Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:42209' (ECDSA) to the list of known hosts. 2022/10/06 11:56:00 fuzzer started 2022/10/06 11:56:01 dialing manager at localhost:37161 syzkaller login: [ 43.572674] cgroup: Unknown subsys name 'net' [ 43.657783] cgroup: Unknown subsys name 'rlimit' 2022/10/06 11:56:14 syscalls: 2215 2022/10/06 11:56:14 code coverage: enabled 2022/10/06 11:56:14 comparison tracing: enabled 2022/10/06 11:56:14 extra coverage: enabled 2022/10/06 11:56:14 setuid sandbox: enabled 2022/10/06 11:56:14 namespace sandbox: enabled 2022/10/06 11:56:14 Android sandbox: enabled 2022/10/06 11:56:14 fault injection: enabled 2022/10/06 11:56:14 leak checking: enabled 2022/10/06 11:56:14 net packet injection: enabled 2022/10/06 11:56:14 net device setup: enabled 2022/10/06 11:56:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 11:56:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 11:56:14 USB emulation: enabled 2022/10/06 11:56:14 hci packet injection: enabled 2022/10/06 11:56:14 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 11:56:14 802.15.4 emulation: enabled 2022/10/06 11:56:14 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/06 11:56:14 fetching corpus: 50, signal 22592/26055 (executing program) 2022/10/06 11:56:14 fetching corpus: 100, signal 34081/38911 (executing program) 2022/10/06 11:56:14 fetching corpus: 150, signal 46078/52020 (executing program) 2022/10/06 11:56:14 fetching corpus: 200, signal 52488/59534 (executing program) 2022/10/06 11:56:15 fetching corpus: 250, signal 58138/66205 (executing program) 2022/10/06 11:56:15 fetching corpus: 300, signal 60620/69844 (executing program) 2022/10/06 11:56:15 fetching corpus: 350, signal 68969/78777 (executing program) 2022/10/06 11:56:15 fetching corpus: 400, signal 72509/83167 (executing program) 2022/10/06 11:56:15 fetching corpus: 450, signal 76820/88145 (executing program) 2022/10/06 11:56:15 fetching corpus: 500, signal 80010/92063 (executing program) 2022/10/06 11:56:15 fetching corpus: 550, signal 82806/95598 (executing program) 2022/10/06 11:56:15 fetching corpus: 600, signal 84285/97903 (executing program) 2022/10/06 11:56:15 fetching corpus: 650, signal 87459/101632 (executing program) 2022/10/06 11:56:15 fetching corpus: 700, signal 89705/104547 (executing program) 2022/10/06 11:56:15 fetching corpus: 750, signal 91178/106777 (executing program) 2022/10/06 11:56:16 fetching corpus: 800, signal 93112/109344 (executing program) 2022/10/06 11:56:16 fetching corpus: 850, signal 94761/111645 (executing program) 2022/10/06 11:56:16 fetching corpus: 900, signal 96134/113692 (executing program) 2022/10/06 11:56:16 fetching corpus: 950, signal 99812/117503 (executing program) 2022/10/06 11:56:16 fetching corpus: 1000, signal 102119/120149 (executing program) 2022/10/06 11:56:16 fetching corpus: 1050, signal 104476/122797 (executing program) 2022/10/06 11:56:16 fetching corpus: 1100, signal 105595/124466 (executing program) 2022/10/06 11:56:16 fetching corpus: 1150, signal 107482/126659 (executing program) 2022/10/06 11:56:17 fetching corpus: 1200, signal 109274/128770 (executing program) 2022/10/06 11:56:17 fetching corpus: 1250, signal 111708/131341 (executing program) 2022/10/06 11:56:17 fetching corpus: 1300, signal 112797/132880 (executing program) 2022/10/06 11:56:17 fetching corpus: 1350, signal 114091/134496 (executing program) 2022/10/06 11:56:17 fetching corpus: 1400, signal 114864/135760 (executing program) 2022/10/06 11:56:17 fetching corpus: 1450, signal 116122/137360 (executing program) 2022/10/06 11:56:17 fetching corpus: 1500, signal 116872/138591 (executing program) 2022/10/06 11:56:17 fetching corpus: 1550, signal 118875/140592 (executing program) 2022/10/06 11:56:17 fetching corpus: 1600, signal 119869/141838 (executing program) 2022/10/06 11:56:17 fetching corpus: 1650, signal 121425/143442 (executing program) 2022/10/06 11:56:18 fetching corpus: 1700, signal 123140/145171 (executing program) 2022/10/06 11:56:18 fetching corpus: 1750, signal 124309/146469 (executing program) 2022/10/06 11:56:18 fetching corpus: 1800, signal 126402/148350 (executing program) 2022/10/06 11:56:18 fetching corpus: 1850, signal 127534/149620 (executing program) 2022/10/06 11:56:18 fetching corpus: 1900, signal 128891/150942 (executing program) 2022/10/06 11:56:18 fetching corpus: 1950, signal 130574/152370 (executing program) 2022/10/06 11:56:18 fetching corpus: 2000, signal 131666/153494 (executing program) 2022/10/06 11:56:18 fetching corpus: 2050, signal 133198/154892 (executing program) 2022/10/06 11:56:18 fetching corpus: 2100, signal 134310/155928 (executing program) 2022/10/06 11:56:18 fetching corpus: 2150, signal 135977/157268 (executing program) 2022/10/06 11:56:19 fetching corpus: 2200, signal 136895/158253 (executing program) 2022/10/06 11:56:19 fetching corpus: 2250, signal 138358/159419 (executing program) 2022/10/06 11:56:19 fetching corpus: 2300, signal 139002/160215 (executing program) 2022/10/06 11:56:19 fetching corpus: 2350, signal 140024/161141 (executing program) 2022/10/06 11:56:19 fetching corpus: 2400, signal 141082/162044 (executing program) 2022/10/06 11:56:19 fetching corpus: 2450, signal 142326/162967 (executing program) 2022/10/06 11:56:19 fetching corpus: 2500, signal 143631/163908 (executing program) 2022/10/06 11:56:19 fetching corpus: 2550, signal 144492/164668 (executing program) 2022/10/06 11:56:19 fetching corpus: 2600, signal 146277/165823 (executing program) 2022/10/06 11:56:20 fetching corpus: 2650, signal 147078/166519 (executing program) 2022/10/06 11:56:20 fetching corpus: 2700, signal 149148/167712 (executing program) 2022/10/06 11:56:20 fetching corpus: 2750, signal 150033/168392 (executing program) 2022/10/06 11:56:20 fetching corpus: 2800, signal 151334/169195 (executing program) 2022/10/06 11:56:20 fetching corpus: 2850, signal 151984/169793 (executing program) 2022/10/06 11:56:20 fetching corpus: 2900, signal 154102/170804 (executing program) 2022/10/06 11:56:20 fetching corpus: 2950, signal 155030/171411 (executing program) 2022/10/06 11:56:20 fetching corpus: 3000, signal 155721/171901 (executing program) 2022/10/06 11:56:21 fetching corpus: 3050, signal 156541/172470 (executing program) 2022/10/06 11:56:21 fetching corpus: 3100, signal 157240/172935 (executing program) 2022/10/06 11:56:21 fetching corpus: 3150, signal 158100/173420 (executing program) 2022/10/06 11:56:21 fetching corpus: 3200, signal 158571/173802 (executing program) 2022/10/06 11:56:21 fetching corpus: 3250, signal 159150/174187 (executing program) 2022/10/06 11:56:21 fetching corpus: 3300, signal 159526/174500 (executing program) 2022/10/06 11:56:21 fetching corpus: 3350, signal 160158/174904 (executing program) 2022/10/06 11:56:21 fetching corpus: 3400, signal 160735/175212 (executing program) 2022/10/06 11:56:21 fetching corpus: 3450, signal 161659/175618 (executing program) 2022/10/06 11:56:21 fetching corpus: 3500, signal 162176/175948 (executing program) 2022/10/06 11:56:22 fetching corpus: 3550, signal 163112/176281 (executing program) 2022/10/06 11:56:22 fetching corpus: 3600, signal 164060/176635 (executing program) 2022/10/06 11:56:22 fetching corpus: 3650, signal 164869/176922 (executing program) 2022/10/06 11:56:22 fetching corpus: 3700, signal 165297/177166 (executing program) 2022/10/06 11:56:22 fetching corpus: 3750, signal 166492/177502 (executing program) 2022/10/06 11:56:22 fetching corpus: 3800, signal 167067/177727 (executing program) 2022/10/06 11:56:22 fetching corpus: 3850, signal 168083/178002 (executing program) 2022/10/06 11:56:22 fetching corpus: 3900, signal 168629/178198 (executing program) 2022/10/06 11:56:22 fetching corpus: 3950, signal 169166/178371 (executing program) 2022/10/06 11:56:22 fetching corpus: 4000, signal 170476/178644 (executing program) 2022/10/06 11:56:22 fetching corpus: 4050, signal 170954/178781 (executing program) 2022/10/06 11:56:23 fetching corpus: 4100, signal 171764/178924 (executing program) 2022/10/06 11:56:23 