Warning: Permanently added '[localhost]:21146' (ECDSA) to the list of known hosts. 2022/09/13 17:32:40 fuzzer started 2022/09/13 17:32:40 dialing manager at localhost:36597 syzkaller login: [ 36.268810] cgroup: Unknown subsys name 'net' [ 36.390827] cgroup: Unknown subsys name 'rlimit' 2022/09/13 17:32:54 syscalls: 2215 2022/09/13 17:32:54 code coverage: enabled 2022/09/13 17:32:54 comparison tracing: enabled 2022/09/13 17:32:54 extra coverage: enabled 2022/09/13 17:32:54 setuid sandbox: enabled 2022/09/13 17:32:54 namespace sandbox: enabled 2022/09/13 17:32:54 Android sandbox: enabled 2022/09/13 17:32:54 fault injection: enabled 2022/09/13 17:32:54 leak checking: enabled 2022/09/13 17:32:54 net packet injection: enabled 2022/09/13 17:32:54 net device setup: enabled 2022/09/13 17:32:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 17:32:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 17:32:54 USB emulation: enabled 2022/09/13 17:32:54 hci packet injection: enabled 2022/09/13 17:32:54 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 17:32:54 802.15.4 emulation: enabled 2022/09/13 17:32:54 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 17:32:55 fetching corpus: 45, signal 24989/28636 (executing program) 2022/09/13 17:32:55 fetching corpus: 94, signal 41115/46219 (executing program) 2022/09/13 17:32:55 fetching corpus: 144, signal 53407/59867 (executing program) 2022/09/13 17:32:55 fetching corpus: 194, signal 61918/69705 (executing program) 2022/09/13 17:32:55 fetching corpus: 244, signal 70294/79289 (executing program) 2022/09/13 17:32:55 fetching corpus: 294, signal 80953/90917 (executing program) 2022/09/13 17:32:56 fetching corpus: 344, signal 84891/96019 (executing program) 2022/09/13 17:32:56 fetching corpus: 394, signal 92202/104218 (executing program) 2022/09/13 17:32:56 fetching corpus: 444, signal 95149/108272 (executing program) 2022/09/13 17:32:56 fetching corpus: 494, signal 100292/114286 (executing program) 2022/09/13 17:32:56 fetching corpus: 544, signal 104795/119647 (executing program) 2022/09/13 17:32:56 fetching corpus: 594, signal 107078/122935 (executing program) 2022/09/13 17:32:57 fetching corpus: 644, signal 111129/127803 (executing program) 2022/09/13 17:32:57 fetching corpus: 692, signal 114111/131650 (executing program) 2022/09/13 17:32:57 fetching corpus: 742, signal 117038/135358 (executing program) 2022/09/13 17:32:57 fetching corpus: 792, signal 119522/138701 (executing program) 2022/09/13 17:32:57 fetching corpus: 842, signal 122334/142288 (executing program) 2022/09/13 17:32:57 fetching corpus: 891, signal 126653/147093 (executing program) 2022/09/13 17:32:57 fetching corpus: 941, signal 128457/149707 (executing program) 2022/09/13 17:32:58 fetching corpus: 991, signal 131038/152915 (executing program) 2022/09/13 17:32:58 fetching corpus: 1041, signal 132929/155571 (executing program) 2022/09/13 17:32:58 fetching corpus: 1091, signal 135157/158399 (executing program) 2022/09/13 17:32:58 fetching corpus: 1141, signal 137444/161269 (executing program) 2022/09/13 17:32:58 fetching corpus: 1191, signal 139091/163595 (executing program) 2022/09/13 17:32:58 fetching corpus: 1241, signal 141231/166318 (executing program) 2022/09/13 17:32:58 fetching corpus: 1291, signal 143399/169042 (executing program) 2022/09/13 17:32:59 fetching corpus: 1341, signal 146288/172302 (executing program) 2022/09/13 17:32:59 fetching corpus: 1391, signal 148642/175092 (executing program) 2022/09/13 17:32:59 fetching corpus: 1441, signal 151380/178119 (executing program) 2022/09/13 17:32:59 fetching corpus: 1491, signal 153377/180607 (executing program) 2022/09/13 17:32:59 fetching corpus: 1541, signal 154718/182497 (executing program) 2022/09/13 17:32:59 fetching corpus: 1591, signal 156886/185029 (executing program) 2022/09/13 17:32:59 fetching corpus: 1641, signal 158219/186849 (executing program) 2022/09/13 17:32:59 fetching corpus: 1691, signal 159626/188734 (executing program) 2022/09/13 17:33:00 fetching corpus: 1741, signal 161379/190841 (executing program) 2022/09/13 17:33:00 fetching corpus: 1791, signal 163301/193073 (executing program) 2022/09/13 17:33:00 fetching corpus: 1841, signal 164796/194924 (executing program) 2022/09/13 17:33:00 fetching corpus: 1891, signal 165589/196298 (executing program) 2022/09/13 17:33:00 fetching corpus: 1941, signal 167648/198511 (executing program) 2022/09/13 17:33:00 fetching corpus: 1991, signal 169865/200836 (executing program) 2022/09/13 17:33:00 fetching corpus: 2041, signal 171132/202468 (executing program) 2022/09/13 17:33:01 fetching corpus: 2091, signal 172700/204317 (executing program) 2022/09/13 17:33:01 fetching corpus: 2141, signal 173690/205691 (executing program) 2022/09/13 17:33:01 fetching corpus: 2191, signal 174936/207283 (executing program) 2022/09/13 17:33:01 fetching corpus: 2241, signal 176624/209123 (executing program) 2022/09/13 17:33:01 fetching corpus: 2291, signal 177310/210322 (executing program) 2022/09/13 17:33:01 fetching corpus: 2341, signal 178404/211768 (executing program) 2022/09/13 17:33:01 fetching corpus: 2391, signal 180255/213620 (executing program) 2022/09/13 17:33:02 fetching corpus: 2441, signal 181878/215351 (executing program) 2022/09/13 17:33:02 fetching corpus: 2491, signal 182869/216669 (executing program) 2022/09/13 17:33:02 fetching corpus: 2541, signal 183594/217828 (executing program) 2022/09/13 17:33:02 fetching corpus: 2590, signal 184639/219138 (executing program) 2022/09/13 17:33:02 fetching corpus: 2640, signal 185659/220418 (executing program) 2022/09/13 17:33:02 fetching corpus: 2690, signal 186710/221640 (executing program) 2022/09/13 17:33:02 fetching corpus: 2740, signal 187360/222664 (executing program) 2022/09/13 17:33:03 fetching corpus: 2790, signal 188593/223941 (executing program) 2022/09/13 17:33:03 fetching corpus: 2840, signal 189372/224996 (executing program) 2022/09/13 17:33:03 fetching corpus: 2890, signal 190189/226052 (executing program) 2022/09/13 17:33:03 fetching corpus: 2940, signal 191250/227246 (executing program) 2022/09/13 17:33:03 fetching corpus: 2990, signal 192394/228521 (executing program) 2022/09/13 17:33:03 fetching corpus: 3040, signal 193512/229727 (executing program) 2022/09/13 17:33:03 fetching corpus: 3090, signal 194497/230795 (executing program) 2022/09/13 17:33:03 fetching corpus: 3140, signal 195415/231857 (executing program) 2022/09/13 17:33:04 fetching corpus: 3190, signal 197004/233303 (executing program) 2022/09/13 17:33:04 fetching corpus: 3240, signal 197716/234247 (executing program) 2022/09/13 