Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:28383' (ECDSA) to the list of known hosts. 2022/09/13 17:05:30 fuzzer started 2022/09/13 17:05:30 dialing manager at localhost:36597 syzkaller login: [ 36.730486] cgroup: Unknown subsys name 'net' [ 36.846030] cgroup: Unknown subsys name 'rlimit' 2022/09/13 17:05:45 syscalls: 2215 2022/09/13 17:05:45 code coverage: enabled 2022/09/13 17:05:45 comparison tracing: enabled 2022/09/13 17:05:45 extra coverage: enabled 2022/09/13 17:05:45 setuid sandbox: enabled 2022/09/13 17:05:45 namespace sandbox: enabled 2022/09/13 17:05:45 Android sandbox: enabled 2022/09/13 17:05:45 fault injection: enabled 2022/09/13 17:05:45 leak checking: enabled 2022/09/13 17:05:45 net packet injection: enabled 2022/09/13 17:05:45 net device setup: enabled 2022/09/13 17:05:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 17:05:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 17:05:45 USB emulation: enabled 2022/09/13 17:05:45 hci packet injection: enabled 2022/09/13 17:05:45 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 17:05:45 802.15.4 emulation: enabled 2022/09/13 17:05:45 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 17:05:45 fetching corpus: 50, signal 33260/36754 (executing program) 2022/09/13 17:05:45 fetching corpus: 100, signal 46633/51568 (executing program) 2022/09/13 17:05:45 fetching corpus: 150, signal 58615/64844 (executing program) 2022/09/13 17:05:45 fetching corpus: 200, signal 66363/73830 (executing program) 2022/09/13 17:05:45 fetching corpus: 250, signal 72835/81548 (executing program) 2022/09/13 17:05:45 fetching corpus: 300, signal 77663/87594 (executing program) 2022/09/13 17:05:46 fetching corpus: 350, signal 84553/95456 (executing program) 2022/09/13 17:05:46 fetching corpus: 400, signal 89630/101543 (executing program) 2022/09/13 17:05:46 fetching corpus: 450, signal 95104/107891 (executing program) 2022/09/13 17:05:46 fetching corpus: 500, signal 99615/113264 (executing program) 2022/09/13 17:05:46 fetching corpus: 550, signal 103066/117695 (executing program) 2022/09/13 17:05:46 fetching corpus: 600, signal 106736/122224 (executing program) 2022/09/13 17:05:46 fetching corpus: 650, signal 108951/125400 (executing program) 2022/09/13 17:05:46 fetching corpus: 700, signal 111899/129185 (executing program) 2022/09/13 17:05:47 fetching corpus: 750, signal 115200/133220 (executing program) 2022/09/13 17:05:47 fetching corpus: 800, signal 118679/137387 (executing program) 2022/09/13 17:05:47 fetching corpus: 850, signal 121618/141067 (executing program) 2022/09/13 17:05:47 fetching corpus: 900, signal 122986/143352 (executing program) 2022/09/13 17:05:47 fetching corpus: 950, signal 125513/146550 (executing program) 2022/09/13 17:05:47 fetching corpus: 1000, signal 127787/149542 (executing program) 2022/09/13 17:05:47 fetching corpus: 1050, signal 130090/152546 (executing program) 2022/09/13 17:05:47 fetching corpus: 1100, signal 132256/155389 (executing program) 2022/09/13 17:05:48 fetching corpus: 1150, signal 134482/158186 (executing program) 2022/09/13 17:05:48 fetching corpus: 1200, signal 136449/160778 (executing program) 2022/09/13 17:05:48 fetching corpus: 1250, signal 138664/163579 (executing program) 2022/09/13 17:05:48 fetching corpus: 1300, signal 140173/165742 (executing program) 2022/09/13 17:05:48 fetching corpus: 1350, signal 142862/168799 (executing program) 2022/09/13 17:05:48 fetching corpus: 1400, signal 145192/171567 (executing program) 2022/09/13 17:05:48 fetching corpus: 1450, signal 146607/173623 (executing program) 2022/09/13 17:05:49 fetching corpus: 1500, signal 148037/175563 (executing program) 2022/09/13 17:05:49 fetching corpus: 1550, signal 149553/177598 (executing program) 2022/09/13 17:05:49 fetching corpus: 1600, signal 151213/179684 (executing program) 2022/09/13 17:05:49 fetching corpus: 1650, signal 152608/181558 (executing program) 2022/09/13 17:05:49 fetching corpus: 1700, signal 153996/183495 (executing program) 2022/09/13 17:05:49 fetching corpus: 1750, signal 155012/185073 (executing program) 2022/09/13 17:05:49 fetching corpus: 1800, signal 156359/186876 (executing program) 2022/09/13 17:05:49 fetching corpus: 1850, signal 158014/188855 (executing program) 2022/09/13 17:05:50 fetching corpus: 1900, signal 161092/191798 (executing program) 2022/09/13 17:05:50 fetching corpus: 1950, signal 162725/193793 (executing program) 2022/09/13 17:05:50 fetching corpus: 2000, signal 164606/195832 (executing program) 2022/09/13 17:05:50 fetching corpus: 2050, signal 166554/197923 (executing program) 2022/09/13 17:05:50 fetching corpus: 2100, signal 168351/199833 (executing program) 2022/09/13 17:05:50 fetching corpus: 2150, signal 169387/201280 (executing program) 2022/09/13 17:05:51 fetching corpus: 2200, signal 171536/203427 (executing program) 2022/09/13 17:05:51 fetching corpus: 2250, signal 172816/204974 (executing program) 2022/09/13 17:05:51 fetching corpus: 2300, signal 173989/206466 (executing program) 2022/09/13 17:05:51 fetching corpus: 2350, signal 175127/207866 (executing program) 2022/09/13 17:05:51 fetching corpus: 2400, signal 176503/209437 (executing program) 2022/09/13 17:05:51 fetching corpus: 2450, signal 178024/210992 (executing program) 2022/09/13 17:05:51 fetching corpus: 2500, signal 179458/212522 (executing program) 2022/09/13 17:05:52 fetching corpus: 2550, signal 180490/213804 (executing program) 2022/09/13 17:05:52 fetching corpus: 2600, signal 182006/215328 (executing program) 2022/09/13 17:05:52 fetching corpus: 2650, signal 183502/216827 (executing program) 2022/09/13 17:05:52 fetching corpus: 2700, signal 184976/218351 (executing program) 2022/09/13 17:05:52 fetching corpus: 2750, signal 185908/219521 (executing program) 2022/09/13 17:05:52 fetching corpus: 2800, signal 187839/221217 (executing program) 2022/09/13 17:05:52 fetching corpus: 2850, signal 188814/222390 (executing program) 2022/09/13 17:05:53 fetching corpus: 2900, signal 190904/224113 (executing program) 2022/09/13 17:05:53 fetching corpus: 2950, signal 191876/225190 (executing program) 2022/09/13 17:05:53 fetching corpus: 3000, signal 193111/226428 (executing program) 2022/09/13 17:05:53 fetching corpus: 3050, signal 194231/227589 (executing program) 2022/09/13 17:05:53 fetching corpus: 3100, signal 195171/228643 (executing program) 2022/09/13 17:05:53 fetching corpus: 3150, signal 196440/229822 (executing program) 2022/09/13 17:05:53 fetching corpus: 3200, signal 197271/230813 (executing program) 2022/09/13 17:05:54 fetching corpus: 3250, signal 198374/231886 (executing program) 2022/09/13 17:05:54 fetching corpus: 3300, signal 199267/232856 (executing program) 2022/09/13 17:05:54 fetching corpus: 3350, signal 200290/233888 (executing program) 2022/09/13 17:05:54 fetching corpus: 3400, signal 200802/234591 (executing program) 2022/09/13 17:05:54 fetching corpus: 3450, signal 201453/235412 (executing program) 2022/09/13 17:05:54 fetching corpus: 3500, signal 202405/236332 (executing program) 2022/09/13 17:05:54 fetching corpus: 3550, signal 202980/237033 (executing program) 2022/09/13 17:05:54 fetching corpus: 3600, signal 203572/237823 (executing program) 2022/09/13 17:05:55 fetching corpus: 3650, signal 204488/238667 (executing program) 2022/09/13 17:05:55 