Warning: Permanently added '[localhost]:15832' (ECDSA) to the list of known hosts. 2022/09/13 17:52:40 fuzzer started 2022/09/13 17:52:41 dialing manager at localhost:36597 syzkaller login: [ 36.853141] cgroup: Unknown subsys name 'net' [ 36.954640] cgroup: Unknown subsys name 'rlimit' 2022/09/13 17:52:55 syscalls: 2215 2022/09/13 17:52:55 code coverage: enabled 2022/09/13 17:52:55 comparison tracing: enabled 2022/09/13 17:52:55 extra coverage: enabled 2022/09/13 17:52:55 setuid sandbox: enabled 2022/09/13 17:52:55 namespace sandbox: enabled 2022/09/13 17:52:55 Android sandbox: enabled 2022/09/13 17:52:55 fault injection: enabled 2022/09/13 17:52:55 leak checking: enabled 2022/09/13 17:52:55 net packet injection: enabled 2022/09/13 17:52:55 net device setup: enabled 2022/09/13 17:52:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 17:52:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 17:52:55 USB emulation: enabled 2022/09/13 17:52:55 hci packet injection: enabled 2022/09/13 17:52:55 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 17:52:55 802.15.4 emulation: enabled 2022/09/13 17:52:55 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 17:52:55 fetching corpus: 50, signal 32848/36359 (executing program) 2022/09/13 17:52:55 fetching corpus: 100, signal 44337/49353 (executing program) 2022/09/13 17:52:55 fetching corpus: 150, signal 59573/65832 (executing program) 2022/09/13 17:52:55 fetching corpus: 200, signal 64480/72110 (executing program) 2022/09/13 17:52:56 fetching corpus: 250, signal 71731/80589 (executing program) 2022/09/13 17:52:56 fetching corpus: 300, signal 77818/87861 (executing program) 2022/09/13 17:52:56 fetching corpus: 349, signal 84209/95298 (executing program) 2022/09/13 17:52:56 fetching corpus: 399, signal 89710/101793 (executing program) 2022/09/13 17:52:56 fetching corpus: 449, signal 93400/106562 (executing program) 2022/09/13 17:52:56 fetching corpus: 499, signal 97740/111851 (executing program) 2022/09/13 17:52:57 fetching corpus: 549, signal 101218/116306 (executing program) 2022/09/13 17:52:57 fetching corpus: 599, signal 103991/120128 (executing program) 2022/09/13 17:52:57 fetching corpus: 649, signal 106451/123619 (executing program) 2022/09/13 17:52:57 fetching corpus: 699, signal 109274/127357 (executing program) 2022/09/13 17:52:57 fetching corpus: 749, signal 112650/131550 (executing program) 2022/09/13 17:52:57 fetching corpus: 799, signal 116601/136152 (executing program) 2022/09/13 17:52:57 fetching corpus: 849, signal 119016/139394 (executing program) 2022/09/13 17:52:57 fetching corpus: 899, signal 122021/143121 (executing program) 2022/09/13 17:52:58 fetching corpus: 949, signal 123932/145949 (executing program) 2022/09/13 17:52:58 fetching corpus: 999, signal 125674/148568 (executing program) 2022/09/13 17:52:58 fetching corpus: 1049, signal 128863/152384 (executing program) 2022/09/13 17:52:58 fetching corpus: 1099, signal 130934/155212 (executing program) 2022/09/13 17:52:58 fetching corpus: 1149, signal 133525/158420 (executing program) 2022/09/13 17:52:58 fetching corpus: 1199, signal 135326/160913 (executing program) 2022/09/13 17:52:58 fetching corpus: 1249, signal 138464/164479 (executing program) 2022/09/13 17:52:58 fetching corpus: 1299, signal 139488/166348 (executing program) 2022/09/13 17:52:59 fetching corpus: 1349, signal 142698/169974 (executing program) 2022/09/13 17:52:59 fetching corpus: 1399, signal 146020/173594 (executing program) 2022/09/13 17:52:59 fetching corpus: 1449, signal 148316/176380 (executing program) 2022/09/13 17:52:59 fetching corpus: 1499, signal 149993/178620 (executing program) 2022/09/13 17:52:59 fetching corpus: 1549, signal 151831/181004 (executing program) 2022/09/13 17:52:59 fetching corpus: 1599, signal 154073/183592 (executing program) 2022/09/13 17:52:59 fetching corpus: 1649, signal 155888/185899 (executing program) 2022/09/13 17:53:00 fetching corpus: 1699, signal 157827/188257 (executing program) 2022/09/13 17:53:00 fetching corpus: 1749, signal 159804/190566 (executing program) 2022/09/13 17:53:00 fetching corpus: 1799, signal 160948/192242 (executing program) 2022/09/13 17:53:00 fetching corpus: 1849, signal 163419/194825 (executing program) 2022/09/13 17:53:00 fetching corpus: 1899, signal 165027/196784 (executing program) 2022/09/13 17:53:00 fetching corpus: 1949, signal 166009/198286 (executing program) 2022/09/13 17:53:00 fetching corpus: 1999, signal 167423/200129 (executing program) 2022/09/13 17:53:01 fetching corpus: 2049, signal 169218/202216 (executing program) 2022/09/13 17:53:01 fetching corpus: 2099, signal 170743/204017 (executing program) 2022/09/13 17:53:01 fetching corpus: 2149, signal 171948/205640 (executing program) 2022/09/13 17:53:01 fetching corpus: 2199, signal 173597/207529 (executing program) 2022/09/13 17:53:01 fetching corpus: 2249, signal 175653/209625 (executing program) 2022/09/13 17:53:01 fetching corpus: 2299, signal 177044/211329 (executing program) 2022/09/13 17:53:01 fetching corpus: 2349, signal 177991/212642 (executing program) 2022/09/13 17:53:02 fetching corpus: 2399, signal 178774/213864 (executing program) 2022/09/13 17:53:02 fetching corpus: 2449, signal 180013/215392 (executing program) 2022/09/13 17:53:02 fetching corpus: 2499, signal 182004/217372 (executing program) 2022/09/13 17:53:02 fetching corpus: 2549, signal 183710/219191 (executing program) 2022/09/13 17:53:02 fetching corpus: 2599, signal 185029/220728 (executing program) 2022/09/13 17:53:02 fetching corpus: 2649, signal 186358/222227 (executing program) 2022/09/13 17:53:02 fetching corpus: 2699, signal 187329/223453 (executing program) 2022/09/13 17:53:03 fetching corpus: 2749, signal 188234/224686 (executing program) 2022/09/13 17:53:03 fetching corpus: 2799, signal 189624/226206 (executing program) 2022/09/13 17:53:03 fetching corpus: 2849, signal 190877/227611 (executing program) 2022/09/13 17:53:03 fetching corpus: 2899, signal 191843/228788 (executing program) 2022/09/13 17:53:03 fetching corpus: 2949, signal 192573/229899 (executing program) 2022/09/13 17:53:03 fetching corpus: 2999, signal 194120/231403 (executing program) 2022/09/13 17:53:03 fetching corpus: 3049, signal 195347/232710 (executing program) 2022/09/13 17:53:04 fetching corpus: 3099, signal 196959/234218 (executing program) 2022/09/13 17:53:04 fetching corpus: 3149, signal 198156/235415 (executing program) 2022/09/13 17:53:04 fetching corpus: 3199, signal 199068/236516 (executing program) 2022/09/13 17:53:04 fetching corpus: 3249, signal 199934/237592 (executing program) 2022/09/13 17:53:04 fetching corpus: 3299, signal 201359/238849 (executing program) 2022/09/13 17:53:04 fetching corpus: 3349, signal 202492/240019 (executing program) 2022/09/13 17:53:05 fetching corpus: 3399, signal 203983/241300 (executing program) 2022/09/13 17:53:05 fetching