17:33:04 fetching corpus: 3290, signal 198968/235436 (executing program) 2022/09/13 17:33:04 fetching corpus: 3340, signal 199703/236322 (executing program) 2022/09/13 17:33:04 fetching corpus: 3390, signal 200850/237445 (executing program) 2022/09/13 17:33:04 fetching corpus: 3440, signal 202107/238577 (executing program) 2022/09/13 17:33:04 fetching corpus: 3490, signal 203471/239771 (executing program) 2022/09/13 17:33:04 fetching corpus: 3540, signal 204155/240614 (executing program) 2022/09/13 17:33:05 fetching corpus: 3590, signal 205005/241617 (executing program) 2022/09/13 17:33:05 fetching corpus: 3640, signal 206051/242593 (executing program) 2022/09/13 17:33:05 fetching corpus: 3690, signal 206718/243370 (executing program) 2022/09/13 17:33:05 fetching corpus: 3740, signal 207436/244164 (executing program) 2022/09/13 17:33:05 fetching corpus: 3790, signal 208244/245039 (executing program) 2022/09/13 17:33:05 fetching corpus: 3840, signal 209359/246022 (executing program) 2022/09/13 17:33:05 fetching corpus: 3890, signal 210287/246882 (executing program) 2022/09/13 17:33:05 fetching corpus: 3940, signal 210748/247557 (executing program) 2022/09/13 17:33:06 fetching corpus: 3990, signal 211676/248400 (executing program) 2022/09/13 17:33:06 fetching corpus: 4039, signal 212732/249327 (executing program) 2022/09/13 17:33:06 fetching corpus: 4089, signal 213960/250282 (executing program) 2022/09/13 17:33:06 fetching corpus: 4139, signal 214726/251015 (executing program) 2022/09/13 17:33:06 fetching corpus: 4189, signal 215542/251743 (executing program) 2022/09/13 17:33:06 fetching corpus: 4239, signal 216302/252483 (executing program) 2022/09/13 17:33:06 fetching corpus: 4289, signal 216874/253117 (executing program) 2022/09/13 17:33:07 fetching corpus: 4339, signal 217575/253799 (executing program) 2022/09/13 17:33:07 fetching corpus: 4389, signal 218302/254392 (executing program) 2022/09/13 17:33:07 fetching corpus: 4439, signal 218944/255020 (executing program) 2022/09/13 17:33:07 fetching corpus: 4489, signal 219942/255727 (executing program) 2022/09/13 17:33:07 fetching corpus: 4539, signal 220495/256304 (executing program) 2022/09/13 17:33:07 fetching corpus: 4589, signal 221105/256896 (executing program) 2022/09/13 17:33:08 fetching corpus: 4639, signal 221857/257505 (executing program) 2022/09/13 17:33:08 fetching corpus: 4689, signal 222537/258173 (executing program) 2022/09/13 17:33:08 fetching corpus: 4739, signal 223098/258714 (executing program) 2022/09/13 17:33:08 fetching corpus: 4789, signal 223945/259296 (executing program) 2022/09/13 17:33:08 fetching corpus: 4839, signal 224994/259962 (executing program) 2022/09/13 17:33:08 fetching corpus: 4889, signal 225471/260462 (executing program) 2022/09/13 17:33:08 fetching corpus: 4939, signal 225984/260928 (executing program) 2022/09/13 17:33:09 fetching corpus: 4989, signal 226526/261422 (executing program) 2022/09/13 17:33:09 fetching corpus: 5039, signal 227056/261929 (executing program) 2022/09/13 17:33:09 fetching corpus: 5089, signal 227609/262356 (executing program) 2022/09/13 17:33:09 fetching corpus: 5139, signal 228234/262816 (executing program) 2022/09/13 17:33:09 fetching corpus: 5189, signal 229213/263384 (executing program) 2022/09/13 17:33:09 fetching corpus: 5239, signal 229998/263840 (executing program) 2022/09/13 17:33:09 fetching corpus: 5289, signal 230465/264310 (executing program) 2022/09/13 17:33:10 fetching corpus: 5339, signal 231193/264778 (executing program) 2022/09/13 17:33:10 fetching corpus: 5389, signal 231641/265165 (executing program) 2022/09/13 17:33:10 fetching corpus: 5439, signal 232312/265618 (executing program) 2022/09/13 17:33:10 fetching corpus: 5489, signal 232990/266045 (executing program) 2022/09/13 17:33:10 fetching corpus: 5539, signal 233710/266464 (executing program) 2022/09/13 17:33:10 fetching corpus: 5589, signal 234537/266849 (executing program) 2022/09/13 17:33:10 fetching corpus: 5639, signal 235179/267278 (executing program) 2022/09/13 17:33:10 fetching corpus: 5689, signal 235807/267803 (executing program) 2022/09/13 17:33:11 fetching corpus: 5739, signal 236585/268229 (executing program) 2022/09/13 17:33:11 fetching corpus: 5789, signal 237461/268704 (executing program) 2022/09/13 17:33:11 fetching corpus: 5839, signal 237846/269014 (executing program) 2022/09/13 17:33:11 fetching corpus: 5889, signal 238404/269354 (executing program) 2022/09/13 17:33:11 fetching corpus: 5939, signal 238860/269664 (executing program) 2022/09/13 17:33:11 fetching corpus: 5989, signal 239370/270037 (executing program) 2022/09/13 17:33:11 fetching corpus: 6039, signal 239822/270331 (executing program) 2022/09/13 17:33:12 fetching corpus: 6089, signal 240431/270689 (executing program) 2022/09/13 17:33:12 fetching corpus: 6139, signal 240820/270935 (executing program) 2022/09/13 17:33:12 fetching corpus: 6189, signal 241591/271270 (executing program) 2022/09/13 17:33:12 fetching corpus: 6239, signal 242703/271744 (executing program) 2022/09/13 17:33:12 fetching corpus: 6289, signal 243575/272044 (executing program) 2022/09/13 17:33:12 fetching corpus: 6339, signal 244167/272318 (executing program) 2022/09/13 17:33:13 fetching corpus: 6389, signal 244794/272579 (executing program) 2022/09/13 17:33:13 fetching corpus: 6439, signal 245352/272818 (executing program) 2022/09/13 17:33:13 fetching corpus: 6489, signal 246060/273057 (executing program) 2022/09/13 17:33:13 fetching corpus: 6539, signal 246727/273290 (executing program) 2022/09/13 17:33:13 fetching corpus: 6589, signal 247112/273497 (executing program) 2022/09/13 17:33:13 fetching corpus: 6639, signal 247677/273605 (executing program) 2022/09/13 17:33:13 fetching corpus: 6689, signal 248375/273730 (executing program) 2022/09/13 17:33:14 fetching corpus: 6739, signal 249239/273737 (executing program) 2022/09/13 17:33:14 fetching corpus: 6789, signal 249768/273770 (executing program) 2022/09/13 17:33:14 fetching corpus: 6839, signal 250262/273778 (executing program) 2022/09/13 17:33:14 fetching corpus: 6889, signal 250670/273784 (executing program) 2022/09/13 17:33:14 fetching corpus: 6939, signal 251124/273784 (executing program) 2022/09/13 17:33:14 fetching corpus: 6989, signal 251939/273810 (executing program) 2022/09/13 17:33:14 fetching corpus: 7039, signal 252309/273813 (executing program) 2022/09/13 17:33:15 fetching corpus: 7089, signal 253147/273819 (executing program) 2022/09/13 17:33:15 fetching corpus: 7139, signal 254060/273856 (executing program) 2022/09/13 17:33:15 fetching corpus: 7189, signal 