fetching corpus: 4150, signal 172647/179047 (executing program) 2022/10/06 11:56:23 fetching corpus: 4200, signal 172932/179141 (executing program) 2022/10/06 11:56:23 fetching corpus: 4250, signal 173809/179265 (executing program) 2022/10/06 11:56:23 fetching corpus: 4300, signal 174430/179352 (executing program) 2022/10/06 11:56:23 fetching corpus: 4350, signal 174710/179415 (executing program) 2022/10/06 11:56:23 fetching corpus: 4400, signal 175525/179494 (executing program) 2022/10/06 11:56:23 fetching corpus: 4418, signal 175919/179505 (executing program) 2022/10/06 11:56:23 fetching corpus: 4418, signal 175919/179505 (executing program) 2022/10/06 11:56:26 starting 8 fuzzer processes 11:56:26 executing program 0: migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000040)) fork() 11:56:26 executing program 1: syz_io_uring_setup(0x3059, &(0x7f0000000340)={0x0, 0x8a7f, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 11:56:26 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x80000001) 11:56:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000f80)) 11:56:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 68.936811] audit: type=1400 audit(1665057386.798:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:56:26 executing program 5: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 11:56:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:56:26 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) [ 70.228103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.230832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.232798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.236746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.239012] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.240837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.246742] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.300956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.302590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.311647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.317090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.318484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.319631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.321234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.323053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.324209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.325949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.329241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.340331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.341337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.351271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.352819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.354569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.355748] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.356992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.358229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.362015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.364252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.365646] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.366652] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.366647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.368324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.389000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.392625] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.394144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.399710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.405016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.405101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.407521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.409185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.409939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.411571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.413320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.414745] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.415295] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.416926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.418318] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.418468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.420548] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.422431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.430320] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.437588] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.442467] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.473017] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.474895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.504352] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.313868] Bluetooth: hci0: command 0x0409 tx timeout [ 72.377340] Bluetooth: hci2: command 0x0409 tx timeout [ 72.441420] Bluetooth: hci4: command 0x0409 tx timeout [ 72.441620] Bluetooth: hci1: command 0x0409 tx timeout [ 72.442570] Bluetooth: hci3: command 0x0409 tx timeout [ 72.505287] Bluetooth: hci5: command 0x0409 tx timeout [ 72.506391] Bluetooth: hci6: command 0x0409 tx timeout [ 72.569297] Bluetooth: hci7: command 0x0409 tx timeout [ 74.362216] Bluetooth: hci0: command 0x041b tx timeout [ 74.425234] Bluetooth: hci2: command 0x041b tx timeout [ 74.489234] Bluetooth: hci1: command 0x041b tx timeout [ 74.489769] Bluetooth: hci4: command 0x041b tx timeout [ 74.490340] Bluetooth: hci3: command 0x041b tx timeout [ 74.553306] Bluetooth: hci6: command 0x041b tx timeout [ 74.553824] Bluetooth: hci5: command 0x041b tx timeout [ 74.617206] Bluetooth: hci7: command 0x041b tx timeout [ 76.409261] Bluetooth: hci0: command 0x040f tx timeout [ 76.474204] Bluetooth: hci2: command 0x040f tx timeout [ 76.538239] Bluetooth: hci3: command 0x040f tx timeout [ 76.538672] Bluetooth: hci4: command 0x040f tx timeout [ 76.539030] Bluetooth: hci1: command 0x040f tx timeout [ 76.602277] Bluetooth: hci5: command 0x040f tx timeout [ 76.602701] Bluetooth: hci6: command 0x040f tx timeout [ 76.666217] Bluetooth: hci7: command 0x040f tx timeout [ 78.457335] Bluetooth: hci0: command 0x0419 tx timeout [ 78.521257] Bluetooth: hci2: command 0x0419 tx timeout [ 78.585314] Bluetooth: hci1: command 0x0419 tx timeout [ 78.586103] Bluetooth: hci4: command 0x0419 tx timeout [ 78.587395] Bluetooth: hci3: command 0x0419 tx timeout [ 78.649312] Bluetooth: hci6: command 0x0419 tx timeout [ 78.650262] Bluetooth: hci5: command 0x0419 tx timeout [ 78.713274] Bluetooth: hci7: command 0x0419 tx timeout [ 124.456444] loop6: detected capacity change from 0 to 40 [ 124.507911] audit: type=1400 audit(1665057442.369:7): avc: denied { open } for pid=3849 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.509355] audit: type=1400 audit(1665057442.369:8): avc: denied { kernel } for pid=3849 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.529160] ------------[ cut here ]------------ [ 124.529186] [ 124.529189] ====================================================== [ 124.529193] WARNING: possible circular locking dependency detected [ 124.529197] 6.0.0-next-20221006 #1 Not tainted [ 124.529204] ------------------------------------------------------ [ 124.529207] syz-executor.6/3850 is trying to acquire lock: [ 124.529214] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.529256] [ 124.529256] but task is already holding lock: [ 124.529259] ffff88800e0a8820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.529287] [ 124.529287] which lock already depends on the new lock. [ 124.529287] [ 124.529290] [ 124.529290] the existing dependency chain (in reverse order) is: [ 124.529293] [ 124.529293] -> #3 (&ctx->lock){....