.958791] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 108.959674] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 108.960668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.961394] CR2: 0000001b2c329000 CR3: 0000000016d5a000 CR4: 0000000000350ef0 [ 109.343444] syz-executor.0: attempt to access beyond end of device [ 109.343444] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 109.346563] Buffer I/O error on dev loop0, logical block 10, lost async page write 10:58:26 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:26 executing program 1: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) [ 109.420658] loop0: detected capacity change from 0 to 40 [ 109.997972] syz-executor.0: attempt to access beyond end of device [ 109.997972] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 109.999888] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 110.105646] loop1: detected capacity change from 0 to 40 [ 110.113325] general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#4] PREEMPT SMP KASAN NOPTI [ 110.114581] KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] [ 110.115775] CPU: 0 PID: 4186 Comm: syz-executor.6 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 110.116806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.117677] RIP: 0010:do_iter_read+0x481/0x750 [ 110.118195] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 110.120095] RSP: 0018:ffff88803e98fc78 EFLAGS: 00010216 [ 110.120680] RAX: 00000000200026c0 RBX: ffff88803e98fd60 RCX: ffffc90002994000 [ 110.121448] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 110.122211] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 110.122974] R10: 000000000000100a R11: 0000000000000001 R12: ffff888015995680 [ 110.123734] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 110.124501] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 110.125352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.125990] CR2: 0000000020001140 CR3: 000000001851a000 CR4: 0000000000350ef0 [ 110.126775] Call Trace: [ 110.127061] [ 110.127320] ? import_iovec+0x87/0xb0 [ 110.127755] vfs_readv+0xe5/0x160 [ 110.128154] ? __pfx_vfs_readv+0x10/0x10 [ 110.128635] ? lock_release+0x4d8/0x680 [ 110.129096] ? finish_task_switch.isra.0+0x203/0x830 [ 110.129662] ? trace_hardirqs_on+0x16/0x100 [ 110.130005] loop0: detected capacity change from 0 to 40 [ 110.130148] ? __schedule+0x995/0x2a00 [ 110.131220] ? __fget_files+0x270/0x480 [ 110.131676] __x64_sys_preadv+0x233/0x310 [ 110.132141] ? __pfx___x64_sys_preadv+0x10/0x10 [ 110.132678] do_syscall_64+0x3f/0x90 [ 110.133100] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 110.133660] RIP: 0033:0x7f2b7ebf2b19 [ 110.134074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 110.136022] RSP: 002b:00007f2b7c168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 110.136866] RAX: ffffffffffffffda RBX: 00007f2b7ed05f60 RCX: 00007f2b7ebf2b19 [ 110.137616] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 110.138370] RBP: 00007f2b7ec4cf6d R08: 0000000000000000 R09: 0000000000000000 [ 110.139131] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 110.139880] R13: 00007ffd302eeb8f R14: 00007f2b7c168300 R15: 0000000000022000 [ 110.140652] [ 110.140909] Modules linked in: [ 110.141389] ---[ end trace 0000000000000000 ]--- [ 110.141895] RIP: 0010:do_iter_read+0x481/0x750 [ 110.142428] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 110.144323] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 110.144913] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 110.145702] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 110.146492] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 110.147291] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 110.148070] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 110.148872] FS: 00007f2b7c168700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 110.149776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.150448] CR2: 0000000020001140 CR3: 000000001851a000 CR4: 0000000000350ef0 10:58:27 executing program 2: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:27 executing program 5: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x1, 0x0) 10:58:27 executing program 4: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:27 executing program 3: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) 10:58:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f00000026c0)=""/4106, 0x100a}], 0x1, 0x3, 0x0) 10:58:27 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="394ae5105f2c216bbf0e782fdf7cf6292908840f09f0ccad6930d9479fd4028e505bd4dda22f53c6e5206504fcb000ef0f765f9cec198aca65d37782c8ca41250af3115caea19445ca66111262837c5b97d9f6bc382c8c76059855696d9cb73948031146812b91594adb242e4c3dacc84debcfe899e048d9ff5b4b016f6ac16166ea1f47668ae0bb7a366c88b863cf4ceeaf74be34cc659b9946442357bf58b525174ce2c018a7f56b1eaa0f84fd2cdf40b8d48b10bb6d14d730b3fbf8e7975d38e04e165beb8d2409e724ff27d5649c80d3101f9f2b2e7e507257f81214f70f9a0878c1d6cda65092c8e4d19e01bc72c42fcbbbb88d46c2e40d20", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 3: syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000000)=""/58, 