Warning: Permanently added '[localhost]:14049' (ECDSA) to the list of known hosts. 2022/09/12 13:28:22 fuzzer started 2022/09/12 13:28:23 dialing manager at localhost:38027 syzkaller login: [ 37.123970] cgroup: Unknown subsys name 'net' [ 37.203752] cgroup: Unknown subsys name 'rlimit' 2022/09/12 13:28:37 syscalls: 2215 2022/09/12 13:28:37 code coverage: enabled 2022/09/12 13:28:37 comparison tracing: enabled 2022/09/12 13:28:37 extra coverage: enabled 2022/09/12 13:28:37 setuid sandbox: enabled 2022/09/12 13:28:37 namespace sandbox: enabled 2022/09/12 13:28:37 Android sandbox: enabled 2022/09/12 13:28:37 fault injection: enabled 2022/09/12 13:28:37 leak checking: enabled 2022/09/12 13:28:37 net packet injection: enabled 2022/09/12 13:28:37 net device setup: enabled 2022/09/12 13:28:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 13:28:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 13:28:37 USB emulation: enabled 2022/09/12 13:28:37 hci packet injection: enabled 2022/09/12 13:28:37 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 13:28:37 802.15.4 emulation: enabled 2022/09/12 13:28:37 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 13:28:38 fetching corpus: 46, signal 31439/34414 (executing program) 2022/09/12 13:28:38 fetching corpus: 96, signal 45862/49681 (executing program) 2022/09/12 13:28:38 fetching corpus: 146, signal 56871/61266 (executing program) 2022/09/12 13:28:38 fetching corpus: 196, signal 66441/71247 (executing program) 2022/09/12 13:28:38 fetching corpus: 246, signal 72312/77539 (executing program) 2022/09/12 13:28:38 fetching corpus: 296, signal 77144/82792 (executing program) 2022/09/12 13:28:39 fetching corpus: 346, signal 80885/86890 (executing program) 2022/09/12 13:28:39 fetching corpus: 396, signal 85090/91263 (executing program) 2022/09/12 13:28:39 fetching corpus: 446, signal 89797/95930 (executing program) 2022/09/12 13:28:39 fetching corpus: 496, signal 94569/100504 (executing program) 2022/09/12 13:28:39 fetching corpus: 546, signal 98681/104413 (executing program) 2022/09/12 13:28:39 fetching corpus: 596, signal 101458/107172 (executing program) 2022/09/12 13:28:40 fetching corpus: 644, signal 104076/109649 (executing program) 2022/09/12 13:28:40 fetching corpus: 694, signal 106638/112038 (executing program) 2022/09/12 13:28:40 fetching corpus: 744, signal 110597/115356 (executing program) 2022/09/12 13:28:40 fetching corpus: 794, signal 113028/117420 (executing program) 2022/09/12 13:28:41 fetching corpus: 844, signal 115847/119700 (executing program) 2022/09/12 13:28:41 fetching corpus: 894, signal 118839/122047 (executing program) 2022/09/12 13:28:41 fetching corpus: 944, signal 120408/123323 (executing program) 2022/09/12 13:28:41 fetching corpus: 994, signal 122507/124885 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/125781 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/125862 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/125968 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126074 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126167 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126261 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126358 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126455 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126557 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126653 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126737 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126830 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/126915 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127017 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127123 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127215 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127310 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127405 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127486 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127573 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127679 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127772 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127890 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/127982 (executing program) 2022/09/12 13:28:41 fetching corpus: 1018, signal 123741/128098 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128185 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128272 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128368 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128449 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128542 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128621 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128712 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128802 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128890 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/128980 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129093 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129173 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129275 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129353 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129448 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129533 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129625 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129671 (executing program) 2022/09/12 13:28:42 fetching corpus: 1018, signal 123741/129671 (executing program) 2022/09/12 13:28:44 starting 8 fuzzer processes 13:28:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:28:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 13:28:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) [ 58.626039] audit: type=1400 audit(1662989324.965:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:28:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:28:44 