Warning: Permanently added '[localhost]:7106' (ECDSA) to the list of known hosts. 2022/09/12 13:50:33 fuzzer started 2022/09/12 13:50:33 dialing manager at localhost:38027 syzkaller login: [ 44.776084] cgroup: Unknown subsys name 'net' [ 44.878562] cgroup: Unknown subsys name 'rlimit' 2022/09/12 13:50:48 syscalls: 2215 2022/09/12 13:50:48 code coverage: enabled 2022/09/12 13:50:48 comparison tracing: enabled 2022/09/12 13:50:48 extra coverage: enabled 2022/09/12 13:50:48 setuid sandbox: enabled 2022/09/12 13:50:48 namespace sandbox: enabled 2022/09/12 13:50:48 Android sandbox: enabled 2022/09/12 13:50:48 fault injection: enabled 2022/09/12 13:50:48 leak checking: enabled 2022/09/12 13:50:48 net packet injection: enabled 2022/09/12 13:50:48 net device setup: enabled 2022/09/12 13:50:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 13:50:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 13:50:48 USB emulation: enabled 2022/09/12 13:50:48 hci packet injection: enabled 2022/09/12 13:50:48 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 13:50:48 802.15.4 emulation: enabled 2022/09/12 13:50:48 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 13:50:48 fetching corpus: 50, signal 29972/33230 (executing program) 2022/09/12 13:50:49 fetching corpus: 100, signal 45236/49532 (executing program) 2022/09/12 13:50:49 fetching corpus: 150, signal 55362/60556 (executing program) 2022/09/12 13:50:49 fetching corpus: 200, signal 61546/67655 (executing program) 2022/09/12 13:50:49 fetching corpus: 250, signal 67789/74616 (executing program) 2022/09/12 13:50:49 fetching corpus: 300, signal 72643/80221 (executing program) 2022/09/12 13:50:49 fetching corpus: 350, signal 79086/87104 (executing program) 2022/09/12 13:50:50 fetching corpus: 400, signal 82328/90930 (executing program) 2022/09/12 13:50:50 fetching corpus: 450, signal 85717/94798 (executing program) 2022/09/12 13:50:50 fetching corpus: 500, signal 89278/98814 (executing program) 2022/09/12 13:50:50 fetching corpus: 550, signal 92261/102174 (executing program) 2022/09/12 13:50:50 fetching corpus: 600, signal 97641/107534 (executing program) 2022/09/12 13:50:50 fetching corpus: 650, signal 101740/111652 (executing program) 2022/09/12 13:50:50 fetching corpus: 700, signal 104176/114330 (executing program) 2022/09/12 13:50:51 fetching corpus: 750, signal 106416/116872 (executing program) 2022/09/12 13:50:51 fetching corpus: 800, signal 110265/120542 (executing program) 2022/09/12 13:50:51 fetching corpus: 850, signal 112651/122977 (executing program) 2022/09/12 13:50:51 fetching corpus: 900, signal 115555/125892 (executing program) 2022/09/12 13:50:51 fetching corpus: 950, signal 117880/128212 (executing program) 2022/09/12 13:50:51 fetching corpus: 1000, signal 119838/130147 (executing program) 2022/09/12 13:50:51 fetching corpus: 1050, signal 122375/132487 (executing program) 2022/09/12 13:50:51 fetching corpus: 1100, signal 124663/134590 (executing program) 2022/09/12 13:50:52 fetching corpus: 1150, signal 127051/136679 (executing program) 2022/09/12 13:50:52 fetching corpus: 1200, signal 129062/138486 (executing program) 2022/09/12 13:50:52 fetching corpus: 1250, signal 131272/140377 (executing program) 2022/09/12 13:50:52 fetching corpus: 1300, signal 132553/141574 (executing program) 2022/09/12 13:50:52 fetching corpus: 1350, signal 133818/142728 (executing program) 2022/09/12 13:50:52 fetching corpus: 1400, signal 135148/143941 (executing program) 2022/09/12 13:50:53 fetching corpus: 1450, signal 136845/145263 (executing program) 2022/09/12 13:50:53 fetching corpus: 1500, signal 139306/146986 (executing program) 2022/09/12 13:50:53 fetching corpus: 1550, signal 141273/148438 (executing program) 2022/09/12 13:50:53 fetching corpus: 1600, signal 143019/149675 (executing program) 2022/09/12 13:50:53 fetching corpus: 1650, signal 145074/151094 (executing program) 2022/09/12 13:50:54 fetching corpus: 1700, signal 147001/152365 (executing program) 2022/09/12 13:50:54 fetching corpus: 1750, signal 148287/153223 (executing program) 2022/09/12 13:50:54 fetching corpus: 1800, signal 150200/154422 (executing program) 2022/09/12 13:50:54 fetching corpus: 1850, signal 151291/155123 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/155747 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/155847 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/155933 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156024 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156112 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156207 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156289 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156373 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156474 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156562 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156648 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156739 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156824 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/156911 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157000 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157093 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157188 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157291 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157383 