corpus: 3449, signal 204901/242280 (executing program) 2022/09/13 17:53:05 fetching corpus: 3499, signal 205477/243123 (executing program) 2022/09/13 17:53:05 fetching corpus: 3549, signal 206670/244238 (executing program) 2022/09/13 17:53:05 fetching corpus: 3599, signal 208411/245595 (executing program) 2022/09/13 17:53:05 fetching corpus: 3649, signal 209122/246455 (executing program) 2022/09/13 17:53:05 fetching corpus: 3699, signal 210050/247336 (executing program) 2022/09/13 17:53:05 fetching corpus: 3749, signal 210782/248162 (executing program) 2022/09/13 17:53:06 fetching corpus: 3799, signal 212111/249215 (executing program) 2022/09/13 17:53:06 fetching corpus: 3849, signal 212864/250043 (executing program) 2022/09/13 17:53:06 fetching corpus: 3899, signal 213607/250847 (executing program) 2022/09/13 17:53:06 fetching corpus: 3949, signal 214361/251661 (executing program) 2022/09/13 17:53:06 fetching corpus: 3999, signal 215381/252561 (executing program) 2022/09/13 17:53:06 fetching corpus: 4049, signal 216181/253362 (executing program) 2022/09/13 17:53:06 fetching corpus: 4099, signal 216937/254076 (executing program) 2022/09/13 17:53:07 fetching corpus: 4149, signal 217726/254827 (executing program) 2022/09/13 17:53:07 fetching corpus: 4199, signal 219016/255779 (executing program) 2022/09/13 17:53:07 fetching corpus: 4249, signal 219878/256552 (executing program) 2022/09/13 17:53:07 fetching corpus: 4299, signal 220576/257218 (executing program) 2022/09/13 17:53:07 fetching corpus: 4349, signal 221270/257905 (executing program) 2022/09/13 17:53:07 fetching corpus: 4399, signal 221894/258571 (executing program) 2022/09/13 17:53:07 fetching corpus: 4449, signal 222583/259188 (executing program) 2022/09/13 17:53:08 fetching corpus: 4499, signal 223220/259837 (executing program) 2022/09/13 17:53:08 fetching corpus: 4549, signal 223656/260368 (executing program) 2022/09/13 17:53:08 fetching corpus: 4599, signal 224554/261064 (executing program) 2022/09/13 17:53:08 fetching corpus: 4649, signal 225246/261723 (executing program) 2022/09/13 17:53:08 fetching corpus: 4699, signal 225749/262301 (executing program) 2022/09/13 17:53:08 fetching corpus: 4749, signal 226124/262774 (executing program) 2022/09/13 17:53:08 fetching corpus: 4799, signal 226877/263435 (executing program) 2022/09/13 17:53:09 fetching corpus: 4849, signal 227869/264101 (executing program) 2022/09/13 17:53:09 fetching corpus: 4899, signal 228846/264758 (executing program) 2022/09/13 17:53:09 fetching corpus: 4949, signal 229626/265343 (executing program) 2022/09/13 17:53:09 fetching corpus: 4999, signal 230766/266027 (executing program) 2022/09/13 17:53:09 fetching corpus: 5049, signal 231497/266568 (executing program) 2022/09/13 17:53:09 fetching corpus: 5099, signal 232087/267103 (executing program) 2022/09/13 17:53:09 fetching corpus: 5149, signal 232945/267685 (executing program) 2022/09/13 17:53:10 fetching corpus: 5199, signal 233863/268255 (executing program) 2022/09/13 17:53:10 fetching corpus: 5249, signal 234419/268723 (executing program) 2022/09/13 17:53:10 fetching corpus: 5299, signal 234951/269144 (executing program) 2022/09/13 17:53:10 fetching corpus: 5349, signal 235614/269648 (executing program) 2022/09/13 17:53:10 fetching corpus: 5399, signal 236067/270037 (executing program) 2022/09/13 17:53:10 fetching corpus: 5449, signal 236850/270450 (executing program) 2022/09/13 17:53:10 fetching corpus: 5499, signal 237558/270935 (executing program) 2022/09/13 17:53:10 fetching corpus: 5549, signal 238145/271392 (executing program) 2022/09/13 17:53:11 fetching corpus: 5599, signal 239034/271866 (executing program) 2022/09/13 17:53:11 fetching corpus: 5649, signal 239559/272209 (executing program) 2022/09/13 17:53:11 fetching corpus: 5699, signal 240300/272614 (executing program) 2022/09/13 17:53:11 fetching corpus: 5749, signal 240977/273036 (executing program) 2022/09/13 17:53:11 fetching corpus: 5799, signal 241345/273388 (executing program) 2022/09/13 17:53:11 fetching corpus: 5849, signal 241883/273829 (executing program) 2022/09/13 17:53:11 fetching corpus: 5899, signal 242591/274211 (executing program) 2022/09/13 17:53:12 fetching corpus: 5949, signal 243204/274567 (executing program) 2022/09/13 17:53:12 fetching corpus: 5999, signal 243801/274882 (executing program) 2022/09/13 17:53:12 fetching corpus: 6049, signal 244234/275193 (executing program) 2022/09/13 17:53:12 fetching corpus: 6099, signal 244834/275503 (executing program) 2022/09/13 17:53:12 fetching corpus: 6149, signal 245892/275930 (executing program) 2022/09/13 17:53:12 fetching corpus: 6199, signal 246552/276214 (executing program) 2022/09/13 17:53:12 fetching corpus: 6249, signal 247043/276500 (executing program) 2022/09/13 17:53:13 fetching corpus: 6299, signal 247390/276783 (executing program) 2022/09/13 17:53:13 fetching corpus: 6349, signal 247800/277092 (executing program) 2022/09/13 17:53:13 fetching corpus: 6399, signal 248469/277362 (executing program) 2022/09/13 17:53:13 fetching corpus: 6449, signal 249043/277616 (executing program) 2022/09/13 17:53:13 fetching corpus: 6499, signal 249437/277859 (executing program) 2022/09/13 17:53:13 fetching corpus: 6549, signal 249950/278109 (executing program) 2022/09/13 17:53:13 fetching corpus: 6599, signal 250509/278329 (executing program) 2022/09/13 17:53:13 fetching corpus: 6649, signal 251093/278556 (executing program) 2022/09/13 17:53:14 fetching corpus: 6699, signal 251790/278778 (executing program) 2022/09/13 17:53:14 fetching corpus: 6749, signal 252375/279047 (executing program) 2022/09/13 17:53:14 fetching corpus: 6799, signal 252861/279102 (executing program) 2022/09/13 17:53:14 fetching corpus: 6849, signal 253333/279110 (executing program) 2022/09/13 17:53:14 fetching corpus: 6899, signal 253812/279110 (executing program) 2022/09/13 17:53:14 fetching corpus: 6949, signal 254383/279122 (executing program) 2022/09/13 17:53:14 fetching corpus: 6999, signal 254975/279136 (executing program) 2022/09/13 17:53:15 fetching corpus: 7049, signal 255429/279149 (executing program) 2022/09/13 17:53:15 fetching corpus: 7099, signal 255846/279169 (executing program) 2022/09/13 17:53:15 fetching corpus: 7149, signal 256271/279183 (executing program) 2022/09/13 17:53:15 fetching corpus: 7199, signal 256833/279190 (executing program) 2022/09/13 17:53:15 fetching corpus: 7249, signal 257280/279192 (executing program) 2022/09/13 17:53:15 fetching corpus: 7299, signal 257848/279192 (executing program) 2022/09/13 17:53:16 fetching corpus: 7349, signal 258253/279192 (executing program) 2022/09/13 17:53:16 fetching corpus: 7399, signal 258627/279195 (executing program) 2022/09/13 17:53:16 fetching corpus: 7449, signal 259126/279265 (executing program) 2022/09/13 17:53:16 fetching corpus: 7499, signal 259605/279268 (executing program) 2022/09/13 