fetching corpus: 3700, signal 205039/239342 (executing program) 2022/09/13 17:05:55 fetching corpus: 3750, signal 205914/240197 (executing program) 2022/09/13 17:05:55 fetching corpus: 3800, signal 206628/240973 (executing program) 2022/09/13 17:05:55 fetching corpus: 3850, signal 207473/241795 (executing program) 2022/09/13 17:05:55 fetching corpus: 3900, signal 208921/242832 (executing program) 2022/09/13 17:05:55 fetching corpus: 3950, signal 209445/243468 (executing program) 2022/09/13 17:05:56 fetching corpus: 4000, signal 210362/244264 (executing program) 2022/09/13 17:05:56 fetching corpus: 4050, signal 211277/245032 (executing program) 2022/09/13 17:05:56 fetching corpus: 4100, signal 211902/245632 (executing program) 2022/09/13 17:05:56 fetching corpus: 4150, signal 212516/246272 (executing program) 2022/09/13 17:05:56 fetching corpus: 4200, signal 213271/246927 (executing program) 2022/09/13 17:05:56 fetching corpus: 4250, signal 213860/247524 (executing program) 2022/09/13 17:05:56 fetching corpus: 4300, signal 214257/248050 (executing program) 2022/09/13 17:05:56 fetching corpus: 4350, signal 214948/248615 (executing program) 2022/09/13 17:05:57 fetching corpus: 4400, signal 215965/249391 (executing program) 2022/09/13 17:05:57 fetching corpus: 4450, signal 216516/249945 (executing program) 2022/09/13 17:05:57 fetching corpus: 4500, signal 217195/250529 (executing program) 2022/09/13 17:05:57 fetching corpus: 4550, signal 218079/251182 (executing program) 2022/09/13 17:05:57 fetching corpus: 4600, signal 218946/251859 (executing program) 2022/09/13 17:05:57 fetching corpus: 4650, signal 219580/252458 (executing program) 2022/09/13 17:05:57 fetching corpus: 4700, signal 220160/252940 (executing program) 2022/09/13 17:05:57 fetching corpus: 4750, signal 221028/253514 (executing program) 2022/09/13 17:05:58 fetching corpus: 4800, signal 221573/253996 (executing program) 2022/09/13 17:05:58 fetching corpus: 4850, signal 222235/254546 (executing program) 2022/09/13 17:05:58 fetching corpus: 4900, signal 223153/255128 (executing program) 2022/09/13 17:05:58 fetching corpus: 4950, signal 223843/255604 (executing program) 2022/09/13 17:05:58 fetching corpus: 5000, signal 224469/256101 (executing program) 2022/09/13 17:05:58 fetching corpus: 5050, signal 225226/256542 (executing program) 2022/09/13 17:05:58 fetching corpus: 5100, signal 225755/256963 (executing program) 2022/09/13 17:05:58 fetching corpus: 5150, signal 226219/257381 (executing program) 2022/09/13 17:05:59 fetching corpus: 5200, signal 226537/257741 (executing program) 2022/09/13 17:05:59 fetching corpus: 5250, signal 227132/258148 (executing program) 2022/09/13 17:05:59 fetching corpus: 5300, signal 227908/258612 (executing program) 2022/09/13 17:05:59 fetching corpus: 5350, signal 228715/259041 (executing program) 2022/09/13 17:05:59 fetching corpus: 5400, signal 229179/259495 (executing program) 2022/09/13 17:05:59 fetching corpus: 5450, signal 230024/259909 (executing program) 2022/09/13 17:05:59 fetching corpus: 5500, signal 230883/260313 (executing program) 2022/09/13 17:06:00 fetching corpus: 5550, signal 231604/260663 (executing program) 2022/09/13 17:06:00 fetching corpus: 5600, signal 232413/261032 (executing program) 2022/09/13 17:06:00 fetching corpus: 5650, signal 232970/261391 (executing program) 2022/09/13 17:06:00 fetching corpus: 5700, signal 233730/261759 (executing program) 2022/09/13 17:06:00 fetching corpus: 5750, signal 234287/262127 (executing program) 2022/09/13 17:06:00 fetching corpus: 5800, signal 234768/262424 (executing program) 2022/09/13 17:06:00 fetching corpus: 5850, signal 235425/262715 (executing program) 2022/09/13 17:06:00 fetching corpus: 5900, signal 236295/263080 (executing program) 2022/09/13 17:06:01 fetching corpus: 5950, signal 236929/263337 (executing program) 2022/09/13 17:06:01 fetching corpus: 6000, signal 237740/263623 (executing program) 2022/09/13 17:06:01 fetching corpus: 6050, signal 238110/263873 (executing program) 2022/09/13 17:06:01 fetching corpus: 6100, signal 238903/264202 (executing program) 2022/09/13 17:06:01 fetching corpus: 6150, signal 239473/264408 (executing program) 2022/09/13 17:06:01 fetching corpus: 6200, signal 240396/264654 (executing program) 2022/09/13 17:06:02 fetching corpus: 6250, signal 241389/264907 (executing program) 2022/09/13 17:06:02 fetching corpus: 6300, signal 241947/265104 (executing program) 2022/09/13 17:06:02 fetching corpus: 6350, signal 242634/265274 (executing program) 2022/09/13 17:06:02 fetching corpus: 6400, signal 243282/265467 (executing program) 2022/09/13 17:06:02 fetching corpus: 6450, signal 243971/265733 (executing program) 2022/09/13 17:06:02 fetching corpus: 6500, signal 244278/265738 (executing program) 2022/09/13 17:06:02 fetching corpus: 6550, signal 244710/265817 (executing program) 2022/09/13 17:06:02 fetching corpus: 6600, signal 245062/265826 (executing program) 2022/09/13 17:06:03 fetching corpus: 6650, signal 245521/265838 (executing program) 2022/09/13 17:06:03 fetching corpus: 6700, signal 245870/265881 (executing program) 2022/09/13 17:06:03 fetching corpus: 6750, signal 246444/265892 (executing program) 2022/09/13 17:06:03 fetching corpus: 6800, signal 247135/265914 (executing program) 2022/09/13 17:06:03 fetching corpus: 6850, signal 247912/265914 (executing program) 2022/09/13 17:06:03 fetching corpus: 6900, signal 248923/265927 (executing program) 2022/09/13 17:06:03 fetching corpus: 6950, signal 249605/265930 (executing program) 2022/09/13 17:06:04 fetching corpus: 7000, signal 250311/265951 (executing program) 2022/09/13 17:06:04 fetching corpus: 7050, signal 251030/266014 (executing program) 2022/09/13 17:06:04 fetching corpus: 7100, signal 251541/266077 (executing program) 2022/09/13 17:06:04 fetching corpus: 7150, signal 251948/266094 (executing program) 2022/09/13 17:06:04 fetching corpus: 7200, signal 252367/266120 (executing program) 2022/09/13 17:06:04 fetching corpus: 7250, signal 252767/266145 (executing program) 2022/09/13 17:06:04 fetching corpus: 7300, signal 253488/266151 (executing program) 2022/09/13 17:06:05 fetching corpus: 7350, signal 254190/266152 (executing program) 2022/09/13 17:06:05 fetching corpus: 7400, signal 254626/266197 (executing program) 2022/09/13 17:06:05 fetching corpus: 7450, signal 255148/266200 (executing program) 2022/09/13 17:06:05 fetching corpus: 7500, signal 255789/266200 (executing program) 2022/09/13 17:06:05 fetching corpus: 7550, signal 256177/266220 (executing program) 2022/09/13 17:06:05 fetching corpus: 7600, signal 256512/266224 (executing program) 2022/09/13 17:06:05 fetching corpus: 7629, signal 256939/266224 (executing program) 2022/09/13 17:06:05 fetching corpus: 7629, signal 256939/266224 (executing program) 2022/09/13 17:06:08 starting 8 fuzzer processes 17:06:08 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0x808) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='.\x00', 0x808) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='.