}-{2:2}: [ 124.529307] _raw_spin_lock+0x2a/0x40 [ 124.529320] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.529331] __schedule+0xedd/0x2470 [ 124.529347] schedule+0xda/0x1b0 [ 124.529362] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.529374] syscall_exit_to_user_mode+0x19/0x40 [ 124.529388] do_syscall_64+0x48/0x90 [ 124.529399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.529413] [ 124.529413] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.529427] _raw_spin_lock_nested+0x30/0x40 [ 124.529438] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.529452] task_fork_fair+0x63/0x4d0 [ 124.529469] sched_cgroup_fork+0x3d0/0x540 [ 124.529484] copy_process+0x4183/0x6e20 [ 124.529495] kernel_clone+0xe7/0x890 [ 124.529504] user_mode_thread+0xad/0xf0 [ 124.529515] rest_init+0x24/0x250 [ 124.529527] arch_call_rest_init+0xf/0x14 [ 124.529539] start_kernel+0x4c6/0x4eb [ 124.529549] secondary_startup_64_no_verify+0xe0/0xeb [ 124.529563] [ 124.529563] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.529577] _raw_spin_lock_irqsave+0x39/0x60 [ 124.529589] try_to_wake_up+0xab/0x1930 [ 124.529602] up+0x75/0xb0 [ 124.529617] __up_console_sem+0x6e/0x80 [ 124.529634] console_unlock+0x46a/0x590 [ 124.529650] do_con_write+0xc05/0x1d50 [ 124.529662] con_write+0x21/0x40 [ 124.529672] n_tty_write+0x4d4/0xfe0 [ 124.529686] file_tty_write.constprop.0+0x455/0x8a0 [ 124.529698] vfs_write+0x9c3/0xd90 [ 124.529714] ksys_write+0x127/0x250 [ 124.529730] do_syscall_64+0x3b/0x90 [ 124.529740] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.529754] [ 124.529754] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.529767] __lock_acquire+0x2a02/0x5e70 [ 124.529784] lock_acquire+0x1a2/0x530 [ 124.529800] _raw_spin_lock_irqsave+0x39/0x60 [ 124.529812] down_trylock+0xe/0x70 [ 124.529828] __down_trylock_console_sem+0x3b/0xd0 [ 124.529844] vprintk_emit+0x16b/0x560 [ 124.529860] vprintk+0x84/0xa0 [ 124.529876] _printk+0xba/0xf1 [ 124.529889] report_bug.cold+0x72/0xab [ 124.529898] handle_bug+0x3c/0x70 [ 124.529907] exc_invalid_op+0x14/0x50 [ 124.529918] asm_exc_invalid_op+0x16/0x20 [ 124.529931] group_sched_out.part.0+0x2c7/0x460 [ 124.529949] ctx_sched_out+0x8f1/0xc10 [ 124.529966] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.529977] __schedule+0xedd/0x2470 [ 124.529992] schedule+0xda/0x1b0 [ 124.530006] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.530017] syscall_exit_to_user_mode+0x19/0x40 [ 124.530031] do_syscall_64+0x48/0x90 [ 124.530040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.530054] [ 124.530054] other info that might help us debug this: [ 124.530054] [ 124.530057] Chain exists of: [ 124.530057] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.530057] [ 124.530072] Possible unsafe locking scenario: [ 124.530072] [ 124.530074] CPU0 CPU1 [ 124.530077] ---- ---- [ 124.530079] lock(&ctx->lock); [ 124.530085] lock(&rq->__lock); [ 124.530091] lock(&ctx->lock); [ 124.530097] lock((console_sem).lock); [ 124.530103] [ 124.530103] *** DEADLOCK *** [ 124.530103] [ 124.530105] 2 locks held by syz-executor.6/3850: [ 124.530112] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.530142] #1: ffff88800e0a8820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.530169] [ 124.530169] stack backtrace: [ 124.530172] CPU: 0 PID: 3850 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1 [ 124.530184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.530191] Call Trace: [ 124.530194] [ 124.530199] dump_stack_lvl+0x8b/0xb3 [ 124.530211] check_noncircular+0x263/0x2e0 [ 124.530227] ? format_decode+0x26c/0xb50 [ 124.530244] ? print_circular_bug+0x450/0x450 [ 124.530261] ? simple_strtoul+0x30/0x30 [ 124.530278] ? format_decode+0x26c/0xb50 [ 124.530296] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.530314] __lock_acquire+0x2a02/0x5e70 [ 124.530335] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.530358] lock_acquire+0x1a2/0x530 [ 124.530374] ? down_trylock+0xe/0x70 [ 124.530392] ? lock_release+0x750/0x750 [ 124.530413] ? vprintk+0x84/0xa0 [ 124.530430] _raw_spin_lock_irqsave+0x39/0x60 [ 124.530443] ? down_trylock+0xe/0x70 [ 124.530460] down_trylock+0xe/0x70 [ 124.530477] ? vprintk+0x84/0xa0 [ 124.530494] __down_trylock_console_sem+0x3b/0xd0 [ 124.530511] vprintk_emit+0x16b/0x560 [ 124.530530] vprintk+0x84/0xa0 [ 124.530547] _printk+0xba/0xf1 [ 124.530559] ? record_print_text.cold+0x16/0x16 [ 124.530576] ? report_bug.cold+0x66/0xab [ 124.530587] ? group_sched_out.part.0+0x2c7/0x460 [ 124.530606] report_bug.cold+0x72/0xab [ 124.530618] handle_bug+0x3c/0x70 [ 124.530628] exc_invalid_op+0x14/0x50 [ 124.530640] asm_exc_invalid_op+0x16/0x20 [ 124.530654] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.530674] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.530685] RSP: 0018:ffff8880204c7c48 EFLAGS: 00010006 [ 124.530694] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.530702] RDX: ffff888015df5040 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 124.530712] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 124.530720] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800e0a8800 [ 124.530729] R13: ffff88806ce3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 124.530741] ? group_sched_out.part.0+0x2c7/0x460 [ 124.530761] ? group_sched_out.part.0+0x2c7/0x460 [ 124.530781] ctx_sched_out+0x8f1/0xc10 [ 124.530800] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.530814] ? lock_is_held_type+0xd7/0x130 [ 124.530830] ? __perf_cgroup_move+0x160/0x160 [ 124.530840] ? set_next_entity+0x304/0x550 [ 124.530857] ? update_curr+0x267/0x740 [ 124.530876] ? lock_is_held_type+0xd7/0x130 [ 124.530891] __schedule+0xedd/0x2470 [ 124.530909] ? io_schedule_timeout+0x150/0x150 [ 124.530927] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.530947] schedule+0xda/0x1b0 [ 124.530963] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.530976] syscall_exit_to_user_mode+0x19/0x40 [ 124.530990] do_syscall_64+0x48/0x90 [ 124.531001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.531016] RIP: 0033:0x7fa934b8fb19 [ 124.531024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.531035] RSP: 002b:00007fa932105218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.531046] RAX: 0000000000000001 RBX: 00007fa934ca2f68 RCX: 00007fa934b8fb19 [ 124.531053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa934ca2f6c [ 124.531060] RBP: 00007fa934ca2f60 R08: 000000000000000e R09: 0000000000000000 [ 124.531067] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fa934ca2f6c [ 124.531074] R13: 00007ffc0bfab79f R14: 00007fa932105300 R15: 0000000000022000 [ 124.531087] [ 124.597019] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.597651] Modules linked in: [ 124.597867] CPU: 0 PID: 3850 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1 [ 124.598382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.598934] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.599307] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.600505] RSP: 0018:ffff8880204c7c48 EFLAGS: 00010006 [ 124.600860] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.601355] RDX: ffff888015df5040 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 124.601841] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 124.602328] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800e0a8800 [ 124.602796] R13: ffff88806ce3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 124.603267] FS: 00007fa932105700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 124.603784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.604176] CR2: 00007fba958c0260 CR3: 000000004022a000 CR4: 0000000000350ef0 [ 124.604661] Call Trace: [ 124.604848] [ 124.605018] ctx_sched_out+0x8f1/0xc10 [ 124.605299] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.605660] ? lock_is_held_type+0xd7/0x130 [ 124.605962] ? __perf_cgroup_move+0x160/0x160 [ 124.606272] ? set_next_entity+0x304/0x550 [ 124.606570] ? update_curr+0x267/0x740 [ 124.606853] ? lock_is_held_type+0xd7/0x130 [ 124.607153] __schedule+0xedd/0x2470 [ 124.607423] ? io_schedule_timeout+0x150/0x150 [ 124.607733] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.608065] schedule+0xda/0x1b0 [ 124.608304] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.608636] syscall_exit_to_user_mode+0x19/0x40 [ 124.608966] do_syscall_64+0x48/0x90 [ 124.609232] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.609593] RIP: 0033:0x7fa934b8fb19 [ 124.609850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.611009] RSP: 002b:00007fa932105218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.611495] RAX: 0000000000000001 RBX: 00007fa934ca2f68 RCX: 00007fa934b8fb19 [ 124.611954] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa934ca2f6c [ 124.612407] RBP: 00007fa934ca2f60 R08: 000000000000000e R09: 0000000000000000 [ 124.612885] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fa934ca2f6c [ 124.613339] R13: 00007ffc0bfab79f R14: 00007fa932105300 R15: 0000000000022000 [ 124.613800] [ 124.613962] irq event stamp: 2990 [ 124.614198] hardirqs last enabled at (2989): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.614846] hardirqs last disabled at (2990): [] __schedule+0x1225/0x2470 [ 124.615418] softirqs last enabled at (2376): [] __irq_exit_rcu+0x11b/0x180 [ 124.616007] softirqs last disabled at (2361): [] __irq_exit_rcu+0x11b/0x180 [ 124.616604] ---[ end trace 0000000000000000 ]--- 11:57:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}}], 0x1, 0x1, &(0x7f0000000e00)={0x0, 0x3938700}) 11:57:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.827831] syz-executor.6: attempt to access beyond end of device [ 124.827831] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 124.829041] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 124.860090] syz-executor.6: attempt to access beyond end of device [ 124.860090] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 124.861031] Buffer I/O error on dev loop6, logical block 31, lost async page write 11:57:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.989776] loop6: detected capacity change from 0 to 40 11:57:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 125.039868] syz-executor.6: attempt to access beyond end of device [ 125.039868] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 125.040767] Buffer I/O error on dev loop6, logical block 31, lost async page write 11:57:23 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000017a00), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000180)) 11:57:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000940)={0x1, 0x0, 0xb, 0x14, 0x0, 0x0}) 11:57:23 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:23 executing program 3: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) 11:57:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 125.841072] loop2: detected capacity change from 0 to 40 [ 125.841925] loop5: detected capacity change from 0 to 40 [ 125.846062] loop6: detected capacity change from 0 to 40 [ 125.851826] loop4: detected capacity change from 0 to 40 [ 125.892865] syz-executor.2: attempt to access beyond end of device [ 125.892865] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 125.893952] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 125.897478] syz-executor.5: attempt to access beyond end of device [ 125.897478] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 125.898436] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 125.898487] syz-executor.6: attempt to access beyond end of device [ 125.898487] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 125.900006] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 125.900809] syz-executor.4: attempt to access beyond end of device [ 125.900809] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 125.901982] Buffer I/O error on dev loop4, logical block 31, lost async page write 11:57:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000940)={0x1, 0x0, 0xb, 0x14, 0x0, 0x0}) 11:57:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 3: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) 11:57:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000940)={0x1, 0x0, 0xb, 0x14, 0x0, 0x0}) 11:57:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 125.998640] loop6: detected capacity change from 0 to 40 [ 126.013940] loop2: detected capacity change from 0 to 40 [ 126.018978] loop4: detected capacity change from 0 to 40 [ 126.024345] loop5: detected capacity change from 0 to 40 11:57:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000940)={0x1, 0x0, 0xb, 0x14, 0x0, 0x0}) [ 126.051784] syz-executor.6: attempt to access beyond end of device [ 126.051784] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 126.052777] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 126.062977] syz-executor.2: attempt to access beyond end of device [ 126.062977] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 126.064103] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 126.066815] syz-executor.4: attempt to access beyond end of device [ 126.066815] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 126.067725] Buffer I/O error on dev loop4, logical block 31, lost async page write 11:57:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:23 executing program 3: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) 11:57:23 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 11:57:23 executing program 1: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) [ 126.147126] loop2: detected capacity change from 0 to 40 [ 126.156451] loop5: detected capacity change from 0 to 40 [ 126.159609] loop4: detected capacity change from 0 to 40 11:57:24 executing program 1: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) 11:57:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:24 executing program 3: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) 11:57:24 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:24 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b4a, &(0x7f0000000080)) 11:57:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 11:57:24 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b4a, &(0x7f0000000080)) 11:57:24 executing program 1: chdir(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x820) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60a8, 0x800}, 0x10000, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x402100, 0x4) syz_open_dev$rtc(&(0x7f0000000200), 0x3b4d, 0x20c202) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) tee(r5, r3, 0x2400000000000, 0x8) dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x4, 0x1, {0x2, 0x2, 0x41, 0x1, 0x4}, 0x53c}) [ 126.301830] tmpfs: Bad value for 'mpol' [ 126.303517] tmpfs: Bad value for 'mpol' 11:57:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 11:57:24 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b4a, &(0x7f0000000080)) [ 126.340404] tmpfs: Bad value for 'mpol' 11:57:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x20, 0x0, 0xffff77ff000) 11:57:24 executing program 5: syz_open_procfs$userns(0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000007d40), 0x0, 0x0) 11:57:24 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000026c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:sshd_key_t:s0\x00', 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x31, 0xfffffffffffffffe, &(0x7f0000000200)) 11:57:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 11:57:24 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b4a, &(0x7f0000000080)) [ 126.372657] audit: type=1400 audit(1665057444.234:9): avc: denied { create } for pid=4040 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sshd_key_t:s0 tclass=netlink_generic_socket permissive=1 [ 126.374529] audit: type=1400 audit(1665057444.236:10): avc: denied { getopt } for pid=4040 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sshd_key_t:s0 tclass=netlink_generic_socket permissive=1 [ 126.403161] tmpfs: Bad value for 'mpol' 11:57:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='(', 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="56909c3c", 0x4) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x0, 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 11:57:24 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 11:57:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 11:57:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 