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @local, @empty}}}}, 0x0) 13:28:45 executing program 6: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/30) socket$unix(0x1, 0x0, 0x0) fork() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) 13:28:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2282, &(0x7f0000000000)) 13:28:45 executing program 7: setitimer(0x2, 0x0, 0xfffffffffffffffd) [ 60.015979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.018203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.020230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.024729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.026821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.028130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.029295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.032043] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.033864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.036174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.040063] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.042629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.078857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.080667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.082547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.083994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.085402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.085630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.091163] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.093096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.093779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.097655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.097826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.103872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.106857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.109849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.111303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.115658] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.124625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.126785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.128498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.132801] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.158155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.158257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.170334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.186353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.187950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.189639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.191650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.204707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.207417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.209502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.209791] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.212301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.213861] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.215161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.236265] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.241335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.243016] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.244202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.244337] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.247311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.253242] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.254940] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.255705] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.301889] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.096686] Bluetooth: hci1: command 0x0409 tx timeout [ 62.159254] Bluetooth: hci2: command 0x0409 tx timeout [ 62.159784] Bluetooth: hci5: command 0x0409 tx timeout [ 62.159934] Bluetooth: hci0: command 0x0409 tx timeout [ 62.287980] Bluetooth: hci4: command 0x0409 tx timeout [ 62.350970] Bluetooth: hci3: command 0x0409 tx timeout [ 62.351460] Bluetooth: hci6: command 0x0409 tx timeout [ 62.353416] Bluetooth: hci7: command 0x0409 tx timeout [ 64.142998] Bluetooth: hci1: command 0x041b tx timeout [ 64.207147] Bluetooth: hci0: command 0x041b tx timeout [ 64.208010] Bluetooth: hci5: command 0x041b tx timeout [ 64.208794] Bluetooth: hci2: command 0x041b tx timeout [ 64.335007] Bluetooth: hci4: command 0x041b tx timeout [ 64.399164] Bluetooth: hci7: command 0x041b tx timeout [ 64.400342] Bluetooth: hci6: command 0x041b tx timeout [ 64.403205] Bluetooth: hci3: command 0x041b tx timeout [ 66.192558] Bluetooth: hci1: command 0x040f tx timeout [ 66.256128] Bluetooth: hci2: command 0x040f tx timeout [ 66.257600] Bluetooth: hci5: command 0x040f tx timeout [ 66.260384] Bluetooth: hci0: command 0x040f tx timeout [ 66.382978] Bluetooth: hci4: command 0x040f tx timeout [ 66.448518] Bluetooth: hci3: command 0x040f tx timeout [ 66.449388] Bluetooth: hci6: command 0x040f tx timeout [ 66.452382] Bluetooth: hci7: command 0x040f tx timeout [ 68.239030] Bluetooth: hci1: command 0x0419 tx timeout [ 68.302996] Bluetooth: hci0: command 0x0419 tx timeout [ 68.303758] Bluetooth: hci5: command 0x0419 tx timeout [ 68.305742] Bluetooth: hci2: command 0x0419 tx timeout [ 68.431039] Bluetooth: hci4: command 0x0419 tx timeout [ 68.495094] Bluetooth: hci7: command 0x0419 tx timeout [ 68.497717] Bluetooth: hci6: command 0x0419 tx timeout [ 68.498647] Bluetooth: hci3: command 0x0419 tx timeout [ 114.110419] syz-executor.