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157468 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157548 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157629 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157724 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157797 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157889 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/157968 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/158055 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/158136 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/158235 (executing program) 2022/09/12 13:50:54 fetching corpus: 1894, signal 152246/158334 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158450 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158531 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158608 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158692 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158783 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158880 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/158976 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/159070 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/159167 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/159221 (executing program) 2022/09/12 13:50:55 fetching corpus: 1894, signal 152246/159221 (executing program) 2022/09/12 13:50:57 starting 8 fuzzer processes 13:50:57 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x17}, './file1\x00'}) 13:50:57 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:50:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:50:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='^@)^^D\xf6\x80Ds:#\x00\xf5\xde \xef\x9b\xdc_\xa9\xcc?\x1b\x9c\x8aD\x8e\x13=\'zs\ts\xbc\x9d\xec}\x81\x82\xe4s\x80e\xe3\x88\xc4\x8bo\x13\x06r\x13\xc0\x1b\x87\x93`\\\xe3/b\a\xe6\xb6\x19}\xa6\xca]a\xacmc\xf5\xc6\xf7V\x90\xba`\x97\xa7.\x8cL:\xf5^\xb8mT\xae\x1b\xfc\xa1\xeb\x19\xc9:\x7f\xc6+\t\xec\b\x00\xf5j\t\xa9\xb0j\xea\x99\x80\xd25\xe5\xad1R\r\x8a\x9f(\xd0-%\xa0\x99\xb8\x9c\xdf\v\x05\x88\xe1\x1c\x1eu\xe7y+\xdc', 0x0) ftruncate(r0, 0x0) 13:50:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) 13:50:57 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000001300)={'wlan0\x00'}) [ 67.332912] audit: type=1400 audit(1662990657.382:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:50:57 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 13:50:57 executing program 6: clock_getres(0x334131f07cd3c775, 0x0) [ 68.589969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.592115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.594138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.597559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.599598] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.609625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.615596] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.675085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.676953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.678696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.680019] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.681964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.683098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.684971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.686145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.690358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.691713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.693630] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.694899] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.696195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.697224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.700234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.704923] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.705903] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.724873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.725927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.727617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.729374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.729492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.731527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.732022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.734187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.735715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.736297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.738168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.738269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.741209] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.742558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.743952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.745206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.745786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.747818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.752002] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.752659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.756702] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.758544] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.763779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.768484] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.771843] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.771889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.779179] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.780363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.781373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.782774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.788021] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.794984] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.676253] Bluetooth: hci0: command 0x0409 tx timeout [ 70.739560] Bluetooth: hci5: command 0x0409 tx timeout [ 70.740299] Bluetooth: hci3: command 0x0409 tx timeout [ 70.803528] Bluetooth: hci4: command 0x0409 tx timeout [ 70.803528] Bluetooth: hci2: command 0x0409 tx timeout [ 70.804182] Bluetooth: hci7: command 0x0409 tx timeout [ 70.805066] Bluetooth: hci6: command 0x0409 tx timeout [ 70.806333] Bluetooth: hci1: command 0x0409 tx timeout [ 72.723518] Bluetooth: hci0: command 0x041b tx timeout [ 72.788570] Bluetooth: hci3: command 0x041b tx timeout [ 72.789080] Bluetooth: hci5: command 0x041b tx timeout [ 72.851509] Bluetooth: hci7: command 0x041b tx timeout [ 72.852534] Bluetooth: hci1: command 0x041b tx timeout [ 72.853651] Bluetooth: hci6: command 0x041b tx timeout [ 72.854097] Bluetooth: hci2: command 0x041b tx timeout [ 72.855071] Bluetooth: hci4: command 0x041b tx timeout [ 74.771540] Bluetooth: hci0: command 0x040f tx timeout [ 74.835521] Bluetooth: hci5: command 0x040f tx timeout [ 74.836370] Bluetooth: hci3: command 0x040f tx timeout [ 74.899644] Bluetooth: hci4: command 0x040f tx timeout [ 74.900556] Bluetooth: hci2: command 0x040f tx timeout [ 74.901309] Bluetooth: hci6: command 0x040f tx timeout [ 74.902105] Bluetooth: hci1: command 0x040f tx timeout [ 74.903268] Bluetooth: hci7: command 0x040f tx timeout [ 76.820531] Bluetooth: hci0: command 0x0419 tx timeout [ 76.884559] Bluetooth: hci3: command 0x0419 tx timeout [ 76.885045] Bluetooth: hci5: command 0x0419 tx timeout [ 76.948507] Bluetooth: hci7: command 0x0419 tx timeout [ 76.948979] Bluetooth: hci1: command 0x0419 tx timeout [ 76.949374] Bluetooth: hci6: command 0x0419 tx timeout [ 76.949816] Bluetooth: hci2: command 0x0419 tx timeout [ 76.950212] Bluetooth: hci4: command 0x0419 tx timeout [ 121.754304] audit: type=1400 audit(1662990711.803:7): avc: denied { open } for pid=3824 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.757176] audit: type=1400 audit(1662990711.803:8): avc: denied { kernel } for pid=3824 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.775471] ------------[ cut here ]------------ [ 121.775494] [ 121.775498] ====================================================== [ 121.775502] WARNING: possible circular locking dependency detected [ 121.775507] 6.0.0-rc5-next-20220912 #1 Not tainted [ 121.775513] ------------------------------------------------------ [ 121.775517] syz-executor.2/3826 is trying to acquire lock: [ 121.775523] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.775562] [ 121.775562] but task is already holding lock: [ 121.775565] ffff88800f993c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.775593] [ 121.775593] which lock already depends on the new lock. [ 121.775593] [ 121.775596] [ 121.775596] the existing dependency chain (in reverse order) is: [ 121.775600] [ 121.775600] -> #3 (&ctx->lock){....}-{2:2}: [ 121.775614] _raw_spin_lock+0x2a/0x40 [ 121.775631] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.775643] __schedule+0xedd/0x2470 [ 121.775653] schedule+0xda/0x1b0 [ 121.775662] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.775684] syscall_exit_to_user_mode+0x19/0x40 [ 121.775702] do_syscall_64+0x48/0x90 [ 121.775716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.775733] [ 121.775733] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.775747] _raw_spin_lock_nested+0x30/0x40 [ 121.775762] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.775776] task_fork_fair+0x63/0x4d0 [ 121.775793] sched_cgroup_fork+0x3d0/0x540 [ 121.775808] copy_process+0x3f9e/0x6df0 [ 121.775818] kernel_clone+0xe7/0x890 [ 121.775828] user_mode_thread+0xad/0xf0 [ 121.775838] rest_init+0x24/0x250 [ 121.775855] arch_call_rest_init+0xf/0x14 [ 121.775874] start_kernel+0x4c1/0x4e6 [ 121.775891] secondary_startup_64_no_verify+0xe0/0xeb [ 121.775906] [ 121.775906] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.775919] _raw_spin_lock_irqsave+0x39/0x60 [ 121.775934] try_to_wake_up+0xab/0x1920 [ 121.775947] up+0x75/0xb0 [ 121.775959] __up_console_sem+0x6e/0x80 [ 121.775976] console_unlock+0x46a/0x590 [ 121.775992] vt_ioctl+0x2822/0x2ca0 [ 121.776005] tty_ioctl+0x7c4/0x1700 [ 121.776017] __x64_sys_ioctl+0x19a/0x210 [ 121.776033] do_syscall_64+0x3b/0x90 [ 121.776046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.776063] [ 121.776063] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.776076] __lock_acquire+0x2a02/0x5e70 [ 121.776093] lock_acquire+0x1a2/0x530 [ 121.776109] _raw_spin_lock_irqsave+0x39/0x60 [ 121.776124] down_trylock+0xe/0x70 [ 121.776136] __down_trylock_console_sem+0x3b/0xd0 [ 121.776153] vprintk_emit+0x16b/0x560 [ 121.776170] vprintk+0x84/0xa0 [ 121.776186] _printk+0xba/0xf1 [ 121.776204] report_bug.cold+0x72/0xab [ 121.776216] handle_bug+0x3c/0x70 [ 121.776229] exc_invalid_op+0x14/0x50 [ 