\x00', 0x808) 17:06:08 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 17:06:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7700c24d06a7080045"], 0x0) 17:06:08 executing program 0: sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) 17:06:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="b80000001900010000000000000006000000000000000000000011d47bc3938200000000000000000000000000000000000a00000000000000000000000000000000009ca43950179cfb9a9f5fd37f82818f92b4bb5bf8273dae8100000000000000c6d64b33a60ebfd79500738b20ba0c461a0915136246ce2efeead48d617d384864f63475d9d67971e2bae69cc316b8418d3a7eb37152ff7fcc50196f6317cdbf6caff91416877a0500cb2414a3ff16fc2d34f3b58af10047a07872dbfa99cbd9a746c417d06c82119741e39e0a9acaab0acfba3491fdafce738a2f90cc11e739217d11d42760a499234f39b943cbefce18629a03a8d3b0d485ee000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x69, 0x2, 0xf9, 0x81, 0x0, 0x0, 0x201, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9a6, 0x4, @perf_config_ext={0x8, 0x3}, 0x18020, 0x6, 0x9, 0x9, 0x4, 0xfffffff8, 0x8217, 0x0, 0x6, 0x0, 0x500000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000780)={0x2}) lseek(r3, 0x0, 0x3) 17:06:08 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') fcntl$notify(r0, 0x402, 0x0) 17:06:08 executing program 4: r0 = getpid() setpriority(0x2, r0, 0x0) 17:06:08 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) [ 73.845036] audit: type=1400 audit(1663088768.075:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 75.302301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.303802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.306263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.307738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.309774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.311391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.313161] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.314902] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.316898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.318506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.319795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.320904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.322662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.323716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.325040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.326276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.327496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.331686] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.332706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.334405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.335628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.339741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.341863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.343650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.345203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.346948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.348433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.350580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.351922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.354229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.355583] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.356844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.358901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.364219] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.368507] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.368978] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.370065] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.385198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.387625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.388915] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.391285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.392516] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.395880] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.401282] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.410681] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.412364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.413666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.424606] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.425875] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.427708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.429357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.430793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.430954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.443119] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.444347] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.445615] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.416609] Bluetooth: hci1: command 0x0409 tx timeout [ 77.417090] Bluetooth: hci2: command 0x0409 tx timeout [ 77.417628] Bluetooth: hci3: command 0x0409 tx timeout [ 77.417706] Bluetooth: hci5: command 0x0409 tx timeout [ 77.480168] Bluetooth: hci7: command 0x0409 tx timeout [ 77.480709] Bluetooth: hci4: command 0x0409 tx timeout [ 77.481264] Bluetooth: hci6: command 0x0409 tx timeout [ 77.481695] Bluetooth: hci0: command 0x0409 tx timeout [ 79.464160] Bluetooth: hci5: command 0x041b tx timeout [ 79.465087] Bluetooth: hci3: command 0x041b tx timeout [ 79.465856] Bluetooth: hci2: command 0x041b tx timeout [ 79.466702] Bluetooth: hci1: command 0x041b tx timeout [ 79.528171] Bluetooth: hci0: command 0x041b tx timeout [ 79.529461] Bluetooth: hci6: command 0x041b tx timeout [ 79.530473] Bluetooth: hci4: command 0x041b tx timeout [ 79.531356] Bluetooth: hci7: command 0x041b tx timeout [ 81.512103] Bluetooth: hci1: command 0x040f tx timeout [ 81.512701] Bluetooth: hci2: command 0x040f tx timeout [ 81.513232] Bluetooth: hci3: command 0x040f tx timeout [ 81.513680] Bluetooth: hci5: command 0x040f tx timeout [ 81.576095] Bluetooth: hci7: command 0x040f tx timeout [ 81.576719] Bluetooth: hci4: command 0x040f tx timeout [ 81.577583] Bluetooth: hci6: command 0x040f tx timeout [ 81.578069] Bluetooth: hci0: command 0x040f tx timeout [ 83.560233] Bluetooth: hci5: command 0x0419 tx timeout [ 83.561168] Bluetooth: hci3: command 0x0419 tx timeout [ 83.562050] Bluetooth: hci2: command 0x0419 tx timeout [ 83.563416] Bluetooth: hci1: command 0x0419 tx timeout [ 83.624117] Bluetooth: hci0: command 0x0419 tx timeout [ 83.625597] Bluetooth: hci6: command 0x0419 tx timeout [ 83.626449] Bluetooth: hci4: command 0x0419 tx timeout [ 83.627831] Bluetooth: hci7: command 0x0419 tx timeout 17:07:04 executing program 4: r0 = getpid() setpriority(0x2, r0, 0x0) 17:07:04 executing program 4: r0 = getpid() setpriority(0x2, r0, 0x0) 17:07:05 executing program 4: r0 = getpid() setpriority(0x2, r0, 0x0) 17:07:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @private2, @mcast1, 0x0, 0x8, 0x0, 0x100, 0x0, 0x474000e}) 17:07:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @private2, @mcast1, 0x0, 0x8, 0x0, 0x100, 0x0, 0x474000e}) 17:07:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @private2, @mcast1, 0x0, 0x8, 0x0, 0x100, 0x0, 0x474000e}) 17:07:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @private2, @mcast1, 0x0, 0x8, 0x0, 0x100, 0x0, 0x474000e}) 17:07:05 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) [ 132.266686] audit: type=1400 audit(1663088826.497:7): avc: denied { open } for pid=3929 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.268421] audit: type=1400 audit(1663088826.497:8): avc: denied { kernel } for pid=3929 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.282225] ------------[ cut here ]------------ [ 132.282245] [ 132.282248] ====================================================== [ 132.282252] WARNING: possible circular locking dependency detected [ 132.282256] 6.0.0-rc5-next-20220913 #1 Not tainted [ 132.282262] ------------------------------------------------------ [ 132.282265] syz-executor.3/3930 is trying to acquire lock: [ 132.282272] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 132.282309] [ 132.282309] but task is already holding lock: [ 132.282312] ffff888017518c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.282340] [ 132.282340] which lock already depends on the new lock. [ 132.282340] [ 132.282344] [ 132.282344] the existing dependency chain (in reverse order) is: [ 132.282347] [ 132.282347] -> #3 (&ctx->lock){....