0x3a) syslog(0x4, 0x0, 0x0) syslog(0x4, &(0x7f0000000040), 0x0) syslog(0x9, &(0x7f0000000080)=""/84, 0x54) syslog(0x3, &(0x7f0000000100)=""/48, 0x30) syslog(0x9, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x141441, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x80000000) syslog(0x2, &(0x7f0000001400)=""/193, 0xc1) syslog(0x9, &(0x7f0000001500)=""/189, 0xbd) [ 110.350786] syz-executor.0: attempt to access beyond end of device [ 110.350786] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.352217] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 110.356079] syz-executor.1: attempt to access beyond end of device [ 110.356079] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.357738] Buffer I/O error on dev loop1, logical block 10, lost async page write 10:58:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 110.425377] loop4: detected capacity change from 0 to 40 [ 110.431412] loop3: detected capacity change from 0 to 40 [ 110.454048] loop1: detected capacity change from 0 to 40 [ 110.527660] syz-executor.4: attempt to access beyond end of device [ 110.527660] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.529101] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 110.532743] syz-executor.1: attempt to access beyond end of device [ 110.532743] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.534625] Buffer I/O error on dev loop1, logical block 10, lost async page write 10:58:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) setuid(0x0) 10:58:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="394ae5105f2c216bbf0e782fdf7cf6292908840f09f0ccad6930d9479fd4028e505bd4dda22f53c6e5206504fcb000ef0f765f9cec198aca65d37782c8ca41250af3115caea19445ca66111262837c5b97d9f6bc382c8c76059855696d9cb73948031146812b91594adb242e4c3dacc84debcfe899e048d9ff5b4b016f6ac16166ea1f47668ae0bb7a366c88b863cf4ceeaf74be34cc659b9946442357bf58b525174ce2c018a7f56b1eaa0f84fd2cdf40b8d48b10bb6d14d730b3fbf8e7975d38e04e165beb8d2409e724ff27d5649c80d3101f9f2b2e7e507257f81214f70f9a0878c1d6cda65092c8e4d19e01bc72c42fcbbbb88d46c2e40d20", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 110.572588] loop2: detected capacity change from 0 to 40 10:58:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 110.591102] syz-executor.3: attempt to access beyond end of device [ 110.591102] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.592508] Buffer I/O error on dev loop3, logical block 10, lost async page write 10:58:27 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) setuid(0x0) [ 110.638364] syz-executor.2: attempt to access beyond end of device [ 110.638364] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.639414] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 110.640851] loop1: detected capacity change from 0 to 40 [ 110.641809] loop4: detected capacity change from 0 to 40 [ 110.696690] syz-executor.1: attempt to access beyond end of device [ 110.696690] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.697682] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 110.734438] syz-executor.4: attempt to access beyond end of device [ 110.734438] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 110.735849] Buffer I/O error on dev loop4, logical block 10, lost async page write 10:58:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) setuid(0x0) 10:58:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f00000026c0)=""/4106, 0x100a}], 0x1, 0x3, 0x0) 10:58:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 110.986194] loop4: detected capacity change from 0 to 40 [ 111.016242] loop3: detected capacity change from 0 to 40 [ 111.018916] loop2: detected capacity change from 0 to 40 [ 111.030772] general protection fault, probably for non-canonical address 0xdffffc00040004d8: 0000 [#5] PREEMPT SMP KASAN NOPTI [ 111.031588] KASAN: probably user-memory-access in range [0x00000000200026c0-0x00000000200026c7] [ 111.032196] CPU: 1 PID: 4238 Comm: syz-executor.6 Tainted: G D 6.3.0-rc3-next-20230327 #1 [ 111.032871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.033455] RIP: 0010:do_iter_read+0x481/0x750 [ 111.033803] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 111.035104] RSP: 0018:ffff88801a147c78 EFLAGS: 00010216 [ 111.035495] RAX: 00000000200026c0 RBX: ffff88801a147d60 RCX: ffffc90002994000 [ 111.036011] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 111.036535] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 111.037057] R10: 000000000000100a R11: 0000000000000001 R12: ffff88800c71b400 [ 111.037577] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 111.038093] FS: 00007f2b7c168700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 111.038666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.039099] CR2: 0000000020001140 CR3: 000000001454a000 CR4: 0000000000350ee0 [ 111.039612] Call Trace: [ 111.039806] [ 111.039983] ? import_iovec+0x87/0xb0 [ 111.040275] vfs_readv+0xe5/0x160 [ 111.040558] ? __pfx_vfs_readv+0x10/0x10 [ 111.040865] ? lock_release+0x4d8/0x680 [ 111.041181] ? finish_task_switch.isra.0+0x203/0x830 [ 111.041552] ? trace_hardirqs_on+0x16/0x100 [ 