syzkaller login: [ 36.733025] sshd (245) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:40800' (ECDSA) to the list of known hosts. 2022/09/14 13:27:24 fuzzer started 2022/09/14 13:27:24 dialing manager at localhost:33849 [ 38.812855] cgroup: Unknown subsys name 'net' [ 38.886773] cgroup: Unknown subsys name 'rlimit' 2022/09/14 13:27:37 syscalls: 2215 2022/09/14 13:27:37 code coverage: enabled 2022/09/14 13:27:37 comparison tracing: enabled 2022/09/14 13:27:37 extra coverage: enabled 2022/09/14 13:27:37 setuid sandbox: enabled 2022/09/14 13:27:37 namespace sandbox: enabled 2022/09/14 13:27:37 Android sandbox: enabled 2022/09/14 13:27:37 fault injection: enabled 2022/09/14 13:27:37 leak checking: enabled 2022/09/14 13:27:37 net packet injection: enabled 2022/09/14 13:27:37 net device setup: enabled 2022/09/14 13:27:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 13:27:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 13:27:37 USB emulation: enabled 2022/09/14 13:27:37 hci packet injection: enabled 2022/09/14 13:27:37 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 13:27:37 802.15.4 emulation: enabled 2022/09/14 13:27:37 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 13:27:38 fetching corpus: 50, signal 26027/29593 (executing program) 2022/09/14 13:27:38 fetching corpus: 100, signal 41508/46503 (executing program) 2022/09/14 13:27:38 fetching corpus: 150, signal 49821/56270 (executing program) 2022/09/14 13:27:38 fetching corpus: 200, signal 57318/65074 (executing program) 2022/09/14 13:27:38 fetching corpus: 250, signal 63419/72407 (executing program) 2022/09/14 13:27:38 fetching corpus: 300, signal 69561/79714 (executing program) 2022/09/14 13:27:38 fetching corpus: 350, signal 77416/88566 (executing program) 2022/09/14 13:27:39 fetching corpus: 400, signal 81984/94158 (executing program) 2022/09/14 13:27:39 fetching corpus: 450, signal 89129/102028 (executing program) 2022/09/14 13:27:39 fetching corpus: 500, signal 93922/107676 (executing program) 2022/09/14 13:27:39 fetching corpus: 550, signal 98618/113176 (executing program) 2022/09/14 13:27:39 fetching corpus: 600, signal 102297/117662 (executing program) 2022/09/14 13:27:39 fetching corpus: 650, signal 104340/120626 (executing program) 2022/09/14 13:27:40 fetching corpus: 700, signal 107792/124760 (executing program) 2022/09/14 13:27:40 fetching corpus: 750, signal 112031/129617 (executing program) 2022/09/14 13:27:40 fetching corpus: 800, signal 115140/133350 (executing program) 2022/09/14 13:27:40 fetching corpus: 850, signal 118418/137218 (executing program) 2022/09/14 13:27:40 fetching corpus: 900, signal 120767/140273 (executing program) 2022/09/14 13:27:40 fetching corpus: 950, signal 122600/142832 (executing program) 2022/09/14 13:27:40 fetching corpus: 1000, signal 124666/145498 (executing program) 2022/09/14 13:27:41 fetching corpus: 1050, signal 126805/148261 (executing program) 2022/09/14 13:27:41 fetching corpus: 1100, signal 129371/151273 (executing program) 2022/09/14 13:27:41 fetching corpus: 1150, signal 131346/153731 (executing program) 2022/09/14 13:27:41 fetching corpus: 1200, signal 133292/156202 (executing program) 2022/09/14 13:27:41 fetching corpus: 1250, signal 134505/158076 (executing program) 2022/09/14 13:27:41 fetching corpus: 1300, signal 137034/160968 (executing program) 2022/09/14 13:27:41 fetching corpus: 1350, signal 139999/164018 (executing program) 2022/09/14 13:27:41 fetching corpus: 1400, signal 141522/165998 (executing program) 2022/09/14 13:27:42 fetching corpus: 1450, signal 142906/167825 (executing program) 2022/09/14 13:27:42 fetching corpus: 1500, signal 144442/169870 (executing program) 2022/09/14 13:27:42 fetching corpus: 1550, signal 145653/171605 (executing program) 2022/09/14 13:27:42 fetching corpus: 1600, signal 147433/173685 (executing program) 2022/09/14 13:27:42 fetching corpus: 1650, signal 149037/175582 (executing program) 2022/09/14 13:27:42 fetching corpus: 1700, signal 150135/177155 (executing program) 2022/09/14 13:27:42 fetching corpus: 1750, signal 151678/178986 (executing program) 2022/09/14 13:27:42 fetching corpus: 1800, signal 153503/181009 (executing program) 2022/09/14 13:27:43 fetching corpus: 1850, signal 155120/182895 (executing program) 2022/09/14 13:27:43 fetching corpus: 1900, signal 156240/184377 (executing program) 2022/09/14 13:27:43 fetching corpus: 1950, signal 157500/185902 (executing program) 2022/09/14 13:27:43 fetching corpus: 2000, signal 159191/187715 (executing program) 2022/09/14 13:27:43 fetching corpus: 2050, signal 160624/189297 (executing program) 2022/09/14 13:27:43 fetching corpus: 2100, signal 163068/191509 (executing program) 2022/09/14 13:27:43 fetching corpus: 2150, signal 164291/192945 (executing program) 2022/09/14 13:27:44 fetching corpus: 2200, signal 166373/194850 (executing program) 2022/09/14 13:27:44 fetching corpus: 2250, signal 167736/196333 (executing program) 2022/09/14 13:27:44 fetching corpus: 2300, signal 168825/197603 (executing program) 2022/09/14 13:27:44 fetching corpus: 2350, signal 169952/198908 (executing program) 2022/09/14 13:27:44 fetching corpus: 2400, signal 171163/200208 (executing program) 2022/09/14 13:27:44 fetching corpus: 2450, signal 173565/202233 (executing program) 2022/09/14 13:27:44 fetching corpus: 2500, signal 174848/203564 (executing program) 2022/09/14 13:27:44 fetching corpus: 2550, signal 175562/204472 (executing program) 2022/09/14 13:27:44 fetching corpus: 2600, signal 176482/205464 (executing program) 2022/09/14 13:27:45 fetching corpus: 2649, signal 177380/206460 (executing program) 2022/09/14 13:27:45 fetching corpus: 2699, signal 178308/207491 (executing program) 2022/09/14 13:27:45 fetching corpus: 2749, signal 179228/208493 (executing program) 2022/09/14 13:27:45 fetching corpus: 2799, signal 180492/209656 (executing program) 2022/09/14 13:27:45 fetching corpus: 2849, signal 181358/210609 (executing program) 2022/09/14 13:27:45 fetching corpus: 2899, signal 182619/211760 (executing program) 2022/09/14 13:27:45 fetching corpus: 2949, signal 183416/212640 (executing program) 2022/09/14 13:27:45 fetching corpus: 2997, signal 184623/213746 (executing program) 2022/09/14 13:27:46 fetching corpus: 3047, signal 185976/214837 (executing program) 2022/09/14 13:27:46 fetching corpus: 3097, signal 186692/215644 (executing program) 2022/09/14 13:27:46 fetching corpus: 3146, signal 187771/216557 (executing program) 2022/09/14 13:27:46 fetching corpus: 3196, signal 188577/217337 (executing program) 2022/09/14 13:27:46 fetching corpus: 3246, signal 189524/218143 (executing program) 2022/09/14 13:27:46 fetching corpus: 3295, signal 190445/218977 (executing program) 2022/09/14 13:27:46 fetching corpus: 3345, signal 191501/219827 (executing program) 2022/09/14 13:27:46 fetching corpus: 3394, signal 192223/220538 (executing program) 2022/09/14 13:27:46 fetching corpus: 3444, signal 193069/221259 (executing program) 2022/09/14 13:27:47 fetching corpus: 3493, signal 193760/221935 (executing program) 2022/09/14 13:27:47 fetching corpus: 3542, signal 194784/222730 (executing program) 2022/09/14 13:27:47 fetching corpus: 3590, signal 195521/223391 (executing program) 2022/09/14 13:27:47 fetching corpus: 3639, signal 196335/224055 (executing program) 2022/09/14 13:27:47 fetching corpus: 3689, signal 197055/224759 (executing program) 