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.469147] audit: type=1400 audit(1662989380.808:7): avc: denied { open } for pid=3940 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.470659] audit: type=1400 audit(1662989380.809:8): avc: denied { kernel } for pid=3940 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:29:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2282, &(0x7f0000000000)) 13:29:41 executing program 6: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/30) socket$unix(0x1, 0x0, 0x0) fork() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) 13:29:41 executing program 7: setitimer(0x2, 0x0, 0xfffffffffffffffd) 13:29:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @local, @empty}}}}, 0x0) 13:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 13:29:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) [ 114.742062] ------------[ cut here ]------------ [ 114.742090] [ 114.742094] ====================================================== [ 114.742097] WARNING: possible circular locking dependency detected [ 114.742101] 6.0.0-rc5-next-20220912 #1 Not tainted [ 114.742108] ------------------------------------------------------ [ 114.742111] syz-executor.3/3964 is trying to acquire lock: [ 114.742117] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 114.742154] [ 114.742154] but task is already holding lock: [ 114.742157] ffff888017723020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 114.742184] [ 114.742184] which lock already depends on the new lock. [ 114.742184] [ 114.742187] [ 114.742187] the existing dependency chain (in reverse order) is: [ 114.742190] [ 114.742190] -> #3 (&ctx->lock){....}-{2:2}: [ 114.742205] _raw_spin_lock+0x2a/0x40 [ 114.742222] __perf_event_task_sched_out+0x53b/0x18d0 [ 114.742234] __schedule+0xedd/0x2470 [ 114.742244] schedule+0xda/0x1b0 [ 114.742253] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.742274] syscall_exit_to_user_mode+0x19/0x40 [ 114.742291] do_syscall_64+0x48/0x90 [ 114.742305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.742322] [ 114.742322] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 114.742335] _raw_spin_lock_nested+0x30/0x40 [ 114.742350] raw_spin_rq_lock_nested+0x1e/0x30 [ 114.742363] task_fork_fair+0x63/0x4d0 [ 114.742381] sched_cgroup_fork+0x3d0/0x540 [ 114.742395] copy_process+0x3f9e/0x6df0 [ 114.742405] kernel_clone+0xe7/0x890 [ 114.742415] user_mode_thread+0xad/0xf0 [ 114.742425] rest_init+0x24/0x250 [ 114.742441] arch_call_rest_init+0xf/0x14 [ 114.742461] start_kernel+0x4c1/0x4e6 [ 114.742478] secondary_startup_64_no_verify+0xe0/0xeb [ 114.742493] [ 114.742493] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 114.742506] _raw_spin_lock_irqsave+0x39/0x60 [ 114.742521] try_to_wake_up+0xab/0x1920 [ 114.742535] up+0x75/0xb0 [ 114.742546] __up_console_sem+0x6e/0x80 [ 114.742562] console_unlock+0x46a/0x590 [ 114.742579] do_con_write+0xc05/0x1d50 [ 114.742590] con_write+0x21/0x40 [ 114.742600] n_tty_write+0x4d4/0xfe0 [ 114.742613] file_tty_write.constprop.0+0x49c/0x8f0 [ 114.742624] vfs_write+0x9c3/0xd90 [ 114.742643] ksys_write+0x127/0x250 [ 114.742660] do_syscall_64+0x3b/0x90 [ 114.742673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.742689] [ 114.742689] -> #0 ((console_sem).lock){....}-{2:2}: [ 114.742703] __lock_acquire+0x2a02/0x5e70 [ 114.742720] lock_acquire+0x1a2/0x530 [ 114.742736] _raw_spin_lock_irqsave+0x39/0x60 [ 114.742751] down_trylock+0xe/0x70 [ 114.742763] __down_trylock_console_sem+0x3b/0xd0 [ 114.742780] vprintk_emit+0x16b/0x560 [ 114.742796] vprintk+0x84/0xa0 [ 114.742812] _printk+0xba/0xf1 [ 114.742830] report_bug.cold+0x72/0xab [ 114.742842] handle_bug+0x3c/0x70 [ 114.742855] exc_invalid_op+0x14/0x50 [ 114.742868] asm_exc_invalid_op+0x16/0x20 [ 114.742884] group_sched_out.part.0+0x2c7/0x460 [ 114.742894] ctx_sched_out+0x8f1/0xc10 [ 114.742904] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.742916] __schedule+0xedd/0x2470 [ 114.742925] schedule+0xda/0x1b0 [ 114.742934] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.742954] syscall_exit_to_user_mode+0x19/0x40 [ 114.742971] do_syscall_64+0x48/0x90 [ 114.742983] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.743000] [ 114.743000] other info that might help us debug this: [ 114.743000] [ 114.743003] Chain exists of: [ 114.743003] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 114.743003] [ 114.743018] Possible unsafe locking scenario: [ 114.743018] [ 114.743020] CPU0 CPU1 [ 114.743022] ---- ---- [ 114.743025] lock(&ctx->lock); 13:29:41 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @local, @empty}}}}, 0x0) [ 114.743030] lock(&rq->__lock); [ 114.743036] lock(&ctx->lock); [ 114.743043] lock((console_sem).lock); [ 114.743048] [ 114.743048] *** DEADLOCK *** [ 114.743048] [ 114.743050] 2 locks held by syz-executor.3/3964: [ 114.743057] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 114.743082] #1: ffff888017723020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 114.743110] [ 114.743110] stack backtrace: [ 114.743112] CPU: 0 PID: 3964 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 114.743125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 114.743133] Call Trace: [ 114.743136] [ 114.743141] dump_stack_lvl+0x8b/0xb3 [ 114.743155] check_noncircular+0x263/0x2e0 [ 114.743172] ? format_decode+0x26c/0xb50 [ 114.743187] ? print_circular_bug+0x450/0x450 [ 114.743205] ? enable_ptr_key_workfn+0x20/0x20 [ 114.743220] ? format_decode+0x26c/0xb50 [ 114.743236] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 114.743255] __lock_acquire+0x2a02/0x5e70 [ 114.743278] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 114.743297] ? __mutex_add_waiter+0x120/0x120 [ 114.743317] lock_acquire+0x1a2/0x530 [ 114.743334] ? down_trylock+0xe/0x70 [ 114.743349] ? rcu_read_unlock+0x40/0x40 [ 114.743369] ? __lock_acquire+0x164d/0x5e70 [ 114.743389] ? vprintk+0x84/0xa0 [ 114.743407] _raw_spin_lock_irqsave+0x39/0x60 [ 114.743423] ? down_trylock+0xe/0x70 [ 114.743437] down_trylock+0xe/0x70 [ 114.743450] ? vprintk+0x84/0xa0 [ 114.743468] __down_trylock_console_sem+0x3b/0xd0 [ 114.743486] vprintk_emit+0x16b/0x560 [ 114.743506] vprintk+0x84/0xa0 [ 114.743524] _printk+0xba/0xf1 [ 114.743542] ? record_print_text.cold+0x16/0x16 13:29:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) [ 114.743565] ? report_bug.cold+0x66/0xab [ 114.743579] ? group_sched_out.part.0+0x2c7/0x460 [ 114.743591] report_bug.cold+0x72/0xab [ 114.743606] handle_bug+0x3c/0x70 [ 114.743620] exc_invalid_op+0x14/0x50 [ 114.743634] asm_exc_invalid_op+0x16/0x20 [ 114.743651] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 114.743665] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 114.743676] RSP: 0018:ffff88803ee37c48 EFLAGS: 00010006 [ 114.743685] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 114.743693] RDX: ffff88800fabd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 114.743701] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 114.743708] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888017723000 [ 114.743716] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 114.743728] ? group_sched_out.part.0+0x2c7/0x460 [ 114.743742] ? group_sched_out.part.0+0x2c7/0x460 [ 114.743755] ctx_sched_out+0x8f1/0xc10 [ 114.743769] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.743785] ? lock_is_held_type+0xd7/0x130 [ 114.743804] ? __perf_cgroup_move+0x160/0x160 [ 114.743815] ? set_next_entity+0x304/0x550 [ 114.743834] ? update_curr+0x267/0x740 [ 114.743853] ? lock_is_held_type+0xd7/0x130 [ 114.743872] __schedule+0xedd/0x2470 [ 114.743886] ? io_schedule_timeout+0x150/0x150 [ 114.743899] ? __x64_sys_futex_time32+0x480/0x480 [ 114.743914] schedule+0xda/0x1b0 [ 114.743925] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.743946] syscall_exit_to_user_mode+0x19/0x40 [ 114.743964] do_syscall_64+0x48/0x90 [ 114.743978] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.743995] RIP: 0033:0x7f19dab9bb19 [ 114.744004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.744015] RSP: 002b:00007f19d8111218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.744026] RAX: 0000000000000001 RBX: 00007f19dacaef68 RCX: 00007f19dab9bb19 [ 114.744034] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19dacaef6c [ 114.744041] RBP: 00007f19dacaef60 R08: 000000000000000e R09: 0000000000000000 [ 114.744049] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f19dacaef6c [ 114.744056] R13: 00007fffc1e3737f R14: 00007f19d8111300 R15: 0000000000022000 [ 114.744071] [ 114.801730] WARNING: CPU: 0 PID: 3964 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 114.802424] Modules linked in: [ 114.802667] CPU: 0 PID: 3964 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 114.803270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 114.804101] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 114.804509] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 114.805868] RSP: 0018:ffff88803ee37c48 EFLAGS: 00010006 [ 114.806261] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 114.806800] RDX: ffff88800fabd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 114.807340] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 114.807887] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888017723000 [ 114.808425] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 114.808965] FS: 00007f19d8111700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 114.809563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.810003] CR2: 00007f19dacaf018 CR3: 000000003dca6000 CR4: 0000000000350ef0 [ 114.810543] Call Trace: [ 114.810739] [ 114.810919] ctx_sched_out+0x8f1/0xc10 [ 114.811224] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.811617] ? lock_is_held_type+0xd7/0x130 [ 114.811949] ? __perf_cgroup_move+0x160/0x160 [ 114.812293] ? set_next_entity+0x304/0x550 [ 114.812619] ? update_curr+0x267/0x740 [ 114.812925] ? lock_is_held_type+0xd7/0x130 [ 114.813264] __schedule+0xedd/0x2470 [ 114.813557] ? io_schedule_timeout+0x150/0x150 [ 114.813905] ? __x64_sys_futex_time32+0x480/0x480 [ 114.814271] schedule+0xda/0x1b0 [ 114.814531] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.814918] syscall_exit_to_user_mode+0x19/0x40 [ 114.815290] do_syscall_64+0x48/0x90 [ 114.815581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.815980] RIP: 0033:0x7f19dab9bb19 [ 114.816259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.817624] RSP: 002b:00007f19d8111218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.818203] RAX: 0000000000000001 RBX: 00007f19dacaef68 RCX: 00007f19dab9bb19 [ 114.818744] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19dacaef6c [ 114.819286] RBP: 00007f19dacaef60 R08: 000000000000000e R09: 0000000000000000 [ 114.819818] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f19dacaef6c [ 114.820354] R13: 00007fffc1e3737f R14: 00007f19d8111300 R15: 0000000000022000 [ 114.820904] [ 114.821088] irq event stamp: 240 [ 114.821344] hardirqs last enabled at (239): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 114.822049] hardirqs last disabled at (240): [] __schedule+0x1225/0x2470 [ 114.822678] softirqs last enabled at (214): [] __irq_exit_rcu+0x11b/0x180 [ 114.823327] softirqs last disabled at (179): [] __irq_exit_rcu+0x11b/0x180 [ 114.823961] ---[ end trace 0000000000000000 ]--- 13:29:41 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @local, @empty}}}}, 0x0) 13:29:41 executing program 7: setitimer(0x2, 0x0, 0xfffffffffffffffd) 13:29:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 13:29:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2282, &(0x7f0000000000)) 13:29:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 13:29:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 6: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/30) socket$unix(0x1, 0x0, 