17:53:16 fetching corpus: 7549, signal 259969/279271 (executing program) 2022/09/13 17:53:16 fetching corpus: 7599, signal 260517/279274 (executing program) 2022/09/13 17:53:16 fetching corpus: 7649, signal 261079/279276 (executing program) 2022/09/13 17:53:16 fetching corpus: 7699, signal 261668/279307 (executing program) 2022/09/13 17:53:17 fetching corpus: 7749, signal 262143/279320 (executing program) 2022/09/13 17:53:17 fetching corpus: 7799, signal 262675/279329 (executing program) 2022/09/13 17:53:17 fetching corpus: 7849, signal 263087/279362 (executing program) 2022/09/13 17:53:17 fetching corpus: 7899, signal 263785/279364 (executing program) 2022/09/13 17:53:17 fetching corpus: 7949, signal 264285/279364 (executing program) 2022/09/13 17:53:17 fetching corpus: 7999, signal 264799/279370 (executing program) 2022/09/13 17:53:17 fetching corpus: 8049, signal 265387/279370 (executing program) 2022/09/13 17:53:17 fetching corpus: 8099, signal 265768/279378 (executing program) 2022/09/13 17:53:18 fetching corpus: 8149, signal 266313/279379 (executing program) 2022/09/13 17:53:18 fetching corpus: 8199, signal 266658/279383 (executing program) 2022/09/13 17:53:18 fetching corpus: 8249, signal 267020/279397 (executing program) 2022/09/13 17:53:18 fetching corpus: 8299, signal 267418/279397 (executing program) 2022/09/13 17:53:18 fetching corpus: 8349, signal 267783/279403 (executing program) 2022/09/13 17:53:18 fetching corpus: 8399, signal 268142/279403 (executing program) 2022/09/13 17:53:18 fetching corpus: 8449, signal 268620/279404 (executing program) 2022/09/13 17:53:19 fetching corpus: 8499, signal 269030/279421 (executing program) 2022/09/13 17:53:19 fetching corpus: 8549, signal 269660/279426 (executing program) 2022/09/13 17:53:19 fetching corpus: 8599, signal 269957/279431 (executing program) 2022/09/13 17:53:19 fetching corpus: 8637, signal 270340/279455 (executing program) 2022/09/13 17:53:19 fetching corpus: 8637, signal 270340/279455 (executing program) 2022/09/13 17:53:21 starting 8 fuzzer processes 17:53:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000001680)=[{{&(0x7f00000003c0)=@nfc={0x27, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x300}}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/8, 0x8}}], 0x1, 0x2000, 0x0) 17:53:21 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0xfffffffffffffc73, 0x1, 0x0, {}, 0x4040000, 0x0, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x101000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r1) [ 77.619885] audit: type=1400 audit(1663091601.995:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:53:21 executing program 2: r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000800)={0x0, 0x11, 0x5, 0x1c, 0x4, 0x4}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) 17:53:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643b749f82e446ef63c21499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61fa3a5d8f3ac20a51e8f575c1d589000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x8}, @device_b, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x6}, {0x2, 0x8}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48a1}, 0x400c890) sendmmsg$unix(r4, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x38, 0x20040401}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) socket$inet6(0xa, 0x1, 0x0) 17:53:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 17:53:22 executing program 5: syz_io_uring_setup(0x6c13, &(0x7f0000000000)={0x0, 0x62f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)) syz_io_uring_setup(0x3706, &(0x7f0000002740)={0x0, 0x3c87}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000027c0), &(0x7f0000002800)) 17:53:22 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getscheduler(0x0) 17:53:22 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000100)="a6", 0x1, r0) [ 78.878842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.880499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.882407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.885248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.887400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.889240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.893049] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.962078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.963559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.966029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.969038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.970448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.971706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.972816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.974231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.976297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.978089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.979345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.981240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.983213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.984398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.985652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.986743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.998782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.999872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.004018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.006903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.008053] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.009450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.011388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.013288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.014331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.016146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.017816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.018982] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.020135] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.021431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.022741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.024328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.025482] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.026525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.027932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.029139] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.030458] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.032538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.034027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.037883] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.047710] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.054292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.055382] Bluetooth: hci3: HCI_REQ-0x0c1a [ 