11:57:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r0) [ 126.467722] tmpfs: Bad value for 'mpol' 11:57:24 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 11:57:24 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001180)={0x53, 0x0, 0xc, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000fc0)="7e794e173eb20861d273fd0c", 0x0, 0x0, 0x0, 0x0, 0x0}) 11:57:24 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)="b4", 0x1}, {&(0x7f00000004c0)='S', 0x1, 0xfffffffffffffffb}], 0x0, 0x0) 11:57:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x1, 0x40, 0x80, 0x100}, {0x800, 0x7f, 0x5, 0x3}, {0x400, 0x3, 0x9, 0x7}, {0x0, 0x5, 0x3, 0xd}, {0x6, 0xfd, 0x1, 0x7}, {0x0, 0x4, 0x67, 0x9}]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x440}, 0x18) setregid(0x0, 0xffffffffffffffff) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11:57:24 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000200)={0x0, 0x0}) 11:57:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000001300), 0x800010, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r1]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4000) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) [ 126.525436] loop5: detected capacity change from 0 to 16383 [ 126.536677] loop5: detected capacity change from 0 to 16383 11:57:24 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000006680), 0x0, 0x0) 11:57:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='(', 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="56909c3c", 0x4) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x0, 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 11:57:24 executing program 6: shmdt(0x0) 11:57:24 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 11:57:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40086604) 11:57:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f00000002c0)) [ 126.632889] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value 11:57:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f00000002c0)) [ 126.638313] EXT4-fs warning (device sda): __ext4_ioctl:1238: Setting inode version is not supported with metadata_csum enabled. 11:57:24 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x20041, 0x0) 11:57:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000280), 0x4) [ 126.701171] hrtimer: interrupt took 23905 ns [ 126.816474] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value 11:57:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 11:57:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f00000002c0)) 11:57:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='(', 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="56909c3c", 0x4) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x0, 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 11:57:24 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 11:57:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:57:24 executing program 6: mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:57:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000001300), 0x800010, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r1]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4000) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 11:57:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000280), 0x4) 11:57:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f00000002c0)) 11:57:24 executing program 6: syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x8, 0x5, 0xc1}}, [{{0x9, 0x5, 0x82, 0x2, 0x397, 0x2, 0x18, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xf7, 0x80, 0x3f, 0x10, 0x4}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "08fcd7684b6cbe26e5accf335e43aec7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x2d, &(0x7f00000000c0)=@string={0x2d, 0x3, "018589890c45f77008da0e625e6a66437ee16c7576f9b4c2453701233a15006ac3651e7b88204474557896"}}]}) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x9, 0x0, 0x1}, &(0x7f0000000180)=[{}]) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1f, 0x6, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x4, 0x80, 0x8, 0x1}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xe, 0x2}]}, 0x3, [{0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "d998"}}, {0x63, &(0x7f0000000300)=@string={0x63, 0x3, "2ae71658fe9cd6bcf86cc933c4529287a18ba232eb8f3f35d6b6cd4cb552a8c3813528c2f6bab805bb80e44640905982bcefed5ca97c3f74df910e2581021a88a1a642397c7a419468f8c31af86ec440184ecd90ec24b819048fd8bb67098216f6"}}, {0x7f, &(0x7f0000000380)=@string={0x7f, 0x3, "41be97737aed61e9d20bfad12f62d6f1ff077a0f3452bae860ac2759c5c9b87a887c6515091f3ebbb78e154b40277695fed0585fc29a9e95b2008d76ff142208c69d49b1c4220ac287faa23b9ca12eafad8545ab3a2705c4970ecdd14e50c5d0cf1c9eb0b31b0970a411d13b769718d626f0fb6152010664b86ed96690"}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) fork() [ 126.938702] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value 11:57:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000280), 0x4) 11:57:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) [ 126.958915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.967776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.003649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.007597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.528725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.534538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:57:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000280), 0x4) 11:57:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='(', 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="56909c3c", 0x4) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x0, 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 11:57:25 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x12, 0x0, 0x0, @empty=0xe0000001}}}}}, 0x0) 11:57:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 11:57:25 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000001300), 0x800010, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r1]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4000) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 11:57:25 executing program 6: syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x8, 0x5, 0xc1}}, [{{0x9, 0x5, 0x82, 0x2, 0x397, 0x2, 0x18, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xf7, 0x80, 0x3f, 0x10, 0x4}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "08fcd7684b6cbe26e5accf335e43aec7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x2d, &(0x7f00000000c0)=@string={0x2d, 0x3, "018589890c45f77008da0e625e6a66437ee16c7576f9b4c2453701233a15006ac3651e7b88204474557896"}}]}) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x9, 0x0, 0x1}, &(0x7f0000000180)=[{}]) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1f, 0x6, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x4, 0x80, 0x8, 0x1}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xe, 0x2}]}, 0x3, [{0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "d998"}}, {0x63, &(0x7f0000000300)=@string={0x63, 0x3, "2ae71658fe9cd6bcf86cc933c4529287a18ba232eb8f3f35d6b6cd4cb552a8c3813528c2f6bab805bb80e44640905982bcefed5ca97c3f74df910e2581021a88a1a642397c7a419468f8c31af86ec440184ecd90ec24b819048fd8bb67098216f6"}}, {0x7f, &(0x7f0000000380)=@string={0x7f, 0x3, "41be97737aed61e9d20bfad12f62d6f1ff077a0f3452bae860ac2759c5c9b87a887c6515091f3ebbb78e154b40277695fed0585fc29a9e95b2008d76ff142208c69d49b1c4220ac287faa23b9ca12eafad8545ab3a2705c4970ecdd14e50c5d0cf1c9eb0b31b0970a411d13b769718d626f0fb6152010664b86ed96690"}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) fork() 11:57:25 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 11:57:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:57:25 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) [ 127.651569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.654370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:57:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:57:25 