0x0) fork() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) 13:29:41 executing program 7: setitimer(0x2, 0x0, 0xfffffffffffffffd) 13:29:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2282, &(0x7f0000000000)) 13:29:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 13:29:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 6: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/30) socket$unix(0x1, 0x0, 0x0) fork() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) 13:29:41 executing program 5: clone3(&(0x7f0000000700)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:29:41 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 13:29:41 executing program 7: prctl$PR_SET_DUMPABLE(0x2f, 0x2) 13:29:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 13:29:41 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 13:29:41 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 13:29:41 executing program 7: prctl$PR_SET_DUMPABLE(0x2f, 0x2) 13:29:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000400), 0x4) 13:29:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0xf95) 13:29:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x0, 0x0, 0x9}, 0x1c) 13:29:41 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c02, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 13:29:41 executing program 7: prctl$PR_SET_DUMPABLE(0x2f, 0x2) 13:29:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000400), 0x4) 13:29:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 115.389012] sit: Src spoofed 0.0.0.156/2002:0:29c:0:9cdf:3f09:: -> 172.20.20.170/5171::2200 [ 115.390135] sit: Src spoofed 0.0.0.156/2002:0:29c:0:9cdf:3f09:: -> 172.20.20.170/5171::2200 13:29:41 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 13:29:41 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0xb46eb7975513fe78}) 13:29:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x0, 0x0, 0x9}, 0x1c) 13:29:41 executing program 7: prctl$PR_SET_DUMPABLE(0x2f, 0x2) 13:29:41 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c02, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) [ 115.519118] loop6: detected capacity change from 0 to 40 [ 115.527148] sit: Src spoofed 0.0.0.156/2002:0:29c:0:9cdf:3f09:: -> 172.20.20.170/5171::2200 13:29:41 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0xb46eb7975513fe78}) 13:29:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000400), 0x4) 13:29:41 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0) write(r0, &(0x7f0000000300)='2l', 0x2) 13:29:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13:29:41 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c02, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 13:29:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x0, 0x0, 0x9}, 0x1c) 13:29:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000400), 0x4) 13:29:41 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0xb46eb7975513fe78}) 13:29:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) [ 115.632029] sit: Src spoofed 0.0.0.156/2002:0:29c:0:9cdf:3f09:: -> 172.20.20.170/5171::2200 [ 115.638120] loop6: detected capacity change from 0 to 40 13:29:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13:29:41 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0xb46eb7975513fe78}) 13:29:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 115.666787] loop7: detected capacity change from 0 to 40 13:29:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 115.748419] loop6: detected capacity change from 0 to 40 13:29:42 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0x9c, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x9c02, "9cdf3f090000000051710000000000000000000000002200", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"452bd88da6fe3cce2e1d7da77bb012ba", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) [ 115.772838] sit: Src spoofed 0.0.0.156/2002:0:29c:0:9cdf:3f09:: -> 172.20.20.170/5171::2200 13:29:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x0, 0x0, 0x9}, 0x1c) [ 115.875707] loop6: detected capacity change from 0 to 40 [ 115.879336] loop7: detected capacity change from 0 to 40 13:29:42 executing program 2: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x62e003}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13:29:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 5: epoll_create(0x77d1) socket$inet6(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(r0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13:29:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) 13:29:42 executing program 5: epoll_create(0x77d1) socket$inet6(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(r0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0) 13:29:42 executing program 2: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x62e003}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) [ 115.979547] loop7: detected capacity change from 0 to 40 [ 116.010194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.011162] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:29:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:42 executing program 2: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x62e003}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:29:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:29:42 executing program 5: epoll_create(0x77d1) socket$inet6(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(r0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0) [ 116.118793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.119996] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 116.128092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.146000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.160567] syz-executor.7 (4138) used greatest stack depth: 22808 bytes left 13:29:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:42 