79.056095] Bluetooth: hci5: HCI_REQ-0x0c1a [ 79.058157] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.067877] Bluetooth: hci4: HCI_REQ-0x0c1a [ 79.070015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.078079] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.085367] Bluetooth: hci7: HCI_REQ-0x0c1a [ 80.908193] Bluetooth: hci0: command 0x0409 tx timeout [ 81.099859] Bluetooth: hci2: command 0x0409 tx timeout [ 81.100337] Bluetooth: hci5: command 0x0409 tx timeout [ 81.100685] Bluetooth: hci7: command 0x0409 tx timeout [ 81.101819] Bluetooth: hci4: command 0x0409 tx timeout [ 81.102779] Bluetooth: hci3: command 0x0409 tx timeout [ 81.103321] Bluetooth: hci1: command 0x0409 tx timeout [ 81.104144] Bluetooth: hci6: command 0x0409 tx timeout [ 82.956121] Bluetooth: hci0: command 0x041b tx timeout [ 83.147873] Bluetooth: hci6: command 0x041b tx timeout [ 83.148887] Bluetooth: hci1: command 0x041b tx timeout [ 83.149829] Bluetooth: hci3: command 0x041b tx timeout [ 83.151314] Bluetooth: hci4: command 0x041b tx timeout [ 83.152352] Bluetooth: hci5: command 0x041b tx timeout [ 83.153424] Bluetooth: hci7: command 0x041b tx timeout [ 83.154720] Bluetooth: hci2: command 0x041b tx timeout [ 85.003663] Bluetooth: hci0: command 0x040f tx timeout [ 85.195673] Bluetooth: hci2: command 0x040f tx timeout [ 85.196439] Bluetooth: hci7: command 0x040f tx timeout [ 85.197209] Bluetooth: hci5: command 0x040f tx timeout [ 85.198324] Bluetooth: hci4: command 0x040f tx timeout [ 85.199520] Bluetooth: hci3: command 0x040f tx timeout [ 85.200614] Bluetooth: hci1: command 0x040f tx timeout [ 85.201296] Bluetooth: hci6: command 0x040f tx timeout [ 87.052641] Bluetooth: hci0: command 0x0419 tx timeout [ 87.243680] Bluetooth: hci6: command 0x0419 tx timeout [ 87.244284] Bluetooth: hci1: command 0x0419 tx timeout [ 87.244875] Bluetooth: hci3: command 0x0419 tx timeout [ 87.245400] Bluetooth: hci4: command 0x0419 tx timeout [ 87.246321] Bluetooth: hci5: command 0x0419 tx timeout [ 87.247486] Bluetooth: hci7: command 0x0419 tx timeout [ 87.248286] Bluetooth: hci2: command 0x0419 tx timeout 17:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{@fat=@nocase}]}) [ 131.935586] FAT-fs (loop4): bogus number of reserved sectors [ 131.936127] FAT-fs (loop4): Can't find a valid FAT filesystem 17:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{@fat=@nocase}]}) [ 132.098292] FAT-fs (loop4): bogus number of reserved sectors [ 132.099030] FAT-fs (loop4): Can't find a valid FAT filesystem 17:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{@fat=@nocase}]}) [ 132.214851] audit: type=1400 audit(1663091656.589:7): avc: denied { open } for pid=3759 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.216898] audit: type=1400 audit(1663091656.589:8): avc: denied { kernel } for pid=3759 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.226801] FAT-fs (loop4): bogus number of reserved sectors [ 132.227133] ------------[ cut here ]------------ [ 132.227159] [ 132.227162] ====================================================== [ 132.227167] WARNING: possible circular locking dependency detected [ 132.227173] 6.0.0-rc5-next-20220913 #1 Not tainted [ 132.227181] ------------------------------------------------------ [ 132.227186] syz-executor.3/3760 is trying to acquire lock: [ 132.227194] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 132.227238] [ 132.227238] but task is already holding lock: [ 132.227242] ffff88800f013020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.227277] [ 132.227277] which lock already depends on the new lock. [ 132.227277] [ 132.227280] [ 132.227280] the existing dependency chain (in reverse order) is: [ 132.227284] [ 132.227284] -> #3 (&ctx->lock){....}-{2:2}: [ 132.227298] _raw_spin_lock+0x2a/0x40 [ 132.227315] __perf_event_task_sched_out+0x53b/0x18d0 [ 132.227327] __schedule+0xedd/0x2470 [ 132.227338] preempt_schedule_common+0x45/0xc0 [ 132.227349] __cond_resched+0x17/0x30 [ 132.227359] __mutex_lock+0xa3/0x14d0 [ 132.227370] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.227383] do_syscall_64+0x3b/0x90 [ 132.227397] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.227414] [ 132.227414] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 132.227428] _raw_spin_lock_nested+0x30/0x40 [ 132.227443] raw_spin_rq_lock_nested+0x1e/0x30 [ 132.227456] task_fork_fair+0x63/0x4d0 [ 132.227476] sched_cgroup_fork+0x3d0/0x540 [ 132.227490] copy_process+0x3f9e/0x6df0 [ 132.227501] kernel_clone+0xe7/0x890 [ 132.227510] user_mode_thread+0xad/0xf0 [ 132.227520] rest_init+0x24/0x250 [ 132.227537] arch_call_rest_init+0xf/0x14 [ 132.227562] start_kernel+0x4c1/0x4e6 [ 132.227582] secondary_startup_64_no_verify+0xe0/0xeb [ 132.227598] [ 132.227598] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 132.227617] _raw_spin_lock_irqsave+0x39/0x60 [ 132.227637] try_to_wake_up+0xab/0x1920 [ 132.227656] up+0x75/0xb0 [ 132.227673] __up_console_sem+0x6e/0x80 [ 132.227694] console_unlock+0x46a/0x590 [ 132.227715] do_con_write+0xc05/0x1d50 [ 132.227729] con_write+0x21/0x40 [ 132.227740] n_tty_write+0x4d4/0xfe0 [ 132.227753] file_tty_write.constprop.0+0x49c/0x8f0 [ 132.227765] vfs_write+0x9c3/0xd90 [ 132.227784] ksys_write+0x127/0x250 [ 132.227801] do_syscall_64+0x3b/0x90 [ 132.227814] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.227831] [ 132.227831] -> #0 ((console_sem).lock){....}-{2:2}: [ 132.227845] __lock_acquire+0x2a02/0x5e70 [ 132.227862] lock_acquire+0x1a2/0x530 [ 132.227893] _raw_spin_lock_irqsave+0x39/0x60 [ 132.227908] down_trylock+0xe/0x70 [ 132.227921] __down_trylock_console_sem+0x3b/0xd0 [ 132.227937] vprintk_emit+0x16b/0x560 [ 132.227954] vprintk+0x84/0xa0 [ 132.227971] _printk+0xba/0xf1 [ 132.227988] report_bug.cold+0x72/0xab [ 132.228001] handle_bug+0x3c/0x70 [ 132.228013] exc_invalid_op+0x14/0x50 [ 132.228026] asm_exc_invalid_op+0x16/0x20 [ 132.228043] group_sched_out.part.0+0x2c7/0x460 [ 132.228053] ctx_sched_out+0x8f1/0xc10 [ 132.228063] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.228075] __schedule+0xedd/0x2470 [ 132.228085] preempt_schedule_common+0x45/0xc0 [ 132.228095] __cond_resched+0x17/0x30 [ 132.228105] __mutex_lock+0xa3/0x14d0 [ 132.228116] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.228129] do_syscall_64+0x3b/0x90 [ 132.228143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.228165] [ 132.228165] other info that might help us debug this: [ 132.228165] [ 132.228169] Chain exists of: [ 132.228169] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 132.228169] [ 132.228185] Possible unsafe locking scenario: [ 132.228185] [ 132.228188] CPU0 CPU1 [ 132.228191] ---- ---- [ 132.228193] lock(&ctx->lock); [ 132.228199] lock(&rq->__lock); [ 132.228206] lock(&ctx->lock); [ 132.228212] lock((console_sem).lock); [ 132.228218] [ 132.228218] *** DEADLOCK *** [ 132.228218] [ 132.228220] 2 locks held by