121.776242] asm_exc_invalid_op+0x16/0x20 [ 121.776258] group_sched_out.part.0+0x2c7/0x460 [ 121.776268] ctx_sched_out+0x8f1/0xc10 [ 121.776278] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.776290] __schedule+0xedd/0x2470 [ 121.776299] schedule+0xda/0x1b0 [ 121.776308] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.776328] syscall_exit_to_user_mode+0x19/0x40 [ 121.776345] do_syscall_64+0x48/0x90 [ 121.776357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.776374] [ 121.776374] other info that might help us debug this: [ 121.776374] [ 121.776377] Chain exists of: [ 121.776377] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.776377] [ 121.776392] Possible unsafe locking scenario: [ 121.776392] [ 121.776394] CPU0 CPU1 [ 121.776396] ---- ---- [ 121.776399] lock(&ctx->lock); [ 121.776404] lock(&rq->__lock); [ 121.776411] lock(&ctx->lock); [ 121.776417] lock((console_sem).lock); [ 121.776423] [ 121.776423] *** DEADLOCK *** [ 121.776423] [ 121.776424] 2 locks held by syz-executor.2/3826: [ 121.776431] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.776457] #1: ffff88800f993c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.776484] [ 121.776484] stack backtrace: [ 121.776487] CPU: 0 PID: 3826 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1 [ 121.776500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.776508] Call Trace: [ 121.776512] [ 121.776516] dump_stack_lvl+0x8b/0xb3 [ 121.776530] check_noncircular+0x263/0x2e0 [ 121.776547] ? format_decode+0x26c/0xb50 [ 121.776563] ? print_circular_bug+0x450/0x450 [ 121.776580] ? enable_ptr_key_workfn+0x20/0x20 [ 121.776593] ? __lockdep_reset_lock+0x180/0x180 [ 121.776611] ? format_decode+0x26c/0xb50 [ 121.776626] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.776644] __lock_acquire+0x2a02/0x5e70 [ 121.776666] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.776689] lock_acquire+0x1a2/0x530 [ 121.776706] ? down_trylock+0xe/0x70 [ 121.776720] ? rcu_read_unlock+0x40/0x40 [ 121.776738] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.776759] ? vprintk+0x84/0xa0 [ 121.776778] _raw_spin_lock_irqsave+0x39/0x60 [ 121.776793] ? down_trylock+0xe/0x70 [ 121.776807] down_trylock+0xe/0x70 [ 121.776820] ? vprintk+0x84/0xa0 [ 121.776837] __down_trylock_console_sem+0x3b/0xd0 [ 121.776855] vprintk_emit+0x16b/0x560 [ 121.776872] ? lock_downgrade+0x6d0/0x6d0 [ 121.776891] vprintk+0x84/0xa0 [ 121.776909] _printk+0xba/0xf1 [ 121.776927] ? record_print_text.cold+0x16/0x16 [ 121.776947] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 121.776961] ? lock_downgrade+0x6d0/0x6d0 [ 121.776979] ? report_bug.cold+0x66/0xab [ 121.776993] ? group_sched_out.part.0+0x2c7/0x460 [ 121.777004] report_bug.cold+0x72/0xab [ 121.777018] handle_bug+0x3c/0x70 [ 121.777032] exc_invalid_op+0x14/0x50 [ 121.777046] asm_exc_invalid_op+0x16/0x20 [ 121.777063] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.777076] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.777088] RSP: 0018:ffff88801ed1fc48 EFLAGS: 00010006 [ 121.777097] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.777105] RDX: ffff888015f19ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 121.777113] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 121.777120] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f993c00 [ 121.777128] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 121.777139] ? group_sched_out.part.0+0x2c7/0x460 [ 121.777152] ? group_sched_out.part.0+0x2c7/0x460 [ 121.777165] ctx_sched_out+0x8f1/0xc10 [ 121.777177] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.777193] ? lock_is_held_type+0xd7/0x130 [ 121.777211] ? __perf_cgroup_move+0x160/0x160 [ 121.777223] ? set_next_entity+0x304/0x550 [ 121.777241] ? update_curr+0x267/0x740 [ 121.777260] ? lock_is_held_type+0xd7/0x130 [ 121.777279] __schedule+0xedd/0x2470 [ 121.777291] ? io_schedule_timeout+0x150/0x150 [ 121.777304] ? __x64_sys_futex_time32+0x480/0x480 [ 121.777318] schedule+0xda/0x1b0 [ 121.777328] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.777349] syscall_exit_to_user_mode+0x19/0x40 [ 121.777367] do_syscall_64+0x48/0x90 [ 121.777381] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.777398] RIP: 0033:0x7fb4b1afbb19 [ 121.777407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.777418] RSP: 002b:00007fb4af071218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.777431] RAX: 0000000000000001 RBX: 00007fb4b1c0ef68 RCX: 00007fb4b1afbb19 [ 121.777440] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4b1c0ef6c [ 121.777448] RBP: 00007fb4b1c0ef60 R08: 000000000000000e R09: 0000000000000000 [ 121.777456] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb4b1c0ef6c [ 121.777463] R13: 00007ffcb1b6e75f R14: 00007fb4af071300 R15: 0000000000022000 [ 121.777476] [ 121.834386] WARNING: CPU: 0 PID: 3826 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.835078] Modules linked in: [ 121.835324] CPU: 0 PID: 3826 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1 [ 121.835931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.836767] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.837172] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.838504] RSP: 0018:ffff88801ed1fc48 EFLAGS: 00010006 [ 121.838900] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.839429] RDX: ffff888015f19ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 