2022/09/14 13:27:47 fetching corpus: 3738, signal 197938/225403 (executing program) 2022/09/14 13:27:47 fetching corpus: 3787, signal 199040/226129 (executing program) 2022/09/14 13:27:47 fetching corpus: 3836, signal 199658/226683 (executing program) 2022/09/14 13:27:48 fetching corpus: 3886, signal 200794/227498 (executing program) 2022/09/14 13:27:48 fetching corpus: 3936, signal 201566/228133 (executing program) 2022/09/14 13:27:48 fetching corpus: 3986, signal 202411/228698 (executing program) 2022/09/14 13:27:48 fetching corpus: 4035, signal 203058/229195 (executing program) 2022/09/14 13:27:48 fetching corpus: 4085, signal 203955/229767 (executing program) 2022/09/14 13:27:48 fetching corpus: 4135, signal 204966/230372 (executing program) 2022/09/14 13:27:49 fetching corpus: 4184, signal 206031/230938 (executing program) 2022/09/14 13:27:49 fetching corpus: 4231, signal 207002/231621 (executing program) 2022/09/14 13:27:49 fetching corpus: 4280, signal 208500/232499 (executing program) 2022/09/14 13:27:49 fetching corpus: 4330, signal 209360/232973 (executing program) 2022/09/14 13:27:49 fetching corpus: 4380, signal 210588/233478 (executing program) 2022/09/14 13:27:49 fetching corpus: 4429, signal 211371/233988 (executing program) 2022/09/14 13:27:49 fetching corpus: 4479, signal 211898/234357 (executing program) 2022/09/14 13:27:50 fetching corpus: 4529, signal 212802/234801 (executing program) 2022/09/14 13:27:50 fetching corpus: 4573, signal 213592/235280 (executing program) 2022/09/14 13:27:50 fetching corpus: 4620, signal 213993/235597 (executing program) 2022/09/14 13:27:50 fetching corpus: 4670, signal 214709/235935 (executing program) 2022/09/14 13:27:50 fetching corpus: 4717, signal 215249/236313 (executing program) 2022/09/14 13:27:50 fetching corpus: 4766, signal 215850/236597 (executing program) 2022/09/14 13:27:50 fetching corpus: 4816, signal 216682/236914 (executing program) 2022/09/14 13:27:51 fetching corpus: 4864, signal 217246/237193 (executing program) 2022/09/14 13:27:51 fetching corpus: 4911, signal 218203/237538 (executing program) 2022/09/14 13:27:51 fetching corpus: 4960, signal 219233/237916 (executing program) 2022/09/14 13:27:51 fetching corpus: 5010, signal 219626/238145 (executing program) 2022/09/14 13:27:51 fetching corpus: 5059, signal 220320/238372 (executing program) 2022/09/14 13:27:51 fetching corpus: 5108, signal 220813/238639 (executing program) 2022/09/14 13:27:52 fetching corpus: 5157, signal 221356/238864 (executing program) 2022/09/14 13:27:52 fetching corpus: 5207, signal 221784/239058 (executing program) 2022/09/14 13:27:52 fetching corpus: 5257, signal 222427/239260 (executing program) 2022/09/14 13:27:52 fetching corpus: 5307, signal 222834/239439 (executing program) 2022/09/14 13:27:52 fetching corpus: 5357, signal 223471/239714 (executing program) 2022/09/14 13:27:52 fetching corpus: 5407, signal 223882/239923 (executing program) 2022/09/14 13:27:52 fetching corpus: 5457, signal 224880/240148 (executing program) 2022/09/14 13:27:52 fetching corpus: 5507, signal 225306/240239 (executing program) 2022/09/14 13:27:53 fetching corpus: 5557, signal 225917/240265 (executing program) 2022/09/14 13:27:53 fetching corpus: 5606, signal 226847/240375 (executing program) 2022/09/14 13:27:53 fetching corpus: 5656, signal 227844/240375 (executing program) 2022/09/14 13:27:53 fetching corpus: 5703, signal 228705/240440 (executing program) 2022/09/14 13:27:53 fetching corpus: 5751, signal 229345/240517 (executing program) 2022/09/14 13:27:53 fetching corpus: 5800, signal 229773/240535 (executing program) 2022/09/14 13:27:53 fetching corpus: 5849, signal 230402/240554 (executing program) 2022/09/14 13:27:53 fetching corpus: 5898, signal 230917/240556 (executing program) 2022/09/14 13:27:54 fetching corpus: 5948, signal 231454/240577 (executing program) 2022/09/14 13:27:54 fetching corpus: 5997, signal 232154/240612 (executing program) 2022/09/14 13:27:54 fetching corpus: 6023, signal 232538/240639 (executing program) 2022/09/14 13:27:54 fetching corpus: 6023, signal 232538/240639 (executing program) 2022/09/14 13:27:56 starting 8 fuzzer processes 13:27:56 executing program 0: syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x1a, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4, [{}]}}}}}}, 0x0) 13:27:56 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xffffffffffffffff) 13:27:56 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@rr={0x2a, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 13:27:56 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/13) 13:27:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) 13:27:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:27:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) [ 70.994444] audit: type=1400 audit(1663162076.907:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:27:56 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) [ 72.273405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.275165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.276883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.279586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.281439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.282790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.288196] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.345773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.347709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.349482] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.351348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.352516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.353589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.354688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.355917] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.356970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.358149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.359390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.360466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.364932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.366196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.367283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.369477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.370699] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.371696] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.372842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.374084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.375235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.376211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.387374] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.394517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.397578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.402157] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.403259] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.404068] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.410428] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.417679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.427047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.443511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.445580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.447591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.448303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.452845] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.470420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.471849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.475748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.478392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.479663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.487019] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.360659] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 