syz-executor.3/3760: [ 132.228227] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 132.228253] #1: ffff88800f013020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.228280] [ 132.228280] stack backtrace: [ 132.228283] CPU: 1 PID: 3760 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220913 #1 [ 132.228296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.228305] Call Trace: [ 132.228308] [ 132.228312] dump_stack_lvl+0x8b/0xb3 [ 132.228327] check_noncircular+0x263/0x2e0 [ 132.228344] ? format_decode+0x26c/0xb50 [ 132.228359] ? print_circular_bug+0x450/0x450 [ 132.228377] ? enable_ptr_key_workfn+0x20/0x20 [ 132.228391] ? lock_release+0x547/0x750 [ 132.228408] ? format_decode+0x26c/0xb50 [ 132.228424] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 132.228442] __lock_acquire+0x2a02/0x5e70 [ 132.228464] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.228487] lock_acquire+0x1a2/0x530 [ 132.228504] ? down_trylock+0xe/0x70 [ 132.228518] ? rcu_read_unlock+0x40/0x40 [ 132.228539] ? vprintk+0x84/0xa0 [ 132.228558] _raw_spin_lock_irqsave+0x39/0x60 [ 132.228577] ? down_trylock+0xe/0x70 [ 132.228592] down_trylock+0xe/0x70 [ 132.228609] ? vprintk+0x84/0xa0 [ 132.228633] __down_trylock_console_sem+0x3b/0xd0 [ 132.228658] vprintk_emit+0x16b/0x560 [ 132.228685] vprintk+0x84/0xa0 [ 132.228709] _printk+0xba/0xf1 [ 132.228733] ? record_print_text.cold+0x16/0x16 [ 132.228764] ? report_bug.cold+0x66/0xab [ 132.228784] ? group_sched_out.part.0+0x2c7/0x460 [ 132.228800] report_bug.cold+0x72/0xab [ 132.228821] handle_bug+0x3c/0x70 [ 132.228840] exc_invalid_op+0x14/0x50 [ 132.228860] asm_exc_invalid_op+0x16/0x20 [ 132.228884] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.228899] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.228913] RSP: 0018:ffff888043157978 EFLAGS: 00010006 [ 132.228925] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.228936] RDX: ffff888015f03580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.228947] RBP: ffff888043140000 R08: 0000000000000005 R09: 0000000000000001 [ 132.228957] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800f013000 [ 132.228968] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 132.228984] ? group_sched_out.part.0+0x2c7/0x460 [ 132.229003] ? group_sched_out.part.0+0x2c7/0x460 [ 132.229021] ctx_sched_out+0x8f1/0xc10 [ 132.229038] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.229060] ? lock_is_held_type+0xd7/0x130 [ 132.229086] ? __perf_cgroup_move+0x160/0x160 [ 132.229102] ? set_next_entity+0x304/0x550 [ 132.229127] ? update_curr+0x267/0x740 [ 132.229154] ? lock_is_held_type+0xd7/0x130 [ 132.229179] __schedule+0xedd/0x2470 [ 132.229195] ? io_schedule_timeout+0x150/0x150 [ 132.229208] ? find_held_lock+0x2c/0x110 [ 132.229228] ? lock_is_held_type+0xd7/0x130 [ 132.229249] ? __cond_resched+0x17/0x30 [ 132.229260] preempt_schedule_common+0x45/0xc0 [ 132.229273] __cond_resched+0x17/0x30 [ 132.229284] __mutex_lock+0xa3/0x14d0 [ 132.229297] ? lock_is_held_type+0xd7/0x130 [ 132.229314] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.229329] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.229342] ? lock_release+0x3b2/0x750 [ 132.229359] ? __up_read+0x192/0x730 [ 132.229374] ? up_write+0x480/0x480 [ 132.229389] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 132.229407] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.229423] ? __up_read+0x192/0x730 [ 132.229438] ? perf_compat_ioctl+0x130/0x130 [ 132.229450] ? up_write+0x480/0x480 [ 132.229468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.229487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.229508] do_syscall_64+0x3b/0x90 [ 132.229522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.229540] RIP: 0033:0x7f805687fb19 [ 132.229549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.229560] RSP: 002b:00007f8053df5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.229571] RAX: ffffffffffffffda RBX: 00007f8056992f60 RCX: 00007f805687fb19 [ 132.229579] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 132.229586] RBP: 00007f80568d9f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.229594] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.229601] R13: 00007ffc65037aef R14: 00007f8053df5300 R15: 0000000000022000 [ 132.229614] [ 132.229716] FAT-fs (loop4): Can't find a valid FAT filesystem [ 132.230410] WARNING: CPU: 1 PID: 3760 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 132.289967] Modules linked in: [ 132.290209] CPU: 1 PID: 3760 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220913 #1 [ 132.290797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.291624] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.292037] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.293375] RSP: 0018:ffff888043157978 EFLAGS: 00010006 [ 132.293763] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.294284] RDX: ffff888015f03580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.294809] RBP: ffff888043140000 R08: 0000000000000005 R09: 0000000000000001 [ 132.295342] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800f013000 [ 132.295864] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 132.296395] FS: 00007f8053df5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 132.296983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.297411] CR2: 00007fd611995290 CR3: 0000000042f7a000 CR4: 0000000000350ee0 [ 132.297937] Call Trace: [ 132.298132] [ 132.298305] ctx_sched_out+0x8f1/0xc10 [ 132.298595] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.298987] ? lock_is_held_type+0xd7/0x130 [ 132.299315] ? __perf_cgroup_move+0x160/0x160 [ 132.299653] ? set_next_entity+0x304/0x550 [ 132.299968] ? update_curr+0x267/0x740 [ 132.300257] ? lock_is_held_type+0xd7/0x130 [ 132.300577] __schedule+0xedd/0x2470 [ 132.300846] ? io_schedule_timeout+0x150/0x150 [ 132.301179] ? find_held_lock+0x2c/0x110 [ 132.301479] ? lock_is_held_type+0xd7/0x130 [ 132.301795] ? __cond_resched+0x17/0x30 [ 132.302086] preempt_schedule_common+0x45/0xc0 [ 132.302424] __cond_resched+0x17/0x30 [ 132.302697] __mutex_lock+0xa3/0x14d0 [ 132.302983] ? lock_is_held_type+0xd7/0x130 [ 132.303314] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.303713] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.304089] ? lock_release+0x3b2/0x750 [ 132.304392] ? __up_read+0x192/0x730 [ 132.304682] ? up_write+0x480/0x480 [ 132.304966] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 132.305350] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.305740] ? __up_read+0x192/0x730 [ 132.306028] ? perf_compat_ioctl+0x130/0x130 [ 132.306366] ? up_write+0x480/0x480 [ 132.306654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.307054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.307457] do_syscall_64+0x3b/0x90 [ 132.307739] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.308138] RIP: 0033:0x7f805687fb19 [ 