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 11:57:25 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) [ 127.737882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.739961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.827736] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value 11:57:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 11:57:26 executing program 2: syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000240)="b2b6b61d562151", 0x7}, {&(0x7f0000000280)="da", 0x1}, {&(0x7f0000000380)='&', 0x1, 0x3}], 0x0, 0x0) 11:57:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:57:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0xe8) 11:57:26 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11:57:26 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 11:57:26 executing program 6: syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x8, 0x5, 0xc1}}, [{{0x9, 0x5, 0x82, 0x2, 0x397, 0x2, 0x18, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xf7, 0x80, 0x3f, 0x10, 0x4}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "08fcd7684b6cbe26e5accf335e43aec7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x2d, &(0x7f00000000c0)=@string={0x2d, 0x3, "018589890c45f77008da0e625e6a66437ee16c7576f9b4c2453701233a15006ac3651e7b88204474557896"}}]}) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x9, 0x0, 0x1}, &(0x7f0000000180)=[{}]) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1f, 0x6, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x4, 0x80, 0x8, 0x1}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xe, 0x2}]}, 0x3, [{0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "d998"}}, {0x63, &(0x7f0000000300)=@string={0x63, 0x3, "2ae71658fe9cd6bcf86cc933c4529287a18ba232eb8f3f35d6b6cd4cb552a8c3813528c2f6bab805bb80e44640905982bcefed5ca97c3f74df910e2581021a88a1a642397c7a419468f8c31af86ec440184ecd90ec24b819048fd8bb67098216f6"}}, {0x7f, &(0x7f0000000380)=@string={0x7f, 0x3, "41be97737aed61e9d20bfad12f62d6f1ff077a0f3452bae860ac2759c5c9b87a887c6515091f3ebbb78e154b40277695fed0585fc29a9e95b2008d76ff142208c69d49b1c4220ac287faa23b9ca12eafad8545ab3a2705c4970ecdd14e50c5d0cf1c9eb0b31b0970a411d13b769718d626f0fb6152010664b86ed96690"}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) fork() 11:57:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000001300), 0x800010, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r1]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4000) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) [ 128.330028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.336634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:57:26 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 11:57:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) dup3(r0, r1, 0x0) [ 128.345082] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value 11:57:26 executing program 5: socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_setup(0x4744, &(0x7f0000000900), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) 11:57:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 11:57:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0xe8) 11:57:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) [ 128.416649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.417408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:57:26 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 11:57:26 executing program 5: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 11:57:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) dup3(r0, r1, 0x0) 11:57:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0xe8) 11:57:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) 11:57:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 11:57:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 11:57:26 executing program 5: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 11:57:26 executing program 6: syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x8, 0x5, 0xc1}}, [{{0x9, 0x5, 0x82, 0x2, 0x397, 0x2, 0x18, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xf7, 0x80, 0x3f, 0x10, 0x4}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "08fcd7684b6cbe26e5accf335e43aec7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x2d, &(0x7f00000000c0)=@string={0x2d, 0x3, "018589890c45f77008da0e625e6a66437ee16c7576f9b4c2453701233a15006ac3651e7b88204474557896"}}]}) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x9, 0x0, 0x1}, &(0x7f0000000180)=[{}]) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1f, 0x6, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x4, 0x80, 0x8, 0x1}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xe, 0x2}]}, 0x3, [{0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "d998"}}, {0x63, &(0x7f0000000300)=@string={0x63, 0x3, "2ae71658fe9cd6bcf86cc933c4529287a18ba232eb8f3f35d6b6cd4cb552a8c3813528c2f6bab805bb80e44640905982bcefed5ca97c3f74df910e2581021a88a1a642397c7a419468f8c31af86ec440184ecd90ec24b819048fd8bb67098216f6"}}, {0x7f, &(0x7f0000000380)=@string={0x7f, 0x3, "41be97737aed61e9d20bfad12f62d6f1ff077a0f3452bae860ac2759c5c9b87a887c6515091f3ebbb78e154b40277695fed0585fc29a9e95b2008d76ff142208c69d49b1c4220ac287faa23b9ca12eafad8545ab3a2705c4970ecdd14e50c5d0cf1c9eb0b31b0970a411d13b769718d626f0fb6152010664b86ed96690"}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) fork() 11:57:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) dup3(r0, r1, 0x0) [ 129.023711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.025389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.082836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.086003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:57:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) 11:57:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 11:57:26 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001a80), 0x4) 11:57:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0xc}, 0x20) 11:57:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0xe8) 11:57:27 executing program 5: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) dup3(r0, r1, 0x0) 11:57:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 11:57:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) [ 129.182487] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:57:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0xc}, 0x20) 11:57:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 11:57:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000013c0), &(0x7f0000001400)=0x4) 11:57:27 executing program 7: creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}, {}]}) [ 129.286816] cgroup: none used incorrectly [ 129.300375] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:57:27 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001a80), 0x4) 11:57:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 11:57:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0xc}, 0x20) 11:57:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 11:57:27 executing program 5: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:57:27 executing program 4: munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 11:57:27 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc) 11:57:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1b, &(0x7f0000000000), 0xc) [ 129.701343] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 129.717787] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:57:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 11:57:27 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x24}}) 11:57:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0xc}, 0x20) 11:57:27 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/stat\x00', 0x0, 0x0) [ 129.820226] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:57:27 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$cgroup_pid(r0, 0x0, 0xff07) 11:57:27 executing program 4: munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 11:57:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 11:57:27 