121.839961] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 121.840500] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f993c00 [ 121.841028] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 121.841564] FS: 00007fb4af071700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 121.842167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.842602] CR2: 00007f499c4ad610 CR3: 000000003e616000 CR4: 0000000000350ef0 [ 121.843130] Call Trace: [ 121.843324] [ 121.843507] ctx_sched_out+0x8f1/0xc10 [ 121.843809] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.844205] ? lock_is_held_type+0xd7/0x130 [ 121.844539] ? __perf_cgroup_move+0x160/0x160 [ 121.844884] ? set_next_entity+0x304/0x550 [ 121.845211] ? update_curr+0x267/0x740 [ 121.845517] ? lock_is_held_type+0xd7/0x130 [ 121.845851] __schedule+0xedd/0x2470 [ 121.846140] ? io_schedule_timeout+0x150/0x150 [ 121.846494] ? __x64_sys_futex_time32+0x480/0x480 [ 121.846857] schedule+0xda/0x1b0 [ 121.847120] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.847514] syscall_exit_to_user_mode+0x19/0x40 [ 121.847876] do_syscall_64+0x48/0x90 [ 121.848165] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.848561] RIP: 0033:0x7fb4b1afbb19 [ 121.848844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.850191] RSP: 002b:00007fb4af071218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.850756] RAX: 0000000000000001 RBX: 00007fb4b1c0ef68 RCX: 00007fb4b1afbb19 [ 121.851284] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4b1c0ef6c [ 121.851825] RBP: 00007fb4b1c0ef60 R08: 000000000000000e R09: 0000000000000000 [ 121.852351] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb4b1c0ef6c [ 121.852882] R13: 00007ffcb1b6e75f R14: 00007fb4af071300 R15: 0000000000022000 [ 121.853420] [ 121.853600] irq event stamp: 986 [ 121.853859] hardirqs last enabled at (985): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.854566] hardirqs last disabled at (986): [] __schedule+0x1225/0x2470 [ 121.855173] softirqs last enabled at (304): [] __irq_exit_rcu+0x11b/0x180 [ 121.855826] softirqs last disabled at (185): [] __irq_exit_rcu+0x11b/0x180 [ 121.856457] ---[ end trace 0000000000000000 ]--- [ 122.110450] hrtimer: interrupt took 19406 ns 13:51:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000001300)={'wlan0\x00'}) 13:51:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, 0xffffffffffffffff, 0x3) 13:51:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000001300)={'wlan0\x00'}) 13:51:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f0000001300)={'wlan0\x00'}) 13:51:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 122.988574] device lo entered promiscuous mode 13:51:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 123.161361] device lo left promiscuous mode [ 123.195598] device lo entered promiscuous mode 13:51:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, 0xffffffffffffffff, 0x3) 13:51:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 123.485768] device lo left promiscuous mode [ 123.501549] device lo entered promiscuous mode [ 125.323160] tmpfs: Bad value for 'mpol' [ 125.328834] tmpfs: Bad value for 'mpol' 13:51:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x17}, './file1\x00'}) 13:51:55 executing program 6: clock_getres(0x334131f07cd3c775, 0x0) 13:51:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='^@)^^D\xf6\x80Ds:#\x00\xf5\xde \xef\x9b\xdc_\xa9\xcc?\x1b\x9c\x8aD\x8e\x13=\'zs\ts\xbc\x9d\xec}\x81\x82\xe4s\x80e\xe3\x88\xc4\x8bo\x13\x06r\x13\xc0\x1b\x87\x93`\\\xe3/b\a\xe6\xb6\x19}\xa6\xca]a\xacmc\xf5\xc6\xf7V\x90\xba`\x97\xa7.\x8cL:\xf5^\xb8mT\xae\x1b\xfc\xa1\xeb\x19\xc9:\x7f\xc6+\t\xec\b\x00\xf5j\t\xa9\xb0j\xea\x99\x80\xd25\xe5\xad1R\r\x8a\x9f(\xd0-%\xa0\x99\xb8\x9c\xdf\v\x05\x88\xe1\x1c\x1eu\xe7y+\xdc', 0x0) ftruncate(r0, 0x0) 13:51:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 13:51:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:51:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) 13:51:55 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:51:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, 0xffffffffffffffff, 0x3) [ 125.431069] device lo left promiscuous mode [ 125.449555] device lo entered promiscuous mode [ 125.466375] tmpfs: Bad value for 'mpol' 13:51:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x17}, './file1\x00'}) 13:51:55 executing program 6: clock_getres(0x334131f07cd3c775, 0x0) 13:51:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, 0xffffffffffffffff, 0x3) 13:51:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) 13:51:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='^@)^^D\xf6\x80Ds:#\x00\xf5\xde \xef\x9b\xdc_\xa9\xcc?\x1b\x9c\x8aD\x8e\x13=\'zs\ts\xbc\x9d\xec}\x81\x82\xe4s\x80e\xe3\x88\xc4\x8bo\x13\x06r\x13\xc0\x1b\x87\x93`\\\xe3/b\a\xe6\xb6\x19}\xa6\xca]a\xacmc\xf5\xc6\xf7V\x90\xba`\x97\xa7.\x8cL:\xf5^\xb8mT\xae\x1b\xfc\xa1\xeb\x19\xc9:\x7f\xc6+\t\xec\b\x00\xf5j\t\xa9\xb0j\xea\x99\x80\xd25\xe5\xad1R\r\x8a\x9f(\xd0-%\xa0\x99\xb8\x9c\xdf\v\x05\x88\xe1\x1c\x1eu\xe7y+\xdc', 0x0) ftruncate(r0, 0x0) 13:51:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:51:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 13:51:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 125.584291] tmpfs: Bad value for 'mpol' 13:51:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) 13:51:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x17}, './file1\x00'}) 13:51:55 executing program 6: clock_getres(0x334131f07cd3c775, 0x0) 13:51:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x39, 0x31]}}}}]}) 13:51:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='^@)^^D\xf6\x80Ds:#\x00\xf5\xde \xef\x9b\xdc_\xa9\xcc?