132.308420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.309774] RSP: 002b:00007f8053df5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.310340] RAX: ffffffffffffffda RBX: 00007f8056992f60 RCX: 00007f805687fb19 [ 132.310874] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 132.311399] RBP: 00007f80568d9f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.311938] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.312468] R13: 00007ffc65037aef R14: 00007f8053df5300 R15: 0000000000022000 [ 132.313013] [ 132.313191] irq event stamp: 744 [ 132.313447] hardirqs last enabled at (743): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 132.314154] hardirqs last disabled at (744): [] __schedule+0x1225/0x2470 [ 132.314773] softirqs last enabled at (156): [] __irq_exit_rcu+0x11b/0x180 [ 132.315411] softirqs last disabled at (37): [] __irq_exit_rcu+0x11b/0x180 [ 132.316051] ---[ end trace 0000000000000000 ]--- 17:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{@fat=@nocase}]}) [ 132.429588] FAT-fs (loop4): bogus number of reserved sectors [ 132.430078] FAT-fs (loop4): Can't find a valid FAT filesystem 17:54:17 executing program 4: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000060) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sync() 17:54:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 134.579570] hrtimer: interrupt took 15158 ns 17:54:19 executing program 0: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0xcd5, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2) 17:54:19 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) 17:54:19 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) 17:54:19 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0xfffffffffffffc73, 0x1, 0x0, {}, 0x4040000, 0x0, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x101000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r1) 17:54:19 executing program 6: futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:54:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000400) rmdir(&(0x7f0000000180)='./file0\x00') 17:54:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:54:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 17:54:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 17:54:19 executing program 0: timer_create(0xfffffff4, 0x0, &(0x7f0000000040)) 17:54:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 17:54:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:54:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) 17:54:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 17:54:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000400) rmdir(&(0x7f0000000180)='./file0\x00') 17:54:19 executing program 6: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) [ 134.881666] syz-executor.2 (3974) used greatest stack depth: 24088 bytes left 17:54:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:54:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 17:54:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x0, 0x7}) 17:54:19 executing program 6: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 17:54:19 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "7241112b21a49192f8731fda527015be7c39dee767ebfb330cb452159d3fa543b71016db6124dff1c1be0643a0f2f60c8f0b227bb0368e517dd1ed0b6aadee633064fea57de0534b31d2b47c7c86f43fe56bd6356ff280cdd0715e42aad23de28dca78ba2fce3ec5b0c5b45cf7c78d9e135d85437f8227ac45e2ffafa4f82a6dfd7f2b87d31938d7a1186cc3413983a32d2b43b94beb932d002ca0e531dc48665e3a7d7e3ff9e770fd15efee9385823330749aa036a17ef977986a91a55813580ea99415846b9d9964165948c4d815a4cb72d2a95bb323f1b1ca5c3c65c08967532ff798520f499b09a9c439562d096609471a31734e894fe30bde817a323d8f", "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"}) 17:54:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 17:54:19 executing program 7: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_setup(0x2362, &(0x7f0000000040)={0x0, 0x2f11, 0x2, 0x2, 0xfe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x81) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x58) fcntl$setownex(r7, 0xf, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1000) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 17:54:19 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0xfffffffffffffc73, 0x1, 0x0, {}, 0x4040000, 0x0, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x101000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r1) 17:54:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x0, 0x3}, "", ['\x00']}, 0x120) 17:54:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000400) rmdir(&(0x7f0000000180)='./file0\x00') [ 135.168594] loop5: detected capacity change from 0 to 40 17:54:19 executing program 6: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) [ 135.304123] syz-executor.5: attempt to access beyond end of device [ 135.304123] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 135.305092] Buffer I/O error on dev loop5, logical block 10, lost async page write 17:54:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x0, 0x7}) 17:54:19 executing program 7: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_setup(0x2362, &(0x7f0000000040)={0x0, 0x2f11, 0x2, 0x2, 0xfe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x81) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x58) fcntl$setownex(r7, 0xf, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1000) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 17:54:19 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) 17:54:19 executing program 4: syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,afid=0x0000000000000000,access=&']) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESOCT]) 17:54:19 executing program 6: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 17:54:19 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0xfffffffffffffc73, 0x1, 0x0, {}, 0x4040000, 0x0, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x101000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r1) 17:54:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000400) rmdir(&(0x7f0000000180)='./file0\x00') 17:54:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 135.388586] 9p: Unknown access argument &: -22 [ 135.411143] loop5: detected capacity change from 0 to 40 17:54:19 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x1, &(0x7f00000000c0)=[@flowinfo={{0xfffffffffffffe21}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 17:54:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x0, 0x7}) [ 135.488389] syz-executor.5: attempt to access beyond end of device [ 135.488389] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 135.489549] Buffer I/O error on dev loop5, logical block 10, lost async page write 17:54:19 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 135.607259] Process accounting resumed [ 136.361811] Process accounting