}-{2:2}: [ 132.282361] _raw_spin_lock+0x2a/0x40 [ 132.282378] __perf_event_task_sched_out+0x53b/0x18d0 [ 132.282390] __schedule+0xedd/0x2470 [ 132.282401] schedule+0xda/0x1b0 [ 132.282410] exit_to_user_mode_prepare+0x114/0x1a0 [ 132.282430] syscall_exit_to_user_mode+0x19/0x40 [ 132.282449] do_syscall_64+0x48/0x90 [ 132.282462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.282480] [ 132.282480] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 132.282494] _raw_spin_lock_nested+0x30/0x40 [ 132.282508] raw_spin_rq_lock_nested+0x1e/0x30 [ 132.282521] task_fork_fair+0x63/0x4d0 [ 132.282539] sched_cgroup_fork+0x3d0/0x540 [ 132.282553] copy_process+0x3f9e/0x6df0 [ 132.282564] kernel_clone+0xe7/0x890 [ 132.282573] user_mode_thread+0xad/0xf0 [ 132.282583] rest_init+0x24/0x250 [ 132.282602] arch_call_rest_init+0xf/0x14 [ 132.282622] start_kernel+0x4c1/0x4e6 [ 132.282639] secondary_startup_64_no_verify+0xe0/0xeb [ 132.282653] [ 132.282653] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 132.282667] _raw_spin_lock_irqsave+0x39/0x60 [ 132.282682] try_to_wake_up+0xab/0x1920 [ 132.282696] up+0x75/0xb0 [ 132.282707] __up_console_sem+0x6e/0x80 [ 132.282723] console_unlock+0x46a/0x590 [ 132.282741] con_install+0x14e/0x5d0 [ 132.282765] tty_init_dev.part.0+0xa0/0x610 [ 132.282778] tty_open+0xbc0/0x1370 [ 132.282789] chrdev_open+0x268/0x6e0 [ 132.282802] do_dentry_open+0x6ca/0x12b0 [ 132.282816] path_openat+0x19e1/0x2800 [ 132.282827] do_filp_open+0x1b6/0x410 [ 132.282839] do_sys_openat2+0x171/0x4c0 [ 132.282853] __x64_sys_openat+0x13f/0x1f0 [ 132.282869] do_syscall_64+0x3b/0x90 [ 132.282881] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.282898] [ 132.282898] -> #0 ((console_sem).lock){....}-{2:2}: [ 132.282912] __lock_acquire+0x2a02/0x5e70 [ 132.282929] lock_acquire+0x1a2/0x530 [ 132.282945] _raw_spin_lock_irqsave+0x39/0x60 [ 132.282960] down_trylock+0xe/0x70 [ 132.282972] __down_trylock_console_sem+0x3b/0xd0 [ 132.282989] vprintk_emit+0x16b/0x560 [ 132.283005] vprintk+0x84/0xa0 [ 132.283022] _printk+0xba/0xf1 [ 132.283040] report_bug.cold+0x72/0xab [ 132.283052] handle_bug+0x3c/0x70 [ 132.283065] exc_invalid_op+0x14/0x50 [ 132.283078] asm_exc_invalid_op+0x16/0x20 [ 132.283094] group_sched_out.part.0+0x2c7/0x460 [ 132.283105] ctx_sched_out+0x8f1/0xc10 [ 132.283114] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.283127] __schedule+0xedd/0x2470 [ 132.283136] schedule+0xda/0x1b0 [ 132.283145] exit_to_user_mode_prepare+0x114/0x1a0 [ 132.283165] syscall_exit_to_user_mode+0x19/0x40 [ 132.283182] do_syscall_64+0x48/0x90 [ 132.283195] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.283212] [ 132.283212] other info that might help us debug this: [ 132.283212] [ 132.283214] Chain exists of: [ 132.283214] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 132.283214] [ 132.283235] Possible unsafe locking scenario: [ 132.283235] [ 132.283238] CPU0 CPU1 [ 132.283240] ---- ---- [ 132.283242] lock(&ctx->lock); [ 132.283248] lock(&rq->__lock); [ 132.283255] lock(&ctx->lock); [ 132.283261] lock((console_sem).lock); [ 132.283266] [ 132.283266] *** DEADLOCK *** [ 132.283266] [ 132.283269] 2 locks held by syz-executor.3/3930: [ 132.283276] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 132.283301] #1: ffff888017518c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.283328] [ 132.283328] stack backtrace: [ 132.283331] CPU: 1 PID: 3930 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220913 #1 [ 132.283344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.283352] Call Trace: [ 132.283355] [ 132.283359] dump_stack_lvl+0x8b/0xb3 [ 132.283373] check_noncircular+0x263/0x2e0 [ 132.283390] ? format_decode+0x26c/0xb50 [ 132.283406] ? print_circular_bug+0x450/0x450 [ 132.283423] ? enable_ptr_key_workfn+0x20/0x20 [ 132.283437] ? __lockdep_reset_lock+0x180/0x180 [ 132.283454] ? format_decode+0x26c/0xb50 [ 132.283469] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 132.283487] __lock_acquire+0x2a02/0x5e70 [ 132.283509] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.283532] lock_acquire+0x1a2/0x530 [ 132.283549] ? down_trylock+0xe/0x70 [ 132.283564] ? rcu_read_unlock+0x40/0x40 [ 132.283583] ? find_held_lock+0x2c/0x110 [ 132.283600] ? vprintk+0x84/0xa0 [ 132.283618] _raw_spin_lock_irqsave+0x39/0x60 [ 132.283634] ? down_trylock+0xe/0x70 [ 132.283647] down_trylock+0xe/0x70 [ 132.283661] ? vprintk+0x84/0xa0 [ 132.283678] __down_trylock_console_sem+0x3b/0xd0 [ 132.283696] vprintk_emit+0x16b/0x560 [ 132.283715] vprintk+0x84/0xa0 [ 132.283733] _printk+0xba/0xf1 [ 132.283751] ? record_print_text.cold+0x16/0x16 [ 132.283771] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 132.283785] ? lock_downgrade+0x6d0/0x6d0 [ 132.283803] ? report_bug.cold+0x66/0xab [ 132.283817] ? group_sched_out.part.0+0x2c7/0x460 [ 132.283829] report_bug.cold+0x72/0xab [ 132.283844] handle_bug+0x3c/0x70 [ 132.283857] exc_invalid_op+0x14/0x50 [ 132.283872] asm_exc_invalid_op+0x16/0x20 [ 132.283890] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.283903] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.283914] RSP: 0018:ffff888042797c48 EFLAGS: 00010006 [ 132.283924] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.283931] RDX: ffff88800ff18000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.283939] RBP: ffff888042198000 R08: 0000000000000005 R09: 0000000000000001 [ 132.283947] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888017518c00 [ 132.283954] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.283966] ? group_sched_out.part.0+0x2c7/0x460 [ 132.283979] ? group_sched_out.part.0+0x2c7/0x460 [ 132.283991] ctx_sched_out+0x8f1/0xc10 [ 132.284004] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.284019] ? lock_is_held_type+0xd7/0x130 [ 132.284038] ? __perf_cgroup_move+0x160/0x160 [ 132.284050] ? set_next_entity+0x304/0x550 [ 132.284068] ? update_curr+0x267/0x740 [ 132.284087] ? lock_is_held_type+0xd7/0x130 [ 132.284105] __schedule+0xedd/0x2470 [ 132.284119] ? io_schedule_timeout+0x150/0x150 [ 132.284131] ? __x64_sys_futex_time32+0x480/0x480 [ 132.284145] schedule+0xda/0x1b0 [ 132.284156] exit_to_user_mode_prepare+0x114/0x1a0 [ 132.284177] syscall_exit_to_user_mode+0x19/0x40 [ 132.284195] do_syscall_64+0x48/0x90 [ 132.284209] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.284227] RIP: 0033:0x7f0f4c09db19 [ 