\x1b\x9c\x8aD\x8e\x13=\'zs\ts\xbc\x9d\xec}\x81\x82\xe4s\x80e\xe3\x88\xc4\x8bo\x13\x06r\x13\xc0\x1b\x87\x93`\\\xe3/b\a\xe6\xb6\x19}\xa6\xca]a\xacmc\xf5\xc6\xf7V\x90\xba`\x97\xa7.\x8cL:\xf5^\xb8mT\xae\x1b\xfc\xa1\xeb\x19\xc9:\x7f\xc6+\t\xec\b\x00\xf5j\t\xa9\xb0j\xea\x99\x80\xd25\xe5\xad1R\r\x8a\x9f(\xd0-%\xa0\x99\xb8\x9c\xdf\v\x05\x88\xe1\x1c\x1eu\xe7y+\xdc', 0x0) ftruncate(r0, 0x0) 13:51:55 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 125.757071] tmpfs: Bad value for 'mpol' [ 125.988043] device lo entered promiscuous mode 13:51:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f000000bb00)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000003200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000051c0)="fb", 0x1}], 0x1}}], 0x2, 0x15) 13:51:56 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 13:51:56 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:51:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:51:56 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:51:56 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 13:51:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 126.147921] loop0: detected capacity change from 0 to 184 [ 126.160532] device lo left promiscuous mode [ 126.169648] device lo entered promiscuous mode [ 126.176590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.177153] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.178789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.179404] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 [ 126.180298] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 126.181065] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 126.181836] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 126.182604] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 126.183341] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 126.184101] Buffer I/O error on dev sr0, logical block 5, lost async page write 13:51:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 13:51:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f000000bb00)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000003200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000051c0)="fb", 0x1}], 0x1}}], 0x2, 0x15) 13:51:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) [ 126.233215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.233788] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.234912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.235499] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 [ 126.236343] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 126.237108] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 126.237867] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 126.238628] Buffer I/O error on dev sr0, logical block 3, lost async page write 13:51:56 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:51:56 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) [ 126.309070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.309691] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.311277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.311890] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 [ 126.313011] device lo left promiscuous mode [ 126.315888] device lo entered promiscuous mode [ 127.033196] loop0: detected capacity change from 0 to 184 13:51:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 13:51:57 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 13:51:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f000000bb00)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000003200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000051c0)="fb", 0x1}], 0x1}}], 0x2, 0x15) 13:51:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 13:51:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210c1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000003380)='clear_refs\x00') write$sndseq(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:51:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 13:51:57 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 127.126164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.126788] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 13:51:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 13:51:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f000000bb00)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000003200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000051c0)="fb", 0x1}], 0x1}}], 0x2, 0x15) 13:51:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 127.142590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.143176] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 13:51:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 127.164599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.165177] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.166767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.167346] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 13:51:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 