resumed 17:54:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x0, 0x7}) [ 136.404810] loop5: detected capacity change from 0 to 40 17:54:20 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 17:54:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in=@multicast1}, {@in=@loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xf8}}, 0x0) 17:54:20 executing program 7: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_setup(0x2362, &(0x7f0000000040)={0x0, 0x2f11, 0x2, 0x2, 0xfe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x81) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x58) fcntl$setownex(r7, 0xf, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1000) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 17:54:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast1}}, 0x1, 0x2, [{{0x2, 0x0, @private}}, {{0x2, 0x0, @remote}}]}, 0x190) 17:54:20 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 17:54:20 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) 17:54:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x1, &(0x7f00000000c0)=[@flowinfo={{0xfffffffffffffe21}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) [ 136.443756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:20 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) [ 136.462185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x1, &(0x7f00000000c0)=[@flowinfo={{0xfffffffffffffe21}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 17:54:20 executing program 0: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000004c0)) 17:54:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) alarm(0x0) [ 136.506919] Process accounting resumed [ 136.536204] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' 17:54:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 17:54:20 executing program 7: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_setup(0x2362, &(0x7f0000000040)={0x0, 0x2f11, 0x2, 0x2, 0xfe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x81) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x58) fcntl$setownex(r7, 0xf, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1000) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 17:54:20 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 17:54:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x1, &(0x7f00000000c0)=[@flowinfo={{0xfffffffffffffe21}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 17:54:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) [ 136.624827] syz-executor.5: attempt to access beyond end of device [ 136.624827] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.626306] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 136.647143] Process accounting resumed 17:54:21 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 17:54:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) 17:54:21 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) [ 136.781798] loop5: detected capacity change from 0 to 40 17:54:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 17:54:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 136.789657] Process accounting resumed 17:54:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) 17:54:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 136.819031] syz-executor.5: attempt to access beyond end of device [ 136.819031] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.820169] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 136.832161] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' 17:54:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 17:54:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) 17:54:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000300)={0x0, 0x82e8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 17:54:21 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 17:54:21 executing program 6: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x78bc, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 17:54:21 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 17:54:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 17:54:21 executing program 5: rt_sigsuspend(&(0x7f0000000280), 0x8) 17:54:22 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 17:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) fcntl$setlease(0xffffffffffffffff, 0x402, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7ffc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x610) 17:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 17:54:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 17:54:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 17:54:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x20004}}]}) 17:54:22 executing program 2: syz_emit_ethernet(0xf6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc0, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}]}}}}}}, 0x0) 17:54:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000d00b00002e2f66696c653100"]) r2 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0x100000) 17:54:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) [ 137.986750] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 137.991629] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 138.004285] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 17:54:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b80", 0x66, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000013800)) 17:54:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={[{@uid}]}) 17:54:22 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 17:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 17:54:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) [ 138.137642] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' 17:54:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={[{@uid}]}) 17:54:22 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) r1 = memfd_create(&(0x7f0000002800)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1,\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\x06\x00\xff\x1a\x8e\xe2ae\x1e=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\xc0\xa6d\x12\'y\x11Zcu\xe7\xc4{\\0Y[\xdf\x96\xbf\x97\xa7CS\xfe$\xeb\xac\x9a\xa9\x7f\x85G\xa2\xc8mt\x8fs-\xae\xc6\xd4\x8a|I\xe3\xfe\x04%\x1b\xd8F\xa9\x9f\x96?L\xb7MGE\xbf\x1b\xf8\t\f_\xa0j\x9e\xadM\xa4\xc8\xba\xdc\xabzO8\xeb#\xdc\x1e\v_\v\xc0\xbc\\r`\x8b\x11z\xbb\x89$\xe9t\x8c+6l\f\xd0\x0e\xd0K\x16C\xc8ty\x97\x8ev\x15\xe6\x8a\xc4p\xeb\xe5!\xcfS\x95\xe6\xfa\xb4+C\xc3\x01I\x1f\xea\xc27\xff\x9c\x13\xeed\xed8\xbfR\x01&\xe0@Y\xc9\xe6GL\xd5?