74.361625] Bluetooth: hci0: command 0x0409 tx timeout [ 74.423207] Bluetooth: hci5: command 0x0409 tx timeout [ 74.423997] Bluetooth: hci2: command 0x0409 tx timeout [ 74.424144] Bluetooth: hci3: command 0x0409 tx timeout [ 74.424779] Bluetooth: hci6: command 0x0409 tx timeout [ 74.487268] Bluetooth: hci4: command 0x0409 tx timeout [ 74.552195] Bluetooth: hci7: command 0x0409 tx timeout [ 76.408181] Bluetooth: hci0: command 0x041b tx timeout [ 76.472219] Bluetooth: hci6: command 0x041b tx timeout [ 76.472702] Bluetooth: hci3: command 0x041b tx timeout [ 76.473886] Bluetooth: hci2: command 0x041b tx timeout [ 76.474382] Bluetooth: hci5: command 0x041b tx timeout [ 76.536227] Bluetooth: hci4: command 0x041b tx timeout [ 76.599184] Bluetooth: hci7: command 0x041b tx timeout [ 77.298692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.332922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.335872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.341228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.345674] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.346409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.350424] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.455602] Bluetooth: hci0: command 0x040f tx timeout [ 78.519164] Bluetooth: hci5: command 0x040f tx timeout [ 78.519654] Bluetooth: hci2: command 0x040f tx timeout [ 78.520919] Bluetooth: hci3: command 0x040f tx timeout [ 78.521505] Bluetooth: hci6: command 0x040f tx timeout [ 78.584218] Bluetooth: hci4: command 0x040f tx timeout [ 78.648187] Bluetooth: hci7: command 0x040f tx timeout [ 79.415168] Bluetooth: hci1: command 0x0409 tx timeout [ 80.504195] Bluetooth: hci0: command 0x0419 tx timeout [ 80.568179] Bluetooth: hci6: command 0x0419 tx timeout [ 80.568656] Bluetooth: hci3: command 0x0419 tx timeout [ 80.569066] Bluetooth: hci2: command 0x0419 tx timeout [ 80.569831] Bluetooth: hci5: command 0x0419 tx timeout [ 80.632135] Bluetooth: hci4: command 0x0419 tx timeout [ 80.696139] Bluetooth: hci7: command 0x0419 tx timeout [ 81.464157] Bluetooth: hci1: command 0x041b tx timeout [ 83.511260] Bluetooth: hci1: command 0x040f tx timeout [ 85.560185] Bluetooth: hci1: command 0x0419 tx timeout 13:28:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:28:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:28:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:28:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x4}}, 0x24, 0x0) [ 131.627969] audit: type=1400 audit(1663162137.540:7): avc: denied { open } for pid=3836 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.629552] audit: type=1400 audit(1663162137.540:8): avc: denied { kernel } for pid=3836 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:28:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) fstatfs(r0, &(0x7f0000000080)=""/224) 13:28:57 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@remote}]}]}}}], 0x20}}], 0x1, 0x0) 13:28:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000000)={0x14, 0x0}, 0x10) 13:28:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) [ 134.103690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.104834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.106437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.110037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.111800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.112752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.125026] Bluetooth: hci0: HCI_REQ-0x0c1a [ 134.334630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.353281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.356246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.366308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.368474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.369781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.372522] Bluetooth: hci4: HCI_REQ-0x0c1a [ 134.391148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.392004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.394182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.394813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.396369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.396957] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.404360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.404963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.407392] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.407923] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 134.409484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.410135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.415069] Bluetooth: hci5: HCI_REQ-0x0c1a [ 134.417490] Bluetooth: hci7: HCI_REQ-0x0c1a [ 136.183180] Bluetooth: hci0: command 0x0409 tx timeout [ 136.311332] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 136.375217] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 136.439169] Bluetooth: hci7: command 0x0409 tx timeout [ 136.439217] Bluetooth: hci4: command 0x0409 tx timeout [ 136.439648] Bluetooth: hci5: command 0x0409 tx timeout [ 138.231357] Bluetooth: hci0: command 0x041b tx timeout [ 138.487392] Bluetooth: hci5: command 0x041b tx timeout [ 138.488815] Bluetooth: hci4: command 0x041b tx timeout [ 138.489715] Bluetooth: hci7: command 0x041b tx timeout [ 138.816128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.817921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.819975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.822970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.824601] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.826003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.841357] Bluetooth: hci2: HCI_REQ-0x0c1a [ 140.280282] Bluetooth: hci0: command 0x040f tx timeout [ 140.535305] Bluetooth: hci7: command 0x040f tx timeout [ 140.536788] Bluetooth: hci4: command 0x040f tx timeout [ 140.537952] Bluetooth: hci5: command 0x040f tx timeout [ 140.855310] Bluetooth: hci2: command 0x0409 tx timeout [ 141.047290] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 142.328750] Bluetooth: hci0: command 0x0419 tx timeout [ 142.583151] Bluetooth: hci5: command 0x0419 tx timeout [ 142.583625] Bluetooth: hci4: command 0x0419 tx timeout [ 142.583996] Bluetooth: hci7: command 0x0419 tx timeout [ 142.903160] Bluetooth: hci2: command 0x041b tx timeout [ 144.951149] Bluetooth: hci2: command 0x040f tx timeout [ 145.719177] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 146.999296] Bluetooth: hci2: command 0x0419 tx timeout [ 148.221437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.224017] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.225853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.230386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.232169] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.233711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.238256] Bluetooth: hci6: HCI_REQ-0x0c1a [ 150.263171] Bluetooth: hci6: command 0x0409 tx timeout [ 152.312190] Bluetooth: hci6: command 0x041b tx timeout [ 154.359190] Bluetooth: hci6: command 0x040f tx timeout [ 156.407157] Bluetooth: hci6: command 0x0419 tx timeout [ 182.085646] ------------[ cut here ]------------ [ 182.085691] [ 182.085697] ====================================================== [ 182.085703] WARNING: possible circular locking dependency detected [ 182.085711] 6.0.0-rc5-next-20220914 #1 Not tainted [ 182.085724] ------------------------------------------------------ [ 182.085730] syz-executor.3/6650 is trying to acquire lock: [ 182.085743] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 182.085810] [ 182.085810] but task is already holding lock: [ 182.085815] ffff88801027ec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 182.085869] [ 182.085869] which lock already depends on the new lock. [ 182.085869] [ 182.085875] [ 182.085875] the existing dependency chain (in reverse order) is: [ 182.085881] [ 182.085881] -> #3 (&ctx->lock){....}-{2:2}: [ 182.085909] _raw_spin_lock+0x2a/0x40 [ 182.085941] __perf_event_task_sched_out+0x53b/0x18d0 [ 182.085966] __schedule+0xedd/0x2470 [ 182.085986] schedule+0xda/0x1b0 [ 182.086006] exit_to_user_mode_prepare+0x114/0x1a0 [ 182.086046] syscall_exit_to_user_mode+0x19/0x40 [ 182.086082] do_syscall_64+0x48/0x90 [ 182.086113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.086148] [ 182.086148] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 182.086176] _raw_spin_lock_nested+0x30/0x40 [ 182.086206] raw_spin_rq_lock_nested+0x1e/0x30 [ 182.086231] task_fork_fair+0x63/0x4d0 [ 182.086265] sched_cgroup_fork+0x3d0/0x540 [ 182.086293] copy_process+0x4183/0x6e20 [ 182.086313] kernel_clone+0xe7/0x890 [ 182.086332] user_mode_thread+0xad/0xf0 [ 182.086352] rest_init+0x24/0x250 [ 182.086385] arch_call_rest_init+0xf/0x14 [ 182.086407] start_kernel+0x4c1/0x4e6 [ 182.086426] secondary_startup_64_no_verify+0xe0/0xeb [ 182.086454] [ 182.086454] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 182.086481] _raw_spin_lock_irqsave+0x39/0x60 [ 182.086511] try_to_wake_up+0xab/0x1920 [ 182.086538] up+0x75/0xb0 [ 182.086560] __up_console_sem+0x6e/0x80 [ 182.086592] console_unlock+0x46a/0x590 [ 182.086624] do_con_write+0xc05/0x1d50 [ 182.086645] con_write+0x21/0x40 [ 182.086663] n_tty_write+0x4d4/0xfe0 [ 182.086689] file_tty_write.constprop.0+0x49c/0x8f0 [ 182.086712] vfs_write+0x9c3/0xd90 [ 182.086747] ksys_write+0x127/0x250 [ 182.086782] do_syscall_64+0x3b/0x90 [ 182.086808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.086842] [ 182.086842] -> #0 ((console_sem).lock){....}-{2:2}: [ 182.086869] __lock_acquire+0x2a02/0x5e70 [ 182.086903] lock_acquire+0x1a2/0x530 [ 182.086935] _raw_spin_lock_irqsave+0x39/0x60 [ 182.086965] down_trylock+0xe/0x70 [ 182.086990] __down_trylock_console_sem+0x3b/0xd0 [ 182.087023] vprintk_emit+0x16b/0x560 [ 182.087056] vprintk+0x84/0xa0 [ 182.087089] _printk+0xba/0xf1 [ 182.087124] report_bug.cold+0x72/0xab [ 182.087148] handle_bug+0x3c/0x70 [ 182.087174] exc_invalid_op+0x14/0x50 [ 182.087201] asm_exc_invalid_op+0x16/0x20 [ 182.087234] group_sched_out.part.0+0x2c7/0x460 [ 182.087255] ctx_sched_out+0x8f1/0xc10 [ 182.087310] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.087334] __schedule+0xedd/0x2470 [ 182.087353] preempt_schedule_common+0x45/0xc0 [ 182.087375] __cond_resched+0x17/0x30 [ 182.087395] __mutex_lock+0xa3/0x14d0 [ 182.087417] __do_sys_perf_event_open+0x1eec/0x32c0 [ 182.087443] do_syscall_64+0x3b/0x90 [ 182.087469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.087503] [ 182.087503] other info that might help us debug this: [ 182.087503] [ 182.087508] Chain exists of: [ 182.087508] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 182.087508] [ 182.087538] Possible unsafe locking scenario: [ 182.087538] [ 182.087543] CPU0 CPU1 [ 182.087548] ---- ---- [ 182.087552] lock(&ctx->lock); [ 182.087563] lock(&rq->__lock); [ 182.087576] lock(&ctx->lock); [ 182.087588] lock((console_sem).lock); [ 182.087600] [ 182.087600] *** DEADLOCK *** [ 182.087600] [ 182.087603] 2 locks held by syz-executor.3/6650: [ 182.087617] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 182.087668] #1: ffff88801027ec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 182.087723] [ 182.087723] stack backtrace: [ 182.087728] CPU: 0 PID: 6650 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220914 #1 [ 182.087753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 182.087769] Call Trace: [ 182.087775] [ 182.087783] dump_stack_lvl+0x8b/0xb3 [ 182.087812] check_noncircular+0x263/0x2e0 [ 182.087846] ? format_decode+0x26c/0xb50 [ 182.087875] ? print_circular_bug+0x450/0x450 [ 182.087909] ? enable_ptr_key_workfn+0x20/0x20 [ 182.087938] ? mark_lock.part.0+0xef/0x2f70 [ 182.087973] ? format_decode+0x26c/0xb50 [ 182.088004] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 182.088040] __lock_acquire+0x2a02/0x5e70 [ 182.088084] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 182.088129] lock_acquire+0x1a2/0x530 [ 182.088164] ? down_trylock+0xe/0x70 [ 182.088193] ? rcu_read_unlock+0x40/0x40 [ 182.088235] ? vprintk+0x84/0xa0 [ 182.088272] _raw_spin_lock_irqsave+0x39/0x60 [ 182.088304] ? down_trylock+0xe/0x70 [ 182.088331] down_trylock+0xe/0x70 [ 182.088358] ? vprintk+0x84/0xa0 [ 182.088393] __down_trylock_console_sem+0x3b/0xd0 [ 182.088428] vprintk_emit+0x16b/0x560 [ 182.088467] vprintk+0x84/0xa0 [ 182.088503] _printk+0xba/0xf1 [ 182.088538] ? record_print_text.cold+0x16/0x16 [ 182.088581] ? perf_event_update_userpage+0x4e8/0x7c0 [ 182.088607] ? report_bug.cold+0x66/0xab [ 182.088636] ? group_sched_out.part.0+0x2c7/0x460 [ 182.088658] report_bug.cold+0x72/0xab [ 182.088688] handle_bug+0x3c/0x70 [ 182.088716] exc_invalid_op+0x14/0x50 [ 182.088746] asm_exc_invalid_op+0x16/0x20 [ 182.088781] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 182.088806] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 182.088828] RSP: 0018:ffff8880087ff978 EFLAGS: 00010006 [ 182.088846] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 182.088862] RDX: ffff88801a769ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 182.088877] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 182.088891] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801027ec00 [ 182.088906] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 182.088928] ? group_sched_out.part.0+0x2c7/0x460 [ 182.088954] ? group_sched_out.part.0+0x2c7/0x460 [ 182.088980] ctx_sched_out+0x8f1/0xc10 [ 182.089005] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.089036] ? lock_is_held_type+0xd7/0x130 [ 182.089073] ? __perf_cgroup_move+0x160/0x160 [ 182.089097] ? set_next_entity+0x304/0x550 [ 182.089132] ? update_curr+0x267/0x740 [ 182.089170] ? lock_is_held_type+0xd7/0x130 [ 182.089208] __schedule+0xedd/0x2470 [ 182.089234] ? io_schedule_timeout+0x150/0x150 [ 182.089257] ? find_held_lock+0x2c/0x110 [ 182.089290] ? lock_is_held_type+0xd7/0x130 [ 182.089325] ? __cond_resched+0x17/0x30 [ 182.089348] preempt_schedule_common+0x45/0xc0 [ 182.089374] __cond_resched+0x17/0x30 [ 182.089395] __mutex_lock+0xa3/0x14d0 [ 182.089421] ? lock_is_held_type+0xd7/0x130 [ 182.089456] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 