111.041873] ? __schedule+0x995/0x2a00 [ 111.042163] ? __fget_files+0x270/0x480 [ 111.042468] __x64_sys_preadv+0x233/0x310 [ 111.042787] ? __pfx___x64_sys_preadv+0x10/0x10 [ 111.043151] do_syscall_64+0x3f/0x90 [ 111.043439] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 111.043828] RIP: 0033:0x7f2b7ebf2b19 [ 111.044109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.045421] RSP: 002b:00007f2b7c168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 111.045979] RAX: ffffffffffffffda RBX: 00007f2b7ed05f60 RCX: 00007f2b7ebf2b19 [ 111.046506] RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000005 [ 111.047024] RBP: 00007f2b7ec4cf6d R08: 0000000000000000 R09: 0000000000000000 [ 111.047542] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 111.048053] R13: 00007ffd302eeb8f R14: 00007f2b7c168300 R15: 0000000000022000 [ 111.048592] [ 111.048766] Modules linked in: [ 111.049056] ---[ end trace 0000000000000000 ]--- [ 111.049408] RIP: 0010:do_iter_read+0x481/0x750 [ 111.049742] Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00 [ 111.051034] RSP: 0018:ffff8880401b7c78 EFLAGS: 00010216 [ 111.051435] RAX: 00000000200026c0 RBX: ffff8880401b7d60 RCX: ffffc90002994000 [ 111.051939] RDX: 00000000040004d8 RSI: ffffffff81855c98 RDI: 0000000000000007 [ 111.052590] RBP: 000000000000100a R08: 0000000000000007 R09: 0000000000000000 [ 111.053721] R10: 000000000000100a R11: 0000000000000001 R12: ffff88803c74f680 [ 111.054843] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8491de20 [ 111.055970] FS: 00007f2b7c168700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 111.057277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.058094] CR2: 0000000020001140 CR3: 000000001454a000 CR4: 0000000000350ee0 10:58:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) setuid(0x0) 10:58:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 112.443967] loop3: detected capacity change from 0 to 40 10:58:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) stat(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf54}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="c9514b47482000e5f87bd3051f0f32e41902ff0bd6890991e9495db85ff9538758dbe553a0aaaefa229ecd7783e6f9c8ad5405d8196649cec9d92ee5e56836e0a9d0dbeb92250880964cdeb0ffbcfecc241553b6fa6b227743d4b2f2fff3f67556e83854d208ab9aa86516527b8949c6bfd849b64c1e15fa94fa1a8bc0678223fdbf771c4936a5a3", 0x88, 0x101}, {&(0x7f0000000400)="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", 0xfb, 0x776a26c1}, {&(0x7f00000001c0)="1df59f69d593ad12eb1a01986abad66eb17e3baeee77733d1dc6aabc6df80a61c979860f71d9c2dadad92d3753e918e0b0ee772dc585cb85591bee96f3665657", 0x40, 0x2}, {&(0x7f0000000500)="276ba503868f505a7a076a6fbcf21325226ff18443741f125e4ba2fe82cd1e94e1e10a665aa4e474f0ae1adbd5c55babdf6efb2047be390bb75ca87b4b921a705335075f3e08ee71270cb42dff0e3baeec7c3a2c30085c2364b687f4f73c3407c52ec998a210cb081c38b33d917d7bfb0f74e230b2bc4629fdc7f4f8287ad22f81b0e9a87f296f1741e309f80f0634310bef669b8baa9929311578db08d250", 0x9f, 0x7}, {&(0x7f00000005c0)="2270d0f0441d0a4bcbcb67af10779c493105875720f0c9f3896b6cf39a69223c89e843d669d34f6891927936006db793d5dc4eb286312eaee26ee89306fffe8e75a3a5092e8fd88bfb238999b222e38472fe1274aa0803ee2c07ee8318930adf290bf9d1e3241fbb96680c23a4f0e897ee7d7be6c678e8ecd18f1c4c98fa09537d10de0cb4d3d7c96cf2976f31653b374613c8b6943a40dac10cabce7d7180e4aa529682c17bf2cd5a", 0xa9, 0xffff}], 0x10001, &(0x7f0000000700)={[{'vfat\x00'}, {'vfat\x00'}, {'-%*\\@,'}, {'/{)!&.'}, {'vfat\x00'}], [{@measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '.{:[A^'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7609) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 112.593470] loop2: detected capacity change from 0 to 40 10:58:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 112.929659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 4: move_pages(0x0, 0x8c94bb2076e16421, 0x0, 0x0, 0x0, 0x0) 10:58:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x18, 0x43, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 10:58:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x0, 0x80000}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000040)) 10:58:30 executing program 4: move_pages(0x0, 0x8c94bb2076e16421, 0x0, 0x0, 0x0, 0x0) 10:58:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x18, 0x43, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 10:58:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x0, 0x80000}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000040)) [ 113.025985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 4: move_pages(0x0, 0x8c94bb2076e16421, 0x0, 0x0, 0x0, 0x0) 10:58:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x0, 0x80000}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000040)) 10:58:30 executing program 7: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x18, 0x43, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 10:58:30 executing program 4: move_pages(0x0, 0x8c94bb2076e16421, 0x0, 0x0, 0x0, 0x0) 10:58:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) [ 113.287339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x0, 