\x03', 0x0) ftruncate(r1, 0x2000000) sendfile(r0, r1, 0x0, 0x7fff) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1, 0x1, 0x0) 17:54:22 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 17:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 17:54:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) keyctl$set_timeout(0xf, r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x3f, 0x80, 0x3f, 0x0, 0x100000001, 0x10200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x10000, 0xff, 0x3ff, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x6, 0x0, 0xa91e}, r2, 0x8, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0)=',\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)) 17:54:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={[{@uid}]}) 17:54:22 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) r1 = memfd_create(&(0x7f0000002800)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1,\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\x06\x00\xff\x1a\x8e\xe2ae\x1e=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\xc0\xa6d\x12\'y\x11Zcu\xe7\xc4{\\0Y[\xdf\x96\xbf\x97\xa7CS\xfe$\xeb\xac\x9a\xa9\x7f\x85G\xa2\xc8mt\x8fs-\xae\xc6\xd4\x8a|I\xe3\xfe\x04%\x1b\xd8F\xa9\x9f\x96?L\xb7MGE\xbf\x1b\xf8\t\f_\xa0j\x9e\xadM\xa4\xc8\xba\xdc\xabzO8\xeb#\xdc\x1e\v_\v\xc0\xbc\\r`\x8b\x11z\xbb\x89$\xe9t\x8c+6l\f\xd0\x0e\xd0K\x16C\xc8ty\x97\x8ev\x15\xe6\x8a\xc4p\xeb\xe5!\xcfS\x95\xe6\xfa\xb4+C\xc3\x01I\x1f\xea\xc27\xff\x9c\x13\xeed\xed8\xbfR\x01&\xe0@Y\xc9\xe6GL\xd5?\x03', 0x0) ftruncate(r1, 0x2000000) sendfile(r0, r1, 0x0, 0x7fff) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1, 0x1, 0x0) 17:54:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 17:54:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet6_buf(r1, 0x29, 0x45, 0x0, &(0x7f0000000180)) 17:54:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000d00b00002e2f66696c653100"]) r2 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0x100000) 17:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) fcntl$setlease(0xffffffffffffffff, 0x402, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7ffc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x610) 17:54:22 executing program 4: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)=0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 17:54:22 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) r1 = memfd_create(&(0x7f0000002800)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1,\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\x06\x00\xff\x1a\x8e\xe2ae\x1e=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\xc0\xa6d\x12\'y\x11Zcu\xe7\xc4{\\0Y[\xdf\x96\xbf\x97\xa7CS\xfe$\xeb\xac\x9a\xa9\x7f\x85G\xa2\xc8mt\x8fs-\xae\xc6\xd4\x8a|I\xe3\xfe\x04%\x1b\xd8F\xa9\x9f\x96?L\xb7MGE\xbf\x1b\xf8\t\f_\xa0j\x9e\xadM\xa4\xc8\xba\xdc\xabzO8\xeb#\xdc\x1e\v_\v\xc0\xbc\\r`\x8b\x11z\xbb\x89$\xe9t\x8c+6l\f\xd0\x0e\xd0K\x16C\xc8ty\x97\x8ev\x15\xe6\x8a\xc4p\xeb\xe5!\xcfS\x95\xe6\xfa\xb4+C\xc3\x01I\x1f\xea\xc27\xff\x9c\x13\xeed\xed8\xbfR\x01&\xe0@Y\xc9\xe6GL\xd5?\x03', 0x0) ftruncate(r1, 0x2000000) sendfile(r0, r1, 0x0, 0x7fff) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1, 0x1, 0x0) 17:54:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={[{@uid}]}) 17:54:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) keyctl$set_timeout(0xf, r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x3f, 0x80, 0x3f, 0x0, 0x100000001, 0x10200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x10000, 0xff, 0x3ff, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x6, 0x0, 0xa91e}, r2, 0x8, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0)=',\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)) 17:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 17:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) fcntl$setlease(0xffffffffffffffff, 0x402, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7ffc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x610) [ 138.622541] audit: type=1400 audit(1663091662.993:9): avc: denied { write } for pid=4206 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:54:23 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) r1 = memfd_create(&(0x7f0000002800)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1,\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\x06\x00\xff\x1a\x8e\xe2ae\x1e=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\xc0\xa6d\x12\'y\x11Zcu\xe7\xc4{\\0Y[\xdf\x96\xbf\x97\xa7CS\xfe$\xeb\xac\x9a\xa9\x7f\x85G\xa2\xc8mt\x8fs-\xae\xc6\xd4\x8a|I\xe3\xfe\x04%\x1b\xd8F\xa9\x9f\x96?L\xb7MGE\xbf\x1b\xf8\t\f_\xa0j\x9e\xadM\xa4\xc8\xba\xdc\xabzO8\xeb#\xdc\x1e\v_\v\xc0\xbc\\r`\x8b\x11z\xbb\x89$\xe9t\x8c+6l\f\xd0\x0e\xd0K\x16C\xc8ty\x97\x8ev\x15\xe6\x8a\xc4p\xeb\xe5!\xcfS\x95\xe6\xfa\xb4+C\xc3\x01I\x1f\xea\xc27\xff\x9c\x13\xeed\xed8\xbfR\x01&\xe0@Y\xc9\xe6GL\xd5?\x03', 0x0) ftruncate(r1, 0x2000000) sendfile(r0, r1, 0x0, 0x7fff) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1, 0x1, 0x0) [ 138.756375] random: crng reseeded on system resumption [ 138.763952] Restarting kernel threads ... done. [ 138.800833] random: crng reseeded on system resumption 17:54:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) keyctl$set_timeout(0xf, r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x3f, 0x80, 0x3f, 0x0, 0x100000001, 0x10200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x10000, 0xff, 0x3ff, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x6, 0x0, 0xa91e}, r2, 0x8, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0)=',\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)) 17:54:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) keyctl$set_timeout(0xf, r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x3f, 0x80, 0x3f, 0x0, 0x100000001, 0x10200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x10000, 0xff, 0x3ff, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x6, 0x0, 0xa91e}, r2, 0x8, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0)=',\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)) 17:54:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) fcntl$setlease(0xffffffffffffffff, 0x402, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7ffc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x610) 17:54:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f000000028 VM DIAGNOSIS: 17:54:16 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88804313f598 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd14e573700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd14e574000 CR3=000000001ee3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffff000000ff0000 YMM02=0000000000000000 0000000000000000 000056475213e010 00005647529a47d0 YMM03=0000000000000000 0000000000000000 0000000000000000 000056475200302f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 00005647529ace00 0000000000000004 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000002000000000 0000002000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888043157388 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8053df5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd611995290 CR3=0000000042f7a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000