254384/273873 (executing program) 2022/09/13 17:33:15 fetching corpus: 7239, signal 254969/273906 (executing program) 2022/09/13 17:33:15 fetching corpus: 7288, signal 255316/273911 (executing program) 2022/09/13 17:33:15 fetching corpus: 7338, signal 255942/273912 (executing program) 2022/09/13 17:33:15 fetching corpus: 7388, signal 256372/273919 (executing program) 2022/09/13 17:33:16 fetching corpus: 7438, signal 257261/273938 (executing program) 2022/09/13 17:33:16 fetching corpus: 7487, signal 257735/273950 (executing program) 2022/09/13 17:33:16 fetching corpus: 7537, signal 258022/273971 (executing program) 2022/09/13 17:33:16 fetching corpus: 7587, signal 258752/273976 (executing program) 2022/09/13 17:33:16 fetching corpus: 7637, signal 259378/273998 (executing program) 2022/09/13 17:33:16 fetching corpus: 7687, signal 259642/274003 (executing program) 2022/09/13 17:33:16 fetching corpus: 7737, signal 260162/274008 (executing program) 2022/09/13 17:33:17 fetching corpus: 7787, signal 260571/274025 (executing program) 2022/09/13 17:33:17 fetching corpus: 7837, signal 261100/274030 (executing program) 2022/09/13 17:33:17 fetching corpus: 7887, signal 261899/274039 (executing program) 2022/09/13 17:33:17 fetching corpus: 7937, signal 262336/274047 (executing program) 2022/09/13 17:33:17 fetching corpus: 7987, signal 262834/274058 (executing program) 2022/09/13 17:33:17 fetching corpus: 8037, signal 263076/274069 (executing program) 2022/09/13 17:33:17 fetching corpus: 8087, signal 263328/274076 (executing program) 2022/09/13 17:33:18 fetching corpus: 8137, signal 263887/274079 (executing program) 2022/09/13 17:33:18 fetching corpus: 8187, signal 264433/274085 (executing program) 2022/09/13 17:33:18 fetching corpus: 8206, signal 264660/274085 (executing program) 2022/09/13 17:33:18 fetching corpus: 8206, signal 264660/274085 (executing program) 2022/09/13 17:33:21 starting 8 fuzzer processes 17:33:21 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x40383d03, &(0x7f0000000080)) 17:33:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:33:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) 17:33:21 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:33:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "958106"}) 17:33:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 76.546944] audit: type=1400 audit(1663090401.325:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:33:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200)={[{@grpjquota}, {@max_dir_size_kb}]}) 17:33:21 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 77.964840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.966895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.968489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.970592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.971613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.972918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.974848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.977668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.020348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.021482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.023988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.028259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.030234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.031775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.032922] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.033013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.035643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.037667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.038685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.039654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.040707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.043922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.045029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.047292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.047940] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.048690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.050572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.052197] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.052821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.053324] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.055858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.056000] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.060725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.061967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.062002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.062921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.065252] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.066369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.072620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.078567] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.080676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.082308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.083811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.086648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.088292] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.089497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.091151] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.092671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.093963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.095460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.105623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.109252] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.109597] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.113617] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.113782] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.118140] Bluetooth: hci6: HCI_REQ-0x0c1a [ 80.092658] Bluetooth: hci1: command 0x0409 tx timeout [ 80.093306] Bluetooth: hci2: command 0x0409 tx timeout [ 80.093679] Bluetooth: hci0: command 0x0409 tx timeout [ 80.155157] Bluetooth: hci6: command 0x0409 tx timeout [ 80.155995] Bluetooth: hci5: command 0x0409 tx timeout [ 80.156172] Bluetooth: hci7: command 0x0409 tx timeout [ 80.156893] Bluetooth: hci4: command 0x0409 tx timeout [ 80.158640] Bluetooth: hci3: command 0x0409 tx timeout [ 82.139202] Bluetooth: hci0: command 0x041b tx timeout [ 82.141840] Bluetooth: hci2: command 0x041b tx timeout [ 82.142835] Bluetooth: hci1: command 0x041b tx timeout [ 82.203192] Bluetooth: hci3: command 