13:51:57 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:57 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) [ 127.240380] loop0: detected capacity change from 0 to 184 [ 127.243373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.244590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:51:57 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 127.278941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.280379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:51:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xb38b1000) write(r0, &(0x7f0000000000)="c5f3242507bf2631ef69ae5cc16faf2f6dad4b292ab60ab431979ec0e1a5b0471ec0acb4a8b490fe409830881145fc4a94b303cd03321726720d089938d98e", 0x3f) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 13:51:57 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:57 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 127.306035] loop3: detected capacity change from 0 to 184 [ 127.307696] loop1: detected capacity change from 0 to 184 [ 127.308565] loop4: detected capacity change from 0 to 184 [ 127.328846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.330997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:51:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 13:51:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) 13:51:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000200)={0x77359400}, 0x10) 13:51:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x8864, r2}, 0x80, 0x0}}], 0x1, 0x0) 13:51:58 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 128.292665] loop0: detected capacity change from 0 to 184 [ 128.338216] loop4: detected capacity change from 0 to 184 [ 128.356086] loop1: detected capacity change from 0 to 184 13:51:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 13:51:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x8864, r2}, 0x80, 0x0}}], 0x1, 0x0) 13:51:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000200)={0x77359400}, 0x10) 13:51:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) 13:51:58 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 13:51:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 13:51:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000", 0x7b, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000680)=ANY=[]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) renameat2(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) r0 = syz_io_uring_setup(0x178f, &(0x7f0000000440)={0x0, 0x301d, 0x900, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) io_uring_enter(r0, 0x64d0, 0x48be, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r2, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) 13:51:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000200)={0x77359400}, 0x10) [ 128.591565] loop1: detected capacity change from 0 to 184 13:51:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x8864, r2}, 0x80, 0x0}}], 0x1, 0x0) 13:51:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) 13:51:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 13:51:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 13:51:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000200)={0x77359400}, 0x10) 13:51:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 13:51:58 executing program 1: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xff, 0xc9}}}, 0x8) 13:51:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 13:51:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 13:51:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xc0}}, 0x0) 13:51:58 executing program 1: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xff, 0xc9}}}, 0x8) 13:51:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) [ 128.940591] audit: type=1400 audit(1662990718.971:9): avc: denied { write } for pid=4162 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:51:59 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x8864, r2}, 0x80, 0x0}}], 0x1, 0x0) 13:51:59 executing program 7: gettid() write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 13:51:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 13:51:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xc0}}, 0x0) 13:51:59 executing program 1: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xff, 0xc9}}}, 0x8) 13:51:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 13:51:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:51:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:51:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xc0}}, 0x0) 13:51:59 executing program 7: gettid() write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 13:51:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:51:59 executing program 1: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xff, 0xc9}}}, 0x8) 13:51:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000200)={0x77359400}, 0x10) 13:51:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 13:51:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) [ 129.943215] loop2: detected capacity change from 0 to 40 13:52:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xc0}}, 0x0) [ 130.070011] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 130.075749] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.075749] program syz-executor.4 not setting count and/or reply_len properly 