132.284236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.284247] RSP: 002b:00007f0f49613218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.284258] RAX: 0000000000000001 RBX: 00007f0f4c1b0f68 RCX: 00007f0f4c09db19 [ 132.284266] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f4c1b0f6c [ 132.284273] RBP: 00007f0f4c1b0f60 R08: 000000000000000e R09: 0000000000000000 [ 132.284280] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f0f4c1b0f6c [ 132.284288] R13: 00007ffc0793c9af R14: 00007f0f49613300 R15: 0000000000022000 [ 132.284300] [ 132.343979] WARNING: CPU: 1 PID: 3930 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 132.344678] Modules linked in: [ 132.344921] CPU: 1 PID: 3930 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220913 #1 [ 132.345538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.346380] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.346778] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.348141] RSP: 0018:ffff888042797c48 EFLAGS: 00010006 [ 132.348539] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.349071] RDX: ffff88800ff18000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.349612] RBP: ffff888042198000 R08: 0000000000000005 R09: 0000000000000001 [ 132.350154] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888017518c00 [ 132.350684] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.351212] FS: 00007f0f49613700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 132.351824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.352254] CR2: 000055d5710db4c8 CR3: 00000000417da000 CR4: 0000000000350ee0 [ 132.352791] Call Trace: [ 132.352992] [ 132.353170] ctx_sched_out+0x8f1/0xc10 [ 132.353477] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.353863] ? lock_is_held_type+0xd7/0x130 [ 132.354199] ? __perf_cgroup_move+0x160/0x160 [ 132.354543] ? set_next_entity+0x304/0x550 [ 132.354874] ? update_curr+0x267/0x740 [ 132.355184] ? lock_is_held_type+0xd7/0x130 [ 132.355521] __schedule+0xedd/0x2470 [ 132.355812] ? io_schedule_timeout+0x150/0x150 [ 132.356165] ? __x64_sys_futex_time32+0x480/0x480 [ 132.356537] schedule+0xda/0x1b0 [ 132.356798] exit_to_user_mode_prepare+0x114/0x1a0 [ 132.357180] syscall_exit_to_user_mode+0x19/0x40 [ 132.357546] do_syscall_64+0x48/0x90 [ 132.357832] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.358231] RIP: 0033:0x7f0f4c09db19 [ 132.358513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.359884] RSP: 002b:00007f0f49613218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.360444] RAX: 0000000000000001 RBX: 00007f0f4c1b0f68 RCX: 00007f0f4c09db19 [ 132.360979] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f4c1b0f6c [ 132.361515] RBP: 00007f0f4c1b0f60 R08: 000000000000000e R09: 0000000000000000 [ 132.362052] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f0f4c1b0f6c [ 132.362598] R13: 00007ffc0793c9af R14: 00007f0f49613300 R15: 0000000000022000 [ 132.363137] [ 132.363324] irq event stamp: 2540 [ 132.363583] hardirqs last enabled at (2539): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 132.364296] hardirqs last disabled at (2540): [] __schedule+0x1225/0x2470 [ 132.364912] softirqs last enabled at (2124): [] __irq_exit_rcu+0x11b/0x180 [ 132.365552] softirqs last disabled at (2119): [] __irq_exit_rcu+0x11b/0x180 [ 132.366201] ---[ end trace 0000000000000000 ]--- [ 132.565814] syz-executor.3 (3930) used greatest stack depth: 24560 bytes left 17:07:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000270001"], 0x14}}, 0x0) 17:07:07 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xf0004009}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x3d}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000007f00)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@generic="026b02db13cfb35673"]}, 0x1c}], 0x1}, 0x0) 17:07:07 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000036c0)={0x0, 0x3938700}) 17:07:07 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40a81, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0x9) 17:07:07 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x0, @fixed}}}, 0xe) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 17:07:07 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) [ 132.943774] audit: type=1400 audit(1663088827.174:9): avc: denied { write } for pid=3971 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:07:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 132.961746] Bluetooth: hci6: SCO packet for unknown connection handle 0 17:07:07 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r5, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 17:07:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 17:07:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) 17:07:07 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 17:07:07 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40a81, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0x9) 17:07:07 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 17:07:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e, 0xa0, 0xfc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x4) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x2, 0xc1, 0xf9, 0x0, 0xd26, 0x4854d, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x42000, 0x200, 0x40, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x0, 0x2, 0x371}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 17:07:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000270001"], 0x14}}, 0x0) 17:07:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 17:07:07 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xf0004009}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x3d}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 132.965660] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 133.265352] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.266488] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.266945] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.267422] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.267918] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 133.270551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.270971] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.271582] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.272477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.272859] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.273443] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.274570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.274954] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.275551] Buffer I/O error on dev sr0, logical block 2, async page read [ 133.276353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.276732] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.277282] Buffer I/O error on dev sr0, logical block 3, async page read [ 133.281719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.282100] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.282636] Buffer I/O error on dev sr0, logical block 4, async page read [ 133.283509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.283879] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.284427] Buffer I/O error on dev sr0, logical block 5, async page read [ 