0x80000}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000040)) 10:58:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x18, 0x43, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 10:58:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 10:58:30 executing program 7: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) [ 113.427480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:30 executing program 5: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000200), 0x8, 0x0, &(0x7f0000000280), 0x0, 0x0) 10:58:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 10:58:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) openat(r1, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x54) getegid() perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe68, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3a}, 0x0, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 10:58:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0xfffffffffffffffc, 0x0) 10:58:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000200), 0x8, 0x0, &(0x7f0000000280), 0x0, 0x0) 10:58:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 10:58:31 executing program 5: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2) 10:58:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0xfffffffffffffffc, 0x0) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 7: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 10:58:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000200), 0x8, 0x0, &(0x7f0000000280), 0x0, 0x0) 10:58:31 executing program 0: clock_adjtime(0xd5765c649294849b, &(0x7f0000000000)) 10:58:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0xfffffffffffffffc, 0x0) 10:58:31 executing program 5: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000200), 0x8, 0x0, &(0x7f0000000280), 0x0, 0x0) 10:58:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 10:58:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 0: clock_adjtime(0xd5765c649294849b, &(0x7f0000000000)) 10:58:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0xfffffffffffffffc, 0x0) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 10:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) 10:58:31 executing program 7: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 10:58:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="847ca02a4919b92fadcf2d3f5427d53a0e1c649309", 0x15}, {&(0x7f0000000280)}], 0x2, 0x0) 10:58:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 0: clock_adjtime(0xd5765c649294849b, &(0x7f0000000000)) 10:58:31 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x1ba9e000) 10:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) [ 114.255578] loop6: detected capacity change from 0 to 264192 [ 114.273846] loop6: detected capacity change from 0 to 264192 10:58:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0xffffffff, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=0x0]) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') 10:58:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x106, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x44080) 10:58:31 executing program 0: clock_adjtime(0xd5765c649294849b, &(0x7f0000000000)) [ 114.352285] devpts: called with bogus options [ 114.362876] devpts: called with bogus options [ 114.418456] loop0: detected capacity change from 0 to 255 10:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) 10:58:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x1ba9e000) 10:58:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="ce64", 0x2, 0xffff}], 0x0, &(0x7f0000000440)) 10:58:31 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') [ 114.431524] loop0: detected capacity change from 0 to 255 10:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) 10:58:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x1ba9e000) [ 114.605547] devpts: called with bogus options 10:58:31 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:58:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) 10:58:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') 10:58:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) 10:58:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') [ 114.805940] devpts: called with bogus options 10:58:32 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x1ba9e000) 10:58:32 executing program 6: syslog(0x0, 0x0, 0x0) 10:58:32 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:58:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 10:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') 10:58:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') 10:58:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) [ 114.944431] devpts: called with bogus options [ 114.945724] devpts: called with bogus options 10:58:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000005c0)='system.pos.\xd6_es\xe7\r\x9d\x81\x88\xe9\xdda\x1d\xbe\xacH\xf6\xd6.!