0x041b tx timeout [ 82.205248] Bluetooth: hci4: command 0x041b tx timeout [ 82.206006] Bluetooth: hci7: command 0x041b tx timeout [ 82.208513] Bluetooth: hci5: command 0x041b tx timeout [ 82.209357] Bluetooth: hci6: command 0x041b tx timeout [ 84.187204] Bluetooth: hci1: command 0x040f tx timeout [ 84.187727] Bluetooth: hci2: command 0x040f tx timeout [ 84.188202] Bluetooth: hci0: command 0x040f tx timeout [ 84.251143] Bluetooth: hci6: command 0x040f tx timeout [ 84.251629] Bluetooth: hci5: command 0x040f tx timeout [ 84.252103] Bluetooth: hci7: command 0x040f tx timeout [ 84.252547] Bluetooth: hci4: command 0x040f tx timeout [ 84.253358] Bluetooth: hci3: command 0x040f tx timeout [ 86.235125] Bluetooth: hci0: command 0x0419 tx timeout [ 86.235605] Bluetooth: hci2: command 0x0419 tx timeout [ 86.236000] Bluetooth: hci1: command 0x0419 tx timeout [ 86.299209] Bluetooth: hci3: command 0x0419 tx timeout [ 86.299672] Bluetooth: hci4: command 0x0419 tx timeout [ 86.300095] Bluetooth: hci7: command 0x0419 tx timeout [ 86.300494] Bluetooth: hci5: command 0x0419 tx timeout [ 86.300894] Bluetooth: hci6: command 0x0419 tx timeout [ 130.535699] audit: type=1400 audit(1663090455.314:7): avc: denied { open } for pid=3885 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.537232] audit: type=1400 audit(1663090455.314:8): avc: denied { kernel } for pid=3885 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.564807] ------------[ cut here ]------------ [ 130.565277] [ 130.565281] ====================================================== [ 130.565284] WARNING: possible circular locking dependency detected [ 130.565288] 6.0.0-rc5-next-20220913 #1 Not tainted [ 130.565295] ------------------------------------------------------ [ 130.565298] syz-executor.5/3886 is trying to acquire lock: [ 130.565304] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.565341] [ 130.565341] but task is already holding lock: [ 130.565344] ffff888018b79020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.565370] [ 130.565370] which lock already depends on the new lock. [ 130.565370] [ 130.565373] [ 130.565373] the existing dependency chain (in reverse order) is: [ 130.565376] [ 130.565376] -> #3 (&ctx->lock){....}-{2:2}: [ 130.565390] _raw_spin_lock+0x2a/0x40 [ 130.565407] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.565419] __schedule+0xedd/0x2470 [ 130.565429] schedule+0xda/0x1b0 [ 130.565438] futex_wait_queue+0xf5/0x1e0 [ 130.565449] futex_wait+0x28e/0x690 [ 130.565459] do_futex+0x2ff/0x380 [ 130.565468] __x64_sys_futex+0x1c6/0x4d0 [ 130.565478] do_syscall_64+0x3b/0x90 [ 130.565491] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.565509] [ 130.565509] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.565522] _raw_spin_lock_nested+0x30/0x40 [ 130.565537] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.565550] task_fork_fair+0x63/0x4d0 [ 130.565566] sched_cgroup_fork+0x3d0/0x540 [ 130.565580] copy_process+0x3f9e/0x6df0 [ 130.565591] kernel_clone+0xe7/0x890 [ 130.565600] user_mode_thread+0xad/0xf0 [ 130.565610] rest_init+0x24/0x250 [ 130.565626] arch_call_rest_init+0xf/0x14 [ 130.565664] start_kernel+0x4c1/0x4e6 [ 130.565681] secondary_startup_64_no_verify+0xe0/0xeb [ 130.565695] [ 130.565695] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.565709] _raw_spin_lock_irqsave+0x39/0x60 [ 130.565724] try_to_wake_up+0xab/0x1920 [ 130.565737] up+0x75/0xb0 [ 130.565748] __up_console_sem+0x6e/0x80 [ 130.565764] console_unlock+0x46a/0x590 [ 130.565780] do_con_write+0xc05/0x1d50 [ 130.565791] con_write+0x21/0x40 [ 130.565800] n_tty_write+0x4d4/0xfe0 [ 130.565813] file_tty_write.constprop.0+0x49c/0x8f0 [ 130.565824] vfs_write+0x9c3/0xd90 [ 130.565842] ksys_write+0x127/0x250 [ 130.565859] do_syscall_64+0x3b/0x90 [ 130.565872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.565889] [ 130.565889] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.565903] __lock_acquire+0x2a02/0x5e70 [ 130.565919] lock_acquire+0x1a2/0x530 [ 130.565935] _raw_spin_lock_irqsave+0x39/0x60 [ 130.565950] down_trylock+0xe/0x70 [ 130.565963] __down_trylock_console_sem+0x3b/0xd0 [ 130.565979] vprintk_emit+0x16b/0x560 [ 130.565996] vprintk+0x84/0xa0 [ 130.566012] _printk+0xba/0xf1 [ 130.566030] report_bug.cold+0x72/0xab [ 130.566042] handle_bug+0x3c/0x70 [ 130.566055] exc_invalid_op+0x14/0x50 [ 130.566068] asm_exc_invalid_op+0x16/0x20 [ 130.566084] group_sched_out.part.0+0x2c7/0x460 [ 130.566094] ctx_sched_out+0x8f1/0xc10 [ 130.566104] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.566116] __schedule+0xedd/0x2470 [ 130.566125] schedule+0xda/0x1b0 [ 130.566135] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.566155] syscall_exit_to_user_mode+0x19/0x40 [ 130.566172] do_syscall_64+0x48/0x90 [ 130.566184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.566201] [ 130.566201] other info that might help us debug this: [ 130.566201] [ 130.566204] Chain exists of: [ 130.566204] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.566204] [ 130.566219] Possible unsafe locking scenario: [ 130.566219] [ 130.566221] CPU0 CPU1 [ 130.566223] ---- ---- [ 130.566225] lock(&ctx->lock); [ 130.566231] lock(&rq->__lock); [ 130.566237] lock(&ctx->lock); [ 130.566243] lock((console_sem).lock); [ 130.566249] [ 130.566249] *** DEADLOCK *** [ 130.566249] [ 130.566251] 2 locks held by syz-executor.5/3886: [ 130.566258] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.566283] #1: ffff888018b79020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.566310] [ 130.566310] stack backtrace: [ 130.566313] CPU: 1 PID: 3886 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220913 #1 [ 130.566326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.566334] Call Trace: [ 130.566337] [ 130.566341] dump_stack_lvl+0x8b/0xb3 [ 130.566356] check_noncircular+0x263/0x2e0 [ 130.566373] ? format_decode+0x26c/0xb50 [ 130.566388] ? print_circular_bug+0x450/0x450 [ 130.566405] ? queued_spin_lock_slowpath+0xcd/0xc80 [ 130.566423] ? format_decode+0x26c/0xb50 [ 130.566439] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.566457] __lock_acquire+0x2a02/0x5e70 [ 130.566478] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.566501] lock_acquire+0x1a2/0x530 [ 130.566518] ? down_trylock+0xe/0x70 [ 130.566533] ? rcu_read_unlock+0x40/0x40 [ 130.566552] ? __lock_acquire+0x164d/0x5e70 [ 130.566570] ? vprintk+0x84/0xa0 [ 130.566589] _raw_spin_lock_irqsave+0x39/0x60 [ 130.566604] ? down_trylock+0xe/0x70 [ 130.566618] down_trylock+0xe/0x70 [ 130.566631] ? vprintk+0x84/0xa0 [ 130.566649] __down_trylock_console_sem+0x3b/0xd0 [ 130.566666] vprintk_emit+0x16b/0x560 [ 130.566686] vprintk+0x84/0xa0 [ 130.566704] _printk+0xba/0xf1 [ 130.566721] ? record_print_text.cold+0x16/0x16 [ 130.566743] ? report_bug.cold+0x66/0xab [ 130.566757] ? group_sched_out.part.0+0x2c7/0x460 [ 130.566769] report_bug.cold+0x72/0xab [ 130.566784] handle_bug+0x3c/0x70 [ 130.566797] exc_invalid_op+0x14/0x50 [ 130.566812] asm_exc_invalid_op+0x16/0x20 [ 130.566829] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.566843] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.566854] RSP: 0018:ffff888042927c48 EFLAGS: 00010006 [ 130.566863] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.566871] RDX: ffff8880187e8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.566878] RBP: ffff888042940000 R08: 0000000000000005 R09: 0000000000000001 [ 130.566886] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888018b79000 [ 130.566894] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 130.566907] ? group_sched_out.part.0+0x2c7/0x460 [ 130.566922] ? group_sched_out.part.0+0x2c7/0x460 [ 130.566935] ctx_sched_out+0x8f1/0xc10 [ 130.566947] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.566963] ? lock_is_held_type+0xd7/0x130 [ 130.566981] ? __perf_cgroup_move+0x160/0x160 [ 130.566993] ? set_next_entity+0x304/0x550 [ 130.567011] ? update_curr+0x267/0x740 [ 130.567030] ? lock_is_held_type+0xd7/0x130 [ 130.567048] __schedule+0xedd/0x2470 [ 130.567061] ? io_schedule_timeout+0x150/0x150 [ 130.567074] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.567094] schedule+0xda/0x1b0 [ 130.567105] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.567126] syscall_exit_to_user_mode+0x19/0x40 [ 130.567144] do_syscall_64+0x48/0x90 [ 130.567158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.567176] RIP: 0033:0x7f3928228b19 [ 130.567185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.567196] RSP: 002b:00007f392579e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.567206] RAX: 0000000000000001 RBX: 00007f392833bf68 RCX: 00007f3928228b19 [ 130.567214] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f392833bf6c [ 130.567221] RBP: 00007f392833bf60 R08: 000000000000000e R09: 0000000000000000 [ 130.567229] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f392833bf6c [ 130.567236] R13: 00007ffd9abd683f R14: 00007f392579e300 R15: 0000000000022000 [ 130.567248] [ 130.575811] loop2: detected capacity change from 0 to 256 [ 130.576015] WARNING: CPU: 1 PID: 3886 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.576035] Modules linked in: [ 130.576040] CPU: 1 PID: 3886 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220913 #1 [ 130.626255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.627065] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.627463] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.628768] RSP: 0018:ffff888042927c48 EFLAGS: 00010006 [ 130.629156] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.629684] RDX: ffff8880187e8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.630201] RBP: ffff888042940000 R08: 0000000000000005 R09: 0000000000000001 [ 130.630719] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888018b79000 [ 130.631234] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 130.631750] FS: 00007f392579e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 130.632336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.632759] CR2: 00007fa167e1e02c CR3: 0000000042644000 CR4: 0000000000350ee0 [ 130.633277] Call Trace: [ 130.633471] [ 130.633648] ctx_sched_out+0x8f1/0xc10 [ 130.633935] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.634319] ? lock_is_held_type+0xd7/0x130 [ 130.634642] ? __perf_cgroup_move+0x160/0x160 [ 130.634981] ? set_next_entity+0x304/0x550 [ 130.635302] ? update_curr+0x267/0x740 [ 130.635599] ? lock_is_held_type+0xd7/0x130 [ 130.635926] __schedule+0xedd/0x2470 [ 130.636205] ? io_schedule_timeout+0x150/0x150 [ 130.636547] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.636912] schedule+0xda/0x1b0 [ 130.637167] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.637535] syscall_exit_to_user_mode+0x19/0x40 [ 130.637902] do_syscall_64+0x48/0x90 [ 130.638183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.638564] RIP: 0033:0x7f3928228b19 [ 130.638839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.640147] RSP: 002b:00007f392579e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.640695] RAX: 0000000000000001 RBX: 00007f392833bf68 RCX: 00007f3928228b19 [ 130.641214] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f392833bf6c [ 130.641737] RBP: 00007f392833bf60 R08: 000000000000000e R09: 0000000000000000 [ 130.642291] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f392833bf6c [ 130.642806] R13: 00007ffd9abd683f R14: 00007f392579e300 R15: 0000000000022000 [ 130.643328] [ 130.643505] irq event stamp: 794 [ 130.643751] hardirqs last enabled at (793): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 130.644432] hardirqs last disabled at (794): [] __schedule+0x1225/0x2470 [ 130.645024] softirqs last enabled at (220): [] __irq_exit_rcu+0x11b/0x180 [ 130.645638] softirqs last disabled at (35): [] __irq_exit_rcu+0x11b/0x180 [ 130.646259] ---[ end trace 0000000000000000 ]--- [ 130.670732] audit: type=1400 audit(1663090455.449:9): avc: denied { write } for pid=3885 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.763093] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.084983] EXT4-fs (sda): re-mounted. Quota mode: none. [ 131.086783] EXT4-fs (sda): re-mounted. Quota mode: none. [ 131.264443] Bluetooth: hci0: HCI_REQ-0x0401 [ 131.360765] device lo entered promiscuous mode 17:34:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000008540)={0x0, {{0x4, 0x0, @local}}}, 0x5000) 17:34:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) 17:34:16 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:16 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:16 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}, 0x22}], [{@euid_eq={'euid', 0x3d, 0xee00}}]}) 17:34:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1}, 0x0) [ 131.410392] loop6: detected capacity change from 0 to 256 [ 131.412479] netlink: 'syz-executor.7': attribute type 12 has an invalid length. [ 131.421667] loop2: detected capacity change from 0 to 256 [ 131.435104] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.435989] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:34:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) 17:34:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000008540)={0x0, {{0x4, 0x0, @local}}}, 0x5000) [ 131.444134] tmpfs: Bad value for 