13:52:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:52:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000200)={0x77359400}, 0x10) [ 130.470154] loop5: detected capacity change from 0 to 40 13:52:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 13:52:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 13:52:00 executing program 7: gettid() write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 13:52:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 13:52:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.473996] loop2: detected capacity change from 0 to 40 [ 130.484532] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.484532] program syz-executor.4 not setting count and/or reply_len properly [ 130.522069] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.522069] program syz-executor.1 not setting count and/or reply_len properly 13:52:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:52:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000200)={0x77359400}, 0x10) 13:52:00 executing program 7: gettid() write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 13:52:00 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.697147] loop0: detected capacity change from 0 to 40 13:52:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.716948] loop2: detected capacity change from 0 to 40 13:52:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.752661] loop5: detected capacity change from 0 to 40 [ 130.760481] loop6: detected capacity change from 0 to 40 13:52:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.851933] loop0: detected capacity change from 0 to 40 [ 130.859999] loop2: detected capacity change from 0 to 40 13:52:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 130.924501] loop6: detected capacity change from 0 to 40 13:52:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 13:52:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000200)={0x77359400}, 0x10) [ 130.947835] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.947835] program syz-executor.4 not setting count and/or reply_len properly [ 130.959045] loop5: detected capacity change from 0 to 40 13:52:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000500000008"], 0x125) read(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) [ 130.968658] loop2: detected capacity change from 0 to 40 [ 130.969865] loop0: detected capacity change from 0 to 40 [ 131.010413] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.010413] program syz-executor.1 not setting count and/or reply_len properly 13:52:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 13:52:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 131.089120] loop2: detected capacity change from 0 to 40 [ 131.092815] loop6: detected capacity change from 0 to 40 13:52:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 131.120881] loop7: detected capacity change from 0 to 40 13:52:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 131.195698] loop7: detected capacity change from 0 to 40 13:52:01 executing program 4: chdir(0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000180)=""/234, 0xea, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0x1) 13:52:01 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 13:52:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chmod(&(0x7f0000000040)='./file1\x00', 0x408) 13:52:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x22) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x80) r2 = getpgrp(0xffffffffffffffff) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="a3d1112c4b2c8aba23dadff12b83128aa9dbee236a29f81c20aa756479d285ae8146c09e1466e63445172acd519c740ec673939c6790a6e626c2b48535d3b2ca43d3f4", 0x43}], 0x1, 0x2, 0x7) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x3782, 0x8, 0x0, 0x1, 0x5, [{0x7, 0x2, 0x9, '\x00', 0x804}, {0xfffffffffffffff8, 0x2, 0x6, '\x00', 0x388c}, {0x2, 0x3f22, 0x9, '\x00', 0x800}, {0x81, 0x80, 0x1, '\x00', 0x800}, {0x49b2, 0x0, 0x7, '\x00', 0x2808}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000400)='./file0\x00', 0x30000, 0x100) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 131.239226] loop6: detected capacity change from 0 to 40 13:52:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb}, 0x15182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:52:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)) 13:52:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chmod(&(0x7f0000000040)='./file1\x00', 0x408) 13:52:01 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 13:52:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open VM DIAGNOSIS: 13:51:52 Registers: info registers vcpu 0 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801ed1f698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb4af071700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f499c4ad610 CR3=000000003e616000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000003f6c5ea8 RBX=0000000084401b1b RCX=0000000000000011 RDX=000000003f6c5ea8 RSI=ffff88803dec7558 RDI=0000000000000004 RBP=0000000000000000 RSP=ffff88803dec7480 R8 =0000000000000011 R9 =00000000587ca781 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000000800 R15=ffff88803dec74e0 RIP=ffffffff840a844f RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f31c311f0 CR3=000000003ef0c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000