\x1b\\\xde\xa9\x1dT\x0e0\xb0\x02\xe9\xf4B,XZG\xd1\xce%~\xe2\nn+\xb4(\xfb\xb7\xf8q\f\xe2u>\xae\xd8)x\xfc\xbe:L1\'\xe4\xb3\"\xd9\xb1\x92\x87\xd2\xfd\xc5\xe3\xe7\xab*\xed\xfa%>1\\\f\x96Y\'\x04\xaf\xef\x8f8J\xae\xc3H\a\xa7(\xae\x9d\x85\xa1[f}]\x1c\xf2$;\x89\xc3\xc1\xff\xb2L\x96N4\xd3y5\xfa\xec1\x1a@\x90\x8f\xf3\xcf\x7f\x8d\xa2\xf7\x8c\x814(7;\t\x1b\x88\xc1\\\x01\x98\xda\x1f\x9aA\xcc`\x83\xb9\x97\xc8\xc5\\\x87h\xfe\x91\x95\xe7O\xa6m\xdd`\xe2\x82\xb0\\u\xb8\x04\xb8\xec\x18\xfe\x87U\xaf$\xec\x0e_m\x17\xadH\x92E\x1c#\x8bS\xd2\\\xb4t\x93\xb7\xaa\x8aZ\x16\x11\t\x14 pdm\xa5/\xb0E6bbe\xa6\xd5\xd2c\x11\x97\xdc\x0f&\xfc\xa9\xe3\x97\xd4\x87$y\xd19\xef') 10:58:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) [ 115.041287] devpts: called with bogus options 10:58:32 executing program 4: setresgid(0x0, 0xffffffffffffffff, 0xee00) 10:58:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@mcast2}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 10:58:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) 10:58:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 10:58:32 executing program 4: setresgid(0x0, 0xffffffffffffffff, 0xee00) 10:58:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) 10:58:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 10:58:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@mcast2}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 10:58:32 executing program 4: setresgid(0x0, 0xffffffffffffffff, 0xee00) 10:58:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@mcast2}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 10:58:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) 10:58:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 10:58:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@mcast2}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 10:58:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) 10:58:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 10:58:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 4: setresgid(0x0, 0xffffffffffffffff, 0xee00) 10:58:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 10:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto(r0, &(0x7f0000000000)="f1d1fd00000000000000000088f7", 0xe, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r2}, 0x80) 10:58:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) 10:58:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto(r0, &(0x7f0000000000)="f1d1fd00000000000000000088f7", 0xe, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r2}, 0x80) 10:58:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) [ 116.124932] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) [ 116.146832] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto(r0, &(0x7f0000000000)="f1d1fd00000000000000000088f7", 0xe, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r2}, 0x80) 10:58:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto(r0, &(0x7f0000000000)="f1d1fd00000000000000000088f7", 0xe, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r2}, 0x80) [ 116.294224] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) [ 116.431976] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 10:58:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000004c0)={0xa4200, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f00000003c0)=""/219, 0xdb, &(0x7f0000000240)=""/62, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x1, 0x8, 0x0, 0x4a3, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x200, 0x101, 0x7f, 0x7, 0xff, 0x800, 0x1, 0x0, 0x8, 0x0, 0x8000}, r2, 0x6, r1, 0x8) ptrace(0x8, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f0000000300)) 10:58:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) [ 116.510817] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) 10:58:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) 10:58:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) 10:58:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x2, 0x0) 10:58:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x3e, &(0x7f0000000000)={0x77359400}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) 10:58:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x88000) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) write(r1, &(0x7f0000000080)="01", 0x292e9) close(r2) 10:58:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') 10:58:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r VM DIAGNOSIS: 10:58:24 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824f8615 RDI=ffffffff87f0bdc0 RBP=ffffffff87f0bd80 RSP=ffff8880401b7660 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff87f0bd80 R14=0000000000000010 R15=ffffffff824f8600 RIP=ffffffff824f866d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2b7c168700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001140 CR3=00000000161d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f07e0544000 RCX=0000000000000000 RDX=ffff88803bd40000 RSI=ffffffff817130e7 RDI=0000000000000006 RBP=0000000000000008 RSP=ffff88803bd4f750 R8 =0000000000000006 R9 =00007f07e0544000 R10=00007f07e05d6000 R11=0000000000000001 R12=ffffea0000c6eb40 R13=ffff88803bf54a20 R14=00007f07e05d6000 R15=dffffc0000000000 RIP=ffffffff814b891b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555672b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe4f529c58 CR3=0000000009486000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000