133.285076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.285446] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.285992] Buffer I/O error on dev sr0, logical block 6, async page read [ 133.286476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.286837] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.287415] Buffer I/O error on dev sr0, logical block 7, async page read [ 133.289227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.289622] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.290208] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.297503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.297898] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.298569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.302448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.302994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.303570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.304279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.304852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.371424] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.372095] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.372550] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.373019] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 17:07:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 17:07:07 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 17:07:07 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xf0004009}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x3d}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:07 executing program 2: r0 = gettid() capget(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)) 17:07:07 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40a81, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0x9) 17:07:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000270001"], 0x14}}, 0x0) 17:07:07 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 17:07:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e, 0xa0, 0xfc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x4) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x2, 0xc1, 0xf9, 0x0, 0xd26, 0x4854d, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x42000, 0x200, 0x40, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x0, 0x2, 0x371}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 133.443013] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 17:07:07 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) [ 133.489538] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.490483] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.491175] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.491826] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.493264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.496182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.496873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.497855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.498563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.499711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.500425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.501125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.501975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.502793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.503480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.508000] hrtimer: interrupt took 18925 ns 17:07:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000270001"], 0x14}}, 0x0) 17:07:07 executing program 7: setregid(0xffffffffffffffff, 0xffffffffffffffff) 17:07:07 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) [ 133.577898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.579272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.580316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.584501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.585116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:07:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 17:07:07 executing program 2: r0 = gettid() capget(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)) 17:07:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e, 0xa0, 0xfc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x4) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x2, 0xc1, 0xf9, 0x0, 0xd26, 0x4854d, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x42000, 0x200, 0x40, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x0, 0x2, 0x371}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 17:07:07 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40a81, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0x9) 17:07:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 17:07:07 executing program 2: r0 = gettid() capget(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)) [ 133.714776] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.715521] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.716029] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.716512] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.717706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.718305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.718856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.719885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.720418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.720939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.721591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.722144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.722831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.723415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.723913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.724449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.724944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.725526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.726062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.726607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.727268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.727780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.728326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.728848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.729396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.729915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.730441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.730956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.731663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.732225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.732764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.733334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.733918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.734482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.735092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.735661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.736391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.736910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.737450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.738017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.738553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