executing program 2: r0 = syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x62e003}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10001b, 0x0, 0x0, 0x0, 0x0) 13:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:29:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:29:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0) 13:29:43 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:29:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:29:43 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 13:29:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:43 executing program 5: epoll_create(0x77d1) socket$inet6(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(r0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) [ 116.984528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.985380] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 117.005934] loop1: detected capacity change from 0 to 264192 13:29:43 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 13:29:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0) [ 117.054254] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 13:29:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:29:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 117.116333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.117776] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 117.120555] loop1: detected capacity change from 0 to 264192 [ 117.135280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 13:29:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 117.235205] loop1: detected capacity change from 0 to 264192 13:29:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:29:44 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 13:29:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:44 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 117.957690] loop3: detected capacity change from 0 to 264192 [ 117.962072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.965865] loop1: detected capacity change from 0 to 264192 [ 117.980189] loop4: detected capacity change from 0 to 264192 13:29:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:44 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 13:29:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1}}, 0x0) 13:29:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:44 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:44 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)) 13:29:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736642a3c400088001000440000004f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100045ec70325132510000ec70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200046ec70325132510000ec70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200046ec70325132510000ec70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200046ec70325132510000ec703251070064000000", 0x120, 0x2800}, {&(0x7f0000010700)="2e20202020202020202020100045ec70325132510000ec7032510300000000002e2e202020202020202020100045ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200046ec70325132510000ec70325104001a040000", 0x80, 0x43000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x83000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xc3000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x143000}], 0x0, &(0x7f0000010f00)) [ 118.131466] loop2: detected capacity change from 0 to 5168 13:29:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 118.147205] loop7: detected capacity change from 0 to 264192 13:29:44 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 118.161406] loop0: detected capacity change from 0 to 2048 [ 118.182907] hrtimer: interrupt took 17212 ns 13:29:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 118.200797] loop1: detected capacity change from 0 to 264192 [ 118.206329] loop3: detected capacity change from 0 to 264192 [ 118.233381] loop4: detected capacity change from 0 to 264192 [ 118.248662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.260570] ext4 filesystem being mounted at /syzkaller-testdir949044417/syzkaller.WDGUxH/18/file0 supports timestamps until 2038 (0x7fffffff) [ 118.297676] EXT4-fs (loop0): unmounting filesystem. 13:29:44 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)) [ 118.351439] loop0: detected capacity change from 0 to 2048 [ 118.377730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.378526] ext4 filesystem being mounted at /syzkaller-testdir949044417/syzkaller.WDGUxH/19/file0 supports timestamps until 2038 (0x7fffffff) 13:29:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) [ 118.435332] EXT4-fs (loop0): unmounting filesystem. [ 118.466760] loop7: detected capacity change from 0 to 264192 [ 118.545362] loop3: detected capacity change from 0 to 264192 13:29:45 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:45 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)) 13:29:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 118.956862] loop0: detected capacity change from 0 to 2048 [ 118.965337] loop4: detected capacity change from 0 to 264192 [ 119.050799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 13:29:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 119.056731] ext4 filesystem being mounted at /syzkaller-testdir949044417/syzkaller.WDGUxH/20/file0 supports timestamps until 2038 (0x7fffffff) [ 119.163614] EXT4-fs (loop0): unmounting filesystem. [ 119.869722] loop0: detected capacity change from 0 to 2048 13:29:46 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:46 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)) 13:29:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 13:29:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r1 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = openat2(r4, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r6 