182.089486] ? mutex_lock_io_nested+0x1310/0x1310 [ 182.089512] ? lock_release+0x3b2/0x750 [ 182.089547] ? __up_read+0x192/0x730 [ 182.089576] ? up_write+0x480/0x480 [ 182.089605] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.089643] __do_sys_perf_event_open+0x1eec/0x32c0 [ 182.089677] ? perf_compat_ioctl+0x130/0x130 [ 182.089702] ? xfd_validate_state+0x59/0x180 [ 182.089748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 182.089785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 182.089826] do_syscall_64+0x3b/0x90 [ 182.089855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.089890] RIP: 0033:0x7fb6f3f1db19 [ 182.089908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.089929] RSP: 002b:00007fb6f1493188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 182.089951] RAX: ffffffffffffffda RBX: 00007fb6f4030f60 RCX: 00007fb6f3f1db19 [ 182.089966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 182.089980] RBP: 00007fb6f3f77f6d R08: 0000000000000000 R09: 0000000000000000 [ 182.089995] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 182.090009] R13: 00007ffd1a341d3f R14: 00007fb6f1493300 R15: 0000000000022000 [ 182.090035] [ 182.231846] WARNING: CPU: 0 PID: 6650 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 182.233661] Modules linked in: [ 182.234296] CPU: 0 PID: 6650 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220914 #1 [ 182.235890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 182.238090] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 182.239154] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 182.242710] RSP: 0018:ffff8880087ff978 EFLAGS: 00010006 [ 182.243767] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 182.245161] RDX: ffff88801a769ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 182.246554] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 182.247963] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801027ec00 [ 182.249350] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 182.250476] FS: 00007fb6f1493700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 182.251652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.252493] CR2: 00000000200001c0 CR3: 0000000039480000 CR4: 0000000000350ef0 [ 182.253527] Call Trace: [ 182.253939] [ 182.254304] ctx_sched_out+0x8f1/0xc10 [ 182.254922] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.255749] ? lock_is_held_type+0xd7/0x130 [ 182.256443] ? __perf_cgroup_move+0x160/0x160 [ 182.257154] ? set_next_entity+0x304/0x550 [ 182.257830] ? update_curr+0x267/0x740 [ 182.258459] ? lock_is_held_type+0xd7/0x130 [ 182.259147] __schedule+0xedd/0x2470 [ 182.259759] ? io_schedule_timeout+0x150/0x150 [ 182.260470] ? find_held_lock+0x2c/0x110 [ 182.261116] ? lock_is_held_type+0xd7/0x130 [ 182.261807] ? __cond_resched+0x17/0x30 [ 182.262435] preempt_schedule_common+0x45/0xc0 [ 182.263149] __cond_resched+0x17/0x30 [ 182.263769] __mutex_lock+0xa3/0x14d0 [ 182.264378] ? lock_is_held_type+0xd7/0x130 [ 182.265076] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 182.265888] ? mutex_lock_io_nested+0x1310/0x1310 [ 182.266637] ? lock_release+0x3b2/0x750 [ 182.267294] ? __up_read+0x192/0x730 [ 182.267895] ? up_write+0x480/0x480 [ 182.268478] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.269276] __do_sys_perf_event_open+0x1eec/0x32c0 [ 182.270067] ? perf_compat_ioctl+0x130/0x130 [ 182.270764] ? xfd_validate_state+0x59/0x180 [ 182.271497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 182.272318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 182.273137] do_syscall_64+0x3b/0x90 [ 182.273731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.274544] RIP: 0033:0x7fb6f3f1db19 [ 182.275131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.277915] RSP: 002b:00007fb6f1493188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 182.279084] RAX: ffffffffffffffda RBX: 00007fb6f4030f60 RCX: 00007fb6f3f1db19 [ 182.280197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 182.281293] RBP: 00007fb6f3f77f6d R08: 0000000000000000 R09: 0000000000000000 [ 182.282386] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 182.283489] R13: 00007ffd1a341d3f R14: 00007fb6f1493300 R15: 0000000000022000 [ 182.284593] [ 182.284964] irq event stamp: 320 [ 182.285486] hardirqs last enabled at (319): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.286930] hardirqs last disabled at (320): [] __schedule+0x1225/0x2470 [ 182.288212] softirqs last enabled at (190): [] __irq_exit_rcu+0x11b/0x180 [ 182.289528] softirqs last disabled at (129): [] __irq_exit_rcu+0x11b/0x180 [ 182.290837] ---[ end trace 0000000000000000 ]--- 13:29:48 executing program 0: syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x1a, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4, [{}]}}}}}}, 0x0) 13:29:48 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 13:29:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) 13:29:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 13:29:48 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, 0x0, &(0x7f00000002c0)) 13:29:48 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:48 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000900)) [ 182.387107] hrtimer: interrupt took 21039 ns [ 182.401233] audit: type=1400 audit(1663162188.307:9): avc: denied { write } for pid=6656 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:29:48 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, 0x0, &(0x7f00000002c0)) 13:29:48 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 13:29:48 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000900)) [ 183.189799] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 183.191317] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 183.192420] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 183.193461] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 183.194651] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 2 [ 183.202667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.203082] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.204086] Buffer I/O error on dev sr0, logical block 0, async page read [ 183.204694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.205109] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.205713] Buffer I/O error on dev sr0, logical block 1, async page read [ 183.206304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.206702] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.207322] Buffer I/O error on dev sr0, logical block 2, async page read [ 183.207912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.208326] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.208935] Buffer I/O error on dev sr0, logical block 3, async page read [ 183.209520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.209919] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.210550] Buffer I/O error on dev sr0, logical block 4, async page read [ 183.211537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.211933] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.212553] Buffer I/O error on dev sr0, logical block 5, async page read [ 183.214223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.214638] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.215366] Buffer I/O error on dev sr0, logical block 6, async page read [ 183.215950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.216371] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.216982] Buffer