'mpol' [ 131.444845] tmpfs: Bad value for 'mpol' 17:34:16 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000001300)) 17:34:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000200)={0x32b001, 0x1c2}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) r4 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r4, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r6, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 131.655344] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.660407] syz-executor.2 (3967) used greatest stack depth: 24784 bytes left 17:34:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) [ 131.673624] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:34:16 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0xfa, 0x8, 0xff, 0x1, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x41301, 0xd3df, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x0, 0x9, 0x0, 0x7}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "03cffc3cf00a2aa0d727d810e69298aaccac56dd2e98bdf05de00be2e9b9b88e39ccdbc146d6d379a43c35780f6a66646108461892b628ca6ea99812019eb6cd"}, 0x48, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) dup(r1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 17:34:16 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000200)={0x32b001, 0x1c2}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) r4 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r4, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r6, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 17:34:16 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000008540)={0x0, {{0x4, 0x0, @local}}}, 0x5000) 17:34:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000001300)) [ 131.718271] loop6: detected capacity change from 0 to 256 [ 131.741022] loop2: detected capacity change from 0 to 256 17:34:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000008540)={0x0, {{0x4, 0x0, @local}}}, 0x5000) 17:34:16 executing program 1: syz_open_dev$sg(&(0x7f0000003e00), 0x0, 0x2901) 17:34:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000001300)) [ 131.767245] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.775768] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:34:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 17:34:16 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000200)={0x32b001, 0x1c2}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) r4 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r4, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r6, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 17:34:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002940)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:34:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigpending(0x0, 0x8000000) 17:34:16 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f0000000bc0), 0x8) 17:34:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='rodir']) 17:34:16 executing program 5: munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x80000001, 0x7f, 0x0) [ 131.913174] FAT-fs (loop1): bogus number of reserved sectors [ 131.913708] FAT-fs (loop1): Can't find a valid FAT filesystem [ 131.920632] FAT-fs (loop1): bogus number of reserved sectors [ 131.921138] FAT-fs (loop1): Can't find a valid FAT filesystem [ 131.980825] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 132.019654] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:34:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000001300)) 17:34:17 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000200)={0x32b001, 0x1c2}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"}) r4 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r4, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80}) shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r6, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 17:34:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)='b', 0x1}, {&(0x7f0000000280)="df", 0x1}], 0x3004800, &(0x7f0000000380)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x74]}}, {@huge_never}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/:'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '&]{'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000500)=0xc00000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ca1207c1b50000002e2f66696c653000"]) [ 132.784792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.785572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:34:17 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x20, 0x37, 0x0, 0x199e, 0x8002, 0xeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0x15, 0xfe}}]}}]}}, 0x0) 17:34:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2282, &(0x7f0000000000)) 17:34:17 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:17 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f0000000bc0), 0x8) 17:34:17 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 17:34:17 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) [ 132.823261] loop0: detected capacity change from 0 to 40 [ 132.831172] loop6: detected capacity change from 0 to 256 [ 132.855700] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:34:17 executing program 1: migrate_pages(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 17:34:17 executing program 7: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0xffffffffffffffd1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000680)={{r1}, "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"}) syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0xc0000) 17:34:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) sendfile(r1, r0, 0x0, 0xfffffdef) [ 132.955977] loop2: detected capacity change from 0 to 256 [ 133.011071] hrtimer: interrupt took 17533 ns [ 133.034215] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 133.068345] syz-executor.0: attempt to access beyond end of device [ 133.068345] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.069421] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 133.115214] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 133.262428] syz-executor.0 (4038) used greatest stack depth: 24472 bytes left [ 133.276133] Bluetooth: hci0: command 0x0401 tx timeout [ 133.298481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.299216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.819631] syz-executor.1 (4057) used greatest stack depth: 24120 bytes left 17:34:18 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x20, 0x37, 0x0, 0x199e, 0x8002, 0xeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0x15, 0xfe}}]}}]}}, 