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001a80), 0x4) 11:57:27 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 11:57:27 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x24}}) 11:57:27 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x24}}) 11:57:27 executing program 4: munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 11:57:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 11:57:27 executing program 5: syz_open_procfs(0x0, &(0x7f0000001300)='projid_map\x00') 11:57:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 11:57:27 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001a80), 0x4) 11:57:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f00000002c0)="aea6", 0x2, 0x4004881, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) 11:57:27 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$cgroup_pid(r0, 0x0, 0xff07) 11:57:27 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x24}}) 11:57:27 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x9e7041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xffff, 0x0, 0xffffff01, 0x0, 0x0, "b270d8bb4882248ea71cbd504188523c7f6070"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x7, 0x1, "ec2ccdd1341b209b"}) 11:57:27 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000080), 0x0) 11:57:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 11:57:28 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0x0) 11:57:28 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x9e7041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xffff, 0x0, 0xffffff01, 0x0, 0x0, "b270d8bb4882248ea71cbd504188523c7f6070"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x7, 0x1, "ec2ccdd1341b209b"}) 11:57:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 11:57:28 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x20200, 0x0) 11:57:28 executing program 4: munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 11:57:28 executing program 7: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 11:57:28 executing program 6: syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x20841) 11:57:28 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x9e7041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xffff, 0x0, 0xffffff01, 0x0, 0x0, "b270d8bb4882248ea71cbd504188523c7f6070"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x7, 0x1, "ec2ccdd1341b209b"}) 11:57:28 executing program 7: r0 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x16, 0x0, 0x0) process_mrelease(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) syz_io_uring_setup(0x5aeb, &(0x7f00000002c0)={0x0, 0xeeb, 0x0, 0x2, 0x1af, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x20, &(0x7f0000000740)=[{&(0x7f00000003c0)="4fde9ae943a5b195f8520d211a0ff2450f7e3c555ae199779c810fab9fbbcaecee18171a88", 0x25}, {&(0x7f0000000400)="71ce3102b1df241efa2dd73ecd69f28e47205bcf", 0x14}, {&(0x7f0000000440)="e02c345958974273b0c775c586812063c3dff1af7e13015805da640e1dbe1e6716180bb6ec37e7515204fbd1850d6a1faf32a15220391ca0080444602972193c68c1b65cf2b4dcb4daa0b2424b4df48f4d7173b6090f8d01924304b324647f2800db18467f7ed5002f7d60a5e99f49b25eb067a9c4a4c189b09939ac277104d1d21062bd69086def97d013ef0cbaa7151a6d5199a43b0f9009e0fa5a57ed2de4f75720d641aa24c026afcc9237222e9cb6c7c85d9437d475f7ef6373726c518b214af8bda6c1a25bcb5cfb", 0xcb}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="e300259d2a1026b299fa144dac4cba0beff78b29f87ce74721710f42e8e035b932c31175be6007018df29616333eac9106139bd04807261bb686edca9acd610448fd06f4c3634bc74a7cd82833e3aa003f713df9451148ac7639ff4142a7cd22ebaaf14acaac18ec868572633a68951866a15739ff96b02a7e73635abef6fdeb2adb13c23ebc865c9bff9b43b6e12cf37e0bd6285c30027a5ab6c2a0108fe6b63c4ef9f8148a910d45f9f2b812f875b8816fd43ffcbdbea107ad78c6010dc1cc5eda03cc972f7e6b7bfc510c69252a2a", 0xd0}], 0x5, 0x0, 0x1}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x418100, 0x0) 11:57:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 11:57:28 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$cgroup_pid(r0, 0x0, 0xff07) 11:57:28 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 11:57:28 executing program 5: r0 = fork() ptrace$peek(0x3, r0, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r1, 0x3, r3, 0xa6, 0x80000}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setpgid(r2, r2) get_robust_list(r2, &(0x7f0000000300)=&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000340)=0x18) fork() 11:57:28 executing program 7: r0 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x16, 0x0, 0x0) process_mrelease(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) syz_io_uring_setup(0x5aeb, &(0x7f00000002c0)={0x0, 0xeeb, 0x0, 0x2, 0x1af, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x20, &(0x7f0000000740)=[{&(0x7f00000003c0)="4fde9ae943a5b195f8520d211a0ff2450f7e3c555ae199779c810fab9fbbcaecee18171a88", 0x25}, {&(0x7f0000000400)="71ce3102b1df241efa2dd73ecd69f28e47205bcf", 0x14}, {&(0x7f0000000440)="e02c345958974273b0c775c586812063c3dff1af7e13015805da640e1dbe1e6716180bb6ec37e7515204fbd1850d6a1faf32a15220391ca0080444602972193c68c1b65cf2b4dcb4daa0b2424b4df48f4d7173b6090f8d01924304b324647f2800db18467f7ed5002f7d60a5e99f49b25eb067a9c4a4c189b09939ac277104d1d21062bd69086def97d013ef0cbaa7151a6d5199a43b0f9009e0fa5a57ed2de4f75720d641aa24c026afcc9237222e9cb6c7c85d9437d475f7ef6373726c518b214af8bda6c1a25bcb5cfb", 0xcb}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="e300259d2a1026b299fa144dac4cba0beff78b29f87ce74721710f42e8e035b932c31175be6007018df29616333eac9106139bd04807261bb686edca9acd610448fd06f4c3634bc74a7cd82833e3aa003f713df9451148ac7639ff4142a7cd22ebaaf14acaac18ec868572633a68951866a15739ff96b02a7e73635abef6fdeb2adb13c23ebc865c9bff9b43b6e12cf37e0bd6285c30027a5ab6c2a0108fe6b63c4ef9f8148a910d45f9f2b812f875b8816fd43ffcbdbea107ad78c6010dc1cc5eda03cc972f7e6b7bfc510c69252a2a", 0xd0}], 0x5, 0x0, 0x1}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x418100, 0x0) 11:57:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_robust_list(&(0x7f0000000180), 0x18) 11:57:28 executing program 6: setresuid(0x0, 0xee00, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r0, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) 11:57:28 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$cgroup_pid(r0, 0x0, 0xff07) 11:57:28 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x9e7041, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xffff, 0x0, 0xffffff01, 0x0, 0x0, "b270d8bb4882248ea71cbd504188523c7f6070"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x7, 0x1, "ec2ccdd1341b209b"}) 11:57:28 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:57:28 executing program 7: r0 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x16, 0x0, 0x0) process_mrelease(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) syz_io_uring_setup(0x5aeb, &(0x7f00000002c0)={0x0, 0xeeb, 0x0, 0x2, 0x1af, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x20, &(0x7f0000000740)=[{&(0x7f00000003c0)="4fde9ae943a5b195f8520d211a0ff2450f7e3c555ae199779c810fab9fbbcaecee18171a88", 0x25}, {&(0x7f0000000400)="71ce3102b1df241efa2dd73ecd69f28e47205bcf", 0x14}, {&(0x7f0000000440)="e02c345958974273b0c775c586812063c3dff1af7e13015805da640e1dbe1e6716180bb6ec37e7515204fbd1850d6a1faf32a15220391ca0080444602972193c68c1b65cf2b4dcb4daa0b2424b4df48f4d7173b6090f8d01924304b324647f2800db18467f7ed5002f7d60a5e99f49b25eb067a9c4a4c189b09939ac277104d1d21062bd69086def97d013ef0cbaa7151a6d5199a43b0f9009e0fa5a57ed2de4f75720d641aa24c026afcc9237222e9cb6c7c85d9437d475f7ef6373726c518b214af8bda6c1a25bcb5cfb", 0xcb}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="e300259d2a1026b299fa144dac4cba0beff78b29f87ce74721710f42e8e035b932c31175be6007018df29616333eac9106139bd04807261bb686edca9acd610448fd06f4c3634bc74a7cd82833e3aa003f713df9451148ac7639ff4142a7cd22ebaaf14acaac18ec868572633a68951866a15739ff96b02a7e73635abef6fdeb2adb13c23ebc865c9bff9b43b6e12cf37e0bd6285c30027a5ab6c2a0108fe6b63c4ef9f8148a910d45f9f2b812f875b8816fd43ffcbdbea107ad78c6010dc1cc5eda03cc972f7e6b7bfc510c69252a2a", 0xd0}], 0x5, 0x0, 