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) 13:29:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) 13:29:46 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:46 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:46 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x10000, 0x0, 0xfffffffd}) [ 119.884412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.885392] ext4 filesystem being mounted at /syzkaller-testdir949044417/syzkaller.WDGUxH/21/file0 supports timestamps until 2038 (0x7fffffff) [ 119.901956] EXT4-fs (loop0): unmounting filesystem. [ 119.976782] loop7: detected capacity change from 0 to 264192 13:29:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) 13:29:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 13:29:47 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x10000, 0x0, 0xfffffffd}) 13:29:47 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:47 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) 13:29:47 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:47 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}, {0x0, 0xd3fa}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3}, {}], 0x2, &(0x7f0000000140)) 13:29:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) 13:29:47 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x10000, 0x0, 0xfffffffd}) 13:29:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 13:29:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) 13:29:47 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) 13:29:47 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x10000, 0x0, 0xfffffffd}) 13:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 13:29:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 6: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r0) close(r1) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) 13:29:48 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:48 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 13:29:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}], 0x1) 13:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) 13:29:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 6: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r0) close(r1) 13:29:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x20, 0x1e, 0x201, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x2}]}]}, 0x20}], 0x1}, 0x0) 13:29:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x20040, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x125) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x3) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x20, 0x1e, 0x201, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x2}]}]}, 0x20}], 0x1}, 0x0) 13:29:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 13:29:48 executing program 6: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r0) close(r1) 13:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x20, 0x1e, 0x201, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x2}]}]}, 0x20}], 0x1}, 0x0) 13:29:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000100) creat(&(0x7f0000000a80)='./file0/file0\x00', 0x0) 13:29:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x20040, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x125) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x3) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 13:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x20, 0x1e, 0x201, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x2}]}]}, 0x20}], 0x1}, 0x0) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 3: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 6: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r0) close(r1) 13:29:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x20040, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x125) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x3) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 13:29:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xc5}, 0xf) 13:29:48 executing program 3: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x20040, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x125) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x3) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 13:29:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 13:29:48 executing program 3: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\ VM DIAGNOSIS: 13:29:41 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b1dbc RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803ee37640 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec7fab R15=dffffc0000000000 RIP=ffffffff822b1e11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f19d8111700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19dacaf018 CR3=000000003dca6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f19dac827c0 00007f19dac827c8 YMM02=0000000000000000 0000000000000000 00007f19dac827e0 00007f19dac827c0 YMM03=0000000000000000 0000000000000000 00007f19dac827c8 00007f19dac827c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88803d7c9ac0 RCX=1ffffffff0a2b515 RDX=0000000000000000 RSI=0000000000000002 RDI=ffff88803d7c9eb4 RBP=ffff88803d7c9ac0 RSP=ffff88803ee675d0 R8 =0000000000000000 R9 =ffffea0000ece087 R10=fffff940001d9c10 R11=0000000000000001 R12=ffff88803d7c9ac0 R13=ffff88800e8efb60 R14=0000000000000000 R15=ffffea0000ece080 RIP=ffffffff81324ca9 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0d011ea000 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffff81006ffc ffffffff81006fd8 YMM01=0000000000000000 0000000000000000 ffffffff81006ffc ffffffff81006ffc YMM02=0000000000000000 0000000000000000 00007f0d011c17e0 00007f0d011c17c0 YMM03=0000000000000000 0000000000000000 00007f0d011c17c8 00007f0d011c17c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000