0x0) 17:34:18 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:18 executing program 6: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) syz_io_uring_complete(0x0) syz_io_uring_setup(0x5465, &(0x7f0000005280)={0x0, 0x3585, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000005300), &(0x7f0000005340)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10002, 0x0) io_uring_setup(0x54e6, 0x0) 17:34:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)='b', 0x1}, {&(0x7f0000000280)="df", 0x1}], 0x3004800, &(0x7f0000000380)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x74]}}, {@huge_never}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/:'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '&]{'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000500)=0xc00000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ca1207c1b50000002e2f66696c653000"]) 17:34:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 17:34:18 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pipe2(&(0x7f0000000380), 0x0) 17:34:18 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f0000000bc0), 0x8) 17:34:18 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) [ 133.866926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.867721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:34:18 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) [ 133.997507] random: crng reseeded on system resumption 17:34:18 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) 17:34:18 executing program 6: mq_open(&(0x7f0000004e40)='\',\xee\x00', 0x40, 0x0, &(0x7f0000004e80)={0x4, 0x0, 0x6, 0xae3e}) [ 134.029264] Restarting kernel threads ... done. 17:34:18 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 17:34:18 executing program 2: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x4, r1, &(0x7f0000000000)) 17:34:19 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000001fe40000002e2f66696c653000"]) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x1, 0x0, 'queue1\x00', 0x1000}) getpid() syncfs(r1) [ 134.328297] random: crng reseeded on system resumption [ 134.345411] Restarting kernel threads ... done. 17:34:19 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x20, 0x37, 0x0, 0x199e, 0x8002, 0xeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0x15, 0xfe}}]}}]}}, 0x0) [ 134.495990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.499622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:34:19 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000340)=[0x0]) 17:34:19 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:19 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:19 executing program 4: setgroups(0x2cded0eb2b2304a, &(0x7f0000000280)=[0x0, 0x0, 0x0]) 17:34:19 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f0000000bc0), 0x8) 17:34:19 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000001fe40000002e2f66696c653000"]) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x1, 0x0, 'queue1\x00', 0x1000}) getpid() syncfs(r1) 17:34:19 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x20, 0x37, 0x0, 0x199e, 0x8002, 0xeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0x15, 0xfe}}]}}]}}, 0x0) 17:34:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)='b', 0x1}, {&(0x7f0000000280)="df", 0x1}], 0x3004800, &(0x7f0000000380)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x74]}}, {@huge_never}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/:'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '&]{'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000500)=0xc00000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ca1207c1b50000002e2f66696c653000"]) [ 135.101154] random: crng reseeded on system resumption 17:34:19 executing program 4: io_setup(0x5, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:34:19 executing program 2: rt_sigprocmask(0x1, &(0x7f0000000180), &(0x7f0000000200), 0x8) [ 135.254939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.256617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:34:20 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:20 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:20 executing program 4: io_setup(0x5, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:34:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, @in6=@mcast2}}, 0xe8) 17:34:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000001fe40000002e2f66696c653000"]) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x1, 0x0, 'queue1\x00', 0x1000}) getpid() syncfs(r1) [ 135.416312] random: crng reseeded on system resumption 17:34:20 executing program 4: io_setup(0x5, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:34:20 executing program 4: io_setup(0x5, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:34:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:21 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 17:34:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 17:34:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:21 executing program 4: r0 = socket(0x1f, 0x5, 0x7ff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x81, 0x5, 0x8, 0xc80f, 0x9, 0x1, 0x6, 0x5, 0x0, 0x0, 0x66c5, 0x1, 0x0, 0x1ff}}) r1 = accept$packet(r0, 0x0, &(0x7f0000001000)) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000005600), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005640)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005880)) r3 = syz_open_procfs(0x0, &(0x7f00000058c0)='limits\x00') getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000005900), &(0x7f0000005940)=0x8) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000005980)=0x42, 0x4) creat(0x0, 0x28) accept4(r2, 0x0, &(0x7f0000007b80), 0x0) 17:34:21 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000001fe40000002e2f66696c653000"]) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x1, 0x0, 'queue1\x00', 0x1000}) getpid() syncfs(r1) 17:34:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)='b', 0x1}, {&(0x7f0000000280)="df", 0x1}], 0x3004800, &(0x7f0000000380)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x74]}}, {@huge_never}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/:'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '&]{'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000500)=0xc00000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ca1207c1b50000002e2f66696c653000"]) 17:34:21 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) [ 136.372882] audit: type=1400 audit(1663090461.151:10): avc: denied { tracepoint } for pid=4153 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.377820] audit: type=1326 audit(1663090461.156:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4150 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3928228b19 code=0x0 [ 136.417340] random: crng reseeded on system resumption 17:34:21 executing program 4: r0 = socket(0x1f, 0x5, 0x7ff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x81, 0x5, 0x8, 0xc80f, 0x9, 0x1, 0x6, 0x5, 0x0, 0x0, 0x66c5, 0x1, 0x0, 0x1ff}}) r1 = accept$packet(r0, 0x0, &(0x7f0000001000)) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000005600), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005640)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005880)) r3 = syz_open_procfs(0x0, &(0x7f00000058c0)='limits\x00') getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000005900), &(0x7f0000005940)=0x8) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000005980)=0x42, 0x4) creat(0x0, 0x28) accept4(r2, 0x0, &(0x7f0000007b80), 0x0) 17:34:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:21 executing program 4: r0 = socket(0x1f, 0x5, 0x7ff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x81, 0x5, 0x8, 0xc80f, 0x9, 0x1, 0x6, 0x5, 0x0, 0x0, 0x66c5, 0x1, 0x0, 0x1ff}}) r1 = accept$packet(r0, 0x0, &(0x7f0000001000)) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000005600), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005640)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005880)) r3 = syz_open_procfs(0x0, &(0x7f00000058c0)='limits\x00') getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000005900), &(0x7f0000005940)=0x8) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000005980)=0x42, 0x4) creat(0x0, 0x28) accept4(r2, 0x0, &(0x7f0000007b80), 0x0) 17:34:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:21 executing program 4: r0 = socket(0x1f, 0x5, 0x7ff) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x81, 0x5, 0x8, 0xc80f, 0x9, 0x1, 0x6, 0x5, 0x0, 0x0, 0x66c5, 0x1, 0x0, 0x1ff}}) r1 = accept$packet(r0, 0x0, &(0x7f0000001000)) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000005600), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005640)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005880)) r3 = syz_open_procfs(0x0, &(0x7f00000058c0)='limits\x00') getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000005900), &(0x7f0000005940)=0x8) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000005980)=0x42, 0x4) creat(0x0, 0x28) accept4(r2, 0x0, &(0x7f0000007b80), 0x0) 17:34:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) [ 137.202494] audit: type=1326 audit(1663090461.980:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4150 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3928228b19 code=0x0 17:34:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:34:22 executing program 5: unshare(0x20020400) unshare(0x4020400) 17:34:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 17:34:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b40", 0x1ab}], 0x1) 17:34:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 17:34:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:22 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x40, 0xa}}}}, 0x17) 17:34:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 17:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) close(r0) 17:34:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 17:34:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) 17:34:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000100)=""/199) 17:34:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 17:34:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) [ 137.535526] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 17:34:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) 17:34:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61f"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x2e0, 0x0) pwritev2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() rt_sigqueueinfo(r4, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'}) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="010300000000000000000100000004000180"], 0x18}}, 0x0) sendfile(r0, r5, &(0x7f0000000200), 0x1) 17:34:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) 17:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) close(r0) 17:34:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 17:34:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f000000c680)=[{{&(0x7f0000000000)=@isdn={0x22, 0x0, 0x0, 0x3, 0x4}, 0x80, 0x0}}], 0x1, 0x0) 17:34:22 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c3c1, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x200000000000000}]) 17:34:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) 17:34:22 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 17:34:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='3', 0x1}], 0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) 17:34:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) close(r0) 17:34:22 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c3c1, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x200000000000000}]) 17:34:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 17:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) close(r0) 17:34:22 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c3c1, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x200000000000000}]) 17:34:22 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 17:34:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 17:34:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='3', 0x1}], 0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) 17:34:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 17:34:15 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888018a08000 RSI=ffffffff840cea9f RDI=0000000000000001 RBP=ffffffff84dfe200 RSP=ffff8880428ef920 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=ffff88800ef33410 RIP=ffffffff84241d96 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3a2d4fe090 CR3=0000000042640000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042927698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000070 R11=0000000000000001 R12=0000000000000070 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f392579e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa167e1e02c CR3=0000000042644000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f392830f7c0 00007f392830f7c8 YMM02=0000000000000000 0000000000000000 00007f392830f7e0 00007f392830f7c0 YMM03=0000000000000000 0000000000000000 00007f392830f7c8 00007f392830f7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000