.739112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.739643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.740200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.740831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.741337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.741848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.742393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.742914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.743463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.744050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.744563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.745886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.746442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.811792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.826409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.846712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.861370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.862005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.862555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:07:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e, 0xa0, 0xfc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x4) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x2, 0xc1, 0xf9, 0x0, 0xd26, 0x4854d, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x42000, 0x200, 0x40, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x0, 0x2, 0x371}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 17:07:08 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 17:07:08 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x881, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x1) 17:07:08 executing program 2: r0 = gettid() capget(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)) 17:07:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 17:07:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) write$sndseq(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close_range(r1, r4, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 17:07:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:08 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xf0004009}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x3d}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 134.034410] audit: type=1400 audit(1663088828.265:10): avc: denied { read } for pid=4068 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:07:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 17:07:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) write$sndseq(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close_range(r1, r4, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 17:07:08 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0xec0}], 0x1) [ 134.253687] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 134.255065] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 134.255974] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 134.256860] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 134.258721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.259380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.259894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.260932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.261490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.262196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.265185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.266293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.267461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.269190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.269703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.270326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.270902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.271624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.272286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.272898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.273578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.274184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.274685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.275215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.275740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.276281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.276787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.277350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.278015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.278550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.279243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.279775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.280361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.280858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.281438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.281944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.282616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.283129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.283685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.284246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.284777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.285303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.285828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.286400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.287046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.287580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.288138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.288667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.289233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.289755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.290291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.290816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:07:08 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 17:07:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) write$sndseq(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close_range(r1, r4, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 17:07:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 134.516581] loop3: detected capacity change from 0 to 40 17:07:08 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0xec0}], 0x1) [ 134.771424] syz-executor.3: attempt to access beyond end of device [ 134.771424] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 17:07:09 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) write$sndseq(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close_range(r1, r4, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 17:07:09 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x881, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x1) 17:07:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 17:07:09 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0xec0}], 0x1) 17:07:09 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 17:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0xfd54) 17:07:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 17:07:09 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 