I/O error on dev sr0, logical block 7, async page read [ 183.217601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.218014] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.218647] Buffer I/O error on dev sr0, logical block 0, async page read [ 183.219234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.219636] Buffer I/O error on dev sr0, logical block 1, async page read [ 183.220781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.221265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.221721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.222207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.222672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.223167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.223663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.224179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.224650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.225119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.225565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.226277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.226741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.227230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.227726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.228203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.228651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.230308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.230770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.231456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.231921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.232394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.232901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.233390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.233844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.234333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.234789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.235266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.235742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.236198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.236663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.237143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.237603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.238039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.239075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.239558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.239998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.240581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:29:49 executing program 0: syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x1a, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4, [{}]}}}}}}, 0x0) 13:29:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) 13:29:49 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000900)) 13:29:49 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 13:29:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:49 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 13:29:49 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, 0x0, &(0x7f00000002c0)) 13:29:49 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000900)) 13:29:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 13:29:49 executing program 0: syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x1a, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4, [{}]}}}}}}, 0x0) 13:29:49 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, 0x0, &(0x7f00000002c0)) 13:29:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) [ 183.460580] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 183.461342] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 183.461841] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 183.462346] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 183.464250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.464828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.465510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.466332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.466914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.467544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.468615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 183.469245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:29:49 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:49 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 13:29:49 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 13:29:49 executing program 7: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 13:29:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:49 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) [ 183.687879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.688789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.722332] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.732533] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 183.774552] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 183.775266] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 183.775771] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 183.776271] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 183.815641] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 183.816401] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 183.816903] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 183.817407] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 184.199143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.200457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.626066] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' 13:29:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:29:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 13:29:50 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @fixed}}}}, 0x22) 13:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4dcd79782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 13:29:50 executing program 7: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 13:29:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) 13:29:50 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) [ 184.711503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.713177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.730951] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 13:29:50 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @fixed}}}}, 0x22) 13:29:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x11, &(0x7f00000001c0)=ANY=[], 0x8) 13:29:50 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) [ 184.818419] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.833604] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 13:29:50 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @fixed}}}}, 0x22) [ 184.948869] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.986498] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 13:29:50 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @fixed}}}}, 0x22) 13:29:50 executing program 0: getpeername$inet(0xffffffffffffffff, 0x0, 0x0) [ 185.069968] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' 13:29:50 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0xfffffffffffffffd) [ 