0x1}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x418100, 0x0) 11:57:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 11:57:28 executing program 4: eventfd(0x0) 11:57:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)) 11:57:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 11:57:28 executing program 6: mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) 11:57:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001400)) 11:57:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034eb70325132510000eb7032510300000000002e2e202020202020202020100034eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034eb70325132510000eb70325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) [ 130.657857] loop4: detected capacity change from 0 to 1348 11:57:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 11:57:28 executing program 1: r0 = syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58df, 0x0, 0x0, 0x0, 0x0) 11:57:28 executing program 7: r0 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x16, 0x0, 0x0) process_mrelease(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) syz_io_uring_setup(0x5aeb, &(0x7f00000002c0)={0x0, 0xeeb, 0x0, 0x2, 0x1af, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x20, &(0x7f0000000740)=[{&(0x7f00000003c0)="4fde9ae943a5b195f8520d211a0ff2450f7e3c555ae199779c810fab9fbbcaecee18171a88", 0x25}, {&(0x7f0000000400)="71ce3102b1df241efa2dd73ecd69f28e47205bcf", 0x14}, {&(0x7f0000000440)="e02c345958974273b0c775c586812063c3dff1af7e13015805da640e1dbe1e6716180bb6ec37e7515204fbd1850d6a1faf32a15220391ca0080444602972193c68c1b65cf2b4dcb4daa0b2424b4df48f4d7173b6090f8d01924304b324647f2800db18467f7ed5002f7d60a5e99f49b25eb067a9c4a4c189b09939ac277104d1d21062bd69086def97d013ef0cbaa7151a6d5199a43b0f9009e0fa5a57ed2de4f75720d641aa24c026afcc9237222e9cb6c7c85d9437d475f7ef6373726c518b214af8bda6c1a25bcb5cfb", 0xcb}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="e300259d2a1026b299fa144dac4cba0beff78b29f87ce74721710f42e8e035b932c31175be6007018df29616333eac9106139bd04807261bb686edca9acd610448fd06f4c3634bc74a7cd82833e3aa003f713df9451148ac7639ff4142a7cd22ebaaf14acaac18ec868572633a68951866a15739ff96b02a7e73635abef6fdeb2adb13c23ebc865c9bff9b43b6e12cf37e0bd6285c30027a5ab6c2a0108fe6b63c4ef9f8148a910d45f9f2b812f875b8816fd43ffcbdbea107ad78c6010dc1cc5eda03cc972f7e6b7bfc510c69252a2a", 0xd0}], 0x5, 0x0, 0x1}, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x418100, 0x0) 11:57:28 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rt_sigreturn() rt_sigreturn() 11:57:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 130.747657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 11:57:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x6, 0x4) 11:57:28 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) splice(r1, 0x0, r0, 0x0, 0xbf, 0x0) 11:57:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 11:57:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 2: syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 11:57:28 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) splice(r1, 0x0, r0, 0x0, 0xbf, 0x0) 11:57:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 11:57:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x4000) 11:57:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 11:57:28 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) splice(r1, 0x0, r0, 0x0, 0xbf, 0x0) 11:57:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 11:57:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 1: open(&(0x7f0000000640)='./file0\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)) 11:57:28 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x48) 11:57:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0) 11:57:28 executing program 7: mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x15) 11:57:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) 11:57:28 executing program 0: r0 = syz_io_uring_setup(0x34e1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:57:28 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) splice(r1, 0x0, r0, 0x0, 0xbf, 0x0) 11:57:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 11:57:29 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000001c0)) 11:57:29 executing program 1: open(&(0x7f0000000640)='./file0\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)) 11:57:29 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000480)="b4", 0x1}, {&(0x7f00000004c0)='S', 0x1, 0xfffffffffffffffb}, {&(0x7f0000000540)='=', 0x1}], 0x0, 0x0) 11:57:29 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)="03ab", 0x2}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 11:57:29 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 131.270279] loop5: detected capacity change from 0 to 16383 [ 131.273642] loop0: detected capacity change from 0 to 256 11:57:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) 11:57:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) [ 131.286604] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.287952] loop5: detected capacity change from 0 to 16383 11:57:29 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 11:57:29 executing program 1: open(&(0x7f0000000640)='./file0\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)) 11:57:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) [ 131.355305] audit: type=1400 audit(1665057449.216:11): avc: denied { block_suspend } for pid=4469 comm="syz-executor.6" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 131.441446] audit: type=1400 audit(1665057449.301:12): avc: denied { write } for pid=4469 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.500437] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:57:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) 11:57:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) 11:57:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000002300)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x20044000) 11:57:29 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)="03ab", 0x2}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 11:57:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) 11:57:29 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 11:57:29 executing program 1: open(&(0x7f0000000640)='./file0\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)) 11:57:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) [ 131.556412] loop0: detected capacity change from 0 to 256 [ 131.573761] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:57:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) 11:57:29 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)="03ab", 0x2}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 11:57:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) 11:57:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) [ 131.903902] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:57:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, VM DIAGNOSIS: 11:57:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880204c7550 RCX=0000000000000000 RDX=ffff888015df5040 RSI=ffffffff8412627c RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffff8880204c7438 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff8487a68b R13=1ffff11004098e8a R14=0000000000000001 R15=ffffffff8487a68c RIP=ffffffff8412629d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa932105700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba958c0260 CR3=000000004022a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffffffffffff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=0000000000000006 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000004 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88801abcf950 R8 =0000000000000000 R9 =0000000000000000 R10=fffffbfff0a99f08 R11=0000000000000001 R12=ffff88801d2aee10 R13=ffff888007c75000 R14=ffff888007c75000 R15=0000000000000dc0 RIP=ffffffff8178500c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fef14a4c1f0 CR3=000000003f6d6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000