134.882928] loop3: detected capacity change from 0 to 40 [ 134.940469] syz-executor.3: attempt to access beyond end of device [ 134.940469] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 17:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0xfd54) 17:07:09 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0xec0}], 0x1) 17:07:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 17:07:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 17:07:09 executing program 2: prctl$PR_SET_DUMPABLE(0x39, 0x2) 17:07:09 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 17:07:09 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x2) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x1cd802, 0x0) openat2(r1, 0x0, &(0x7f00000001c0)={0x101000, 0x0, 0x11}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 17:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0xfd54) [ 135.123402] loop3: detected capacity change from 0 to 40 17:07:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) [ 135.179611] syz-executor.3: attempt to access beyond end of device [ 135.179611] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 17:07:09 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="03000000000000bc2186382458468ed2b83a00666973653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:09 executing program 2: prctl$PR_SET_DUMPABLE(0x39, 0x2) 17:07:09 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x881, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x1) 17:07:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0xfd54) 17:07:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 17:07:09 executing program 2: prctl$PR_SET_DUMPABLE(0x39, 0x2) 17:07:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) [ 135.282182] loop3: detected capacity change from 0 to 40 [ 136.162289] syz-executor.3 (4161) used greatest stack depth: 24344 bytes left 17:07:10 executing program 5: ioprio_set$pid(0x2, 0x0, 0x2007) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:10 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x881, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x1) 17:07:10 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x2) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x1cd802, 0x0) openat2(r1, 0x0, &(0x7f00000001c0)={0x101000, 0x0, 0x11}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 17:07:10 executing program 2: prctl$PR_SET_DUMPABLE(0x39, 0x2) 17:07:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x10, 0x0, @multicast2}}}, 0x108) 17:07:10 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 17:07:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010200000000000000000c0000000000000000000000040000000c001d"], 0x2c}], 0x1}, 0x0) [ 136.214250] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 136.214817] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 17:07:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:10 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [ 138.139020] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 138.139647] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 17:07:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 17:07:12 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:12 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:12 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x2) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x1cd802, 0x0) openat2(r1, 0x0, &(0x7f00000001c0)={0x101000, 0x0, 0x11}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 17:07:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 17:07:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x0, &(0x7f0000000480)) 17:07:12 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x5, 0x0, r1, &(0x7f0000000080)}]) 17:07:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2288, &(0x7f0000000000)) 17:07:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 17:07:12 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000001000)={0x14}, 0x14}, 0x8}, 0x0) 17:07:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:12 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x5, 0x0, r1, &(0x7f0000000080)}]) 17:07:12 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 17:07:12 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:12 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000001000)={0x14}, 0x14}, 0x8}, 0x0) 17:07:12 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 17:07:12 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x2) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x1cd802, 0x0) openat2(r1, 0x0, &(0x7f00000001c0)={0x101000, 0x0, 0x11}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 17:07:12 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000001000)={0x14}, 0x14}, 0x8}, 0x0) 17:07:12 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x5, 0x0, r1, &(0x7f0000000080)}]) 17:07:12 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:12 executing program 7: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:12 executing program 0: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:12 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x5, 0x0, r1, &(0x7f0000000080)}]) 17:07:12 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:12 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000001000)={0x14}, 0x14}, 0x8}, 0x0) 17:07:12 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 0: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:13 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 7: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:13 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5735, &(0x7f0000000380)={0x0, 0x135b, 0x8, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write(r1, &(0x7f0000000080)="01", 0x292e9) 17:07:13 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) 17:07:13 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9) openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) 17:07:13 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') prea VM DIAGNOSIS: 17:07:06 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88800e1eb580 RSI=ffffffff8112af6b RDI=0000000000000006 RBP=0000000009193820 RSP=ffff8880182ffcc8 R8 =0000000000000006 R9 =0000000000000001 R10=0000000000080000 R11=0000000000000001 R12=0000000000000000 R13=0000000000080000 R14=0000000000004000 R15=ffff888008479280 RIP=ffffffff81461777 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbc58ad38c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11003686f4 CR3=000000000d756000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffff0000ff000000 YMM02=0000000000000000 0000000000000000 000055a652374010 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 000055a600716d2f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 000055a652bff2a0 000055a652bff280 YMM06=0000000000000000 0000000000000000 000055a652bf2540 ffffffff00000002 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000020000000 0000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042797698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0f49613700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d5710db4c8 CR3=00000000417da000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 00007f0f4c1847e0 00007f0f4c1847c0 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000