185.100223] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 13:29:52 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:52 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 13:29:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@empty, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @multicast1, @broadcast}}}}}, 0x0) 13:29:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) 13:29:52 executing program 7: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 13:29:52 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 13:29:52 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 186.433867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.439010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.475971] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.495560] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' 13:29:52 executing program 1: clock_adjtime(0x0, &(0x7f0000000100)={0x5fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000f423f}) [ 186.512803] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:29:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000280)) [ 186.698944] loop6: detected capacity change from 0 to 256 [ 186.737773] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 186.743395] Bluetooth: hci1: command 0x2016 tx timeout 13:29:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000280)) [ 186.795729] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:29:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:52 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) 13:29:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000280)) [ 186.897936] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:29:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) [ 186.966162] loop6: detected capacity change from 0 to 256 13:29:52 executing program 7: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) [ 187.026868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.033339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.047186] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 187.055615] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' 13:29:53 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:53 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000280)) 13:29:53 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x7fff, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x5, 0x221301) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009effffffca6143954f35e696e380f7090be1a528f4bd69eab42cd928e01cc2715c1247b8c22731dcb2483bdec7654c1380bd27c6"]) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000004c0)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, "5df0cbe6fdabd2f3df4ef4f785986942cd3abde4a688ab8ac64e3fc9f1fd6b46ff5188f5b347fd4f809c95e509bd80996376c7c843b528adc48ff5476a66c4ec", "76997adcf8341a9ba908142c646d65d888d4f54577b74d6beac185359ce1537275c2c4c839569b788e610ed9e3f5c93bc62f70307ba9dd32fb8f55d16063bcae", "585f24bb3ae12d10afaf3f1a82c1b955b13ba2ce5b3c5445b7f6ef6c03d7c7ef"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000030c0)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x10003) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001d00010000000000000000000400000014a98f45357d0100d7c15cabbd7d63d35ec421d1437fb2c573d2f90f9f8d54e311394136d2fffe511eeef330b2781188e25185ffbd7c1ac2aa15d41a3594308833deeeb2b795274af0e04089f501a625bcfd1a812ba1e2233700d0ba6a2ff5918fe814ddcfb8c50e3b468820fc670522f9fbb574597387e3d57f3f0544a91ef99d18363ea8c782c250080be7318bb1fb37aa1039fa0000000000"], 0x14}], 0x1}, 0x0) [ 187.249297] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.562682] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' 13:29:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) 13:29:54 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:54 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 13:29:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) 13:29:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 188.631910] loop6: detected capacity change from 0 to 256 [ 189.353380] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:29:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 189.473809] loop1: detected capacity change from 0 to 256 13:29:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) 13:29:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) 13:29:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 190.254669] loop6: detected capacity change from 0 to 256 13:29:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 190.356183] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 190.460482] loop1: detected capacity change from 0 to 256 [ 190.622408] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:29:56 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 13:29:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, 0x0, 0x0) [ 190.901207] loop0: detected capacity change from 0 to 40 [ 190.919791] loop1: detected capacity change from 0 to 256 13:29:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 13:29:56 executing program 3: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:29:56 executing program 5: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000200)={0x77359400}, 0x10) 13:29:56 executing program 6: r0 = eventfd2(0x0, 0x801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2) 13:29:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000000)={0xfffc}) 13:29:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) [ 190.933336] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:29:56 executing program 6: r0 = eventfd2(0x0, 0x801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2) 13:29:56 executing program 5: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000200)={0x77359400}, 0x10) 13:29:56 executing program 3: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:29:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000000)={0xfffc}) [ 191.036739] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.048492] syz-executor.0: attempt to access beyond end of device [ 191.048492] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 191.049489] buffer_io_error: 54 callbacks suppressed [ 191.049506] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:29:56 executing program 5: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:56 executing program 6: r0 = eventfd2(0x0, 0x801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2) [ 191.068654] syz-executor.0 (6892) used greatest stack depth: 24472 bytes left 13:29:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000200)={0x77359400}, 0x10) 13:29:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000000)={0xfffc}) 13:29:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) 13:29:57 executing program 3: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:29:57 executing program 6: r0 = eventfd2(0x0, 0x801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c5d591842dc721cf", 0x8}, {&(0x7f00000000c0)="93ee52744d7239b5", 0x8}], 0x2) 13:29:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000000)={0xfffc}) 13:29:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000200)={0x77359400}, 0x10) 13:29:57 executing program 5: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 1: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) [ 191.179610] loop0: detected capacity change from 0 to 40 13:29:57 executing program 3: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 191.242353] syz-executor.0: attempt to access beyond end of device [ 191.242353] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 191.243600] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:29:57 executing program 1: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) 13:29:57 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3a3d, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3744, &(0x7f0000000000), &(0x7f0000efc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 13:29:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 13:29:57 executing program 7: rt_sigaction(0x4, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000840)) 13:29:57 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x2040}, 0x0) io_uring_enter(r0, 0x58df, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x8) [ 191.358500] loop0: detected capacity change from 0 to 40 13:29:57 executing program 1: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0xd, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x8) 13:29:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) eventfd2(0x0, 0x0) close(0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) 13:29:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) [ 191.420715] syz-executor.0: attempt to access beyond end of device [ 191.420715] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 191.421742] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:29:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) 13:29:57 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x2040}, 0x0) io_uring_enter(r0, 0x58df, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 7: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) 13:29:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYRES32]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 13:29:57 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x8) 13:29:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) close(r0) 13:29:57 executing program 1: io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x617a679981bc2778}) 13:29:57 executing program 2: r0 = epoll_create(0x4) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x80000004}) 13:29:57 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x2040}, 0x0) io_uring_enter(r0, 0x58df, 0x0, 0x0, 0x0, 0x0) [ 191.526949] loop0: detected capacity change from 0 to 40 [ 191.575524] syz-executor.0: attempt to access beyond end of device [ 191.575524] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 191.576519] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:29:57 executing program 7: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) 13:29:57 executing program 2: r0 = epoll_create(0x4) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x80000004}) 13:29:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000140)="cd", 0x1, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) 13:29:57 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "6170cd", 0x14, 0x6, 0x0, @mcast1, @remote, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:29:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) 13:29:57 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x8) 13:29:57 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x2040}, 0x0) io_uring_enter(r0, 0x58df, 0x0, 0x0, 0x0, 0x0) 13:29:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) 13:29:57 executing program 2: r0 = epoll_create(0x4) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x80000004}) 13:29:57 executing program 7: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) 13:29:57 executing program 4: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x274) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:29:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 13:29:57 executing program 2: r0 = epoll_create(0x4) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x80000004}) 13:29:57 executing program 7: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) 13:29:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13:29:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 13:29:57 executing program 4: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x274) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:29:57 executing program 5: io_setup(0x4, &(0x7f0000000140)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x3, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0]) 13:29:57 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:29:57 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000100008e8384f600688df5daf41d20970768414f9b4e660d59b34767f602535fce8598e35e1ffcd95ae57f8d16395c96c1ba233c29c3405fce107f15b08e80a65943c336ab94890cb43b10b5262d67cba8873add479a5cb73c936dab9ada56b10e", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c6530"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 13:29:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 13:29:57 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x274) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:29:57 executing program 5: clock_adjtime(0x0, &(0x7f0000000100)={0x5fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xf423f, 0x0, 0x0, 0x0, 0x1f}) 13:29:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13:29:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 13:29:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='personality\x00') preadv(r0, &(0x7f0000002e40)=[{&(0x7f0000000940)=""/133, 0x85}], 0x1, 0x0, 0x0) 13:29:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 13:29:59 executing program 4: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x274) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:29:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 13:29:59 executing program 5: clock_adjtime(0x0, &(0x7f0000000100)={0x5fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xf423f, 0x0, 0x0, 0x0, 0x1f}) 13:30:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='personality\x00') preadv(r0, &(0x7f0000002e40)=[{&(0x7f0000000940)=""/133, 0x85}], 0x1, 0x0, 0x0) 13:30:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13:30:00 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x274) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:30:00 executing program 5: clock_adjtime(0x0, &(0x7f0000000100)={0x5fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xf423f, 0x0, 0x0, 0x0, 0x1f}) 13:30:00 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000100008e8384f600688df5daf41d20970768414f9b4e660d59b34767f602535fce8598e35e1ffcd95ae57f8d16395c96c1ba233c29c3405fce107f15b08e80a65943c336ab94890cb43b10b5262d67cba8873add479a5cb73c936dab9ada56b10e", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c6530"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 13:30:00 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000300)={0x0, 0x1df4, 0x4, 0x2, 0x285}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) sendfile(0xf VM DIAGNOSIS: 13:29:48 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff8880087ff3c8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb6f1493700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200001c0 CR3=0000000039480000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=00007ffabab33fff RCX=0000000000000000 RDX=1ffff11002f8eece RSI=ffffffff840c9fac RDI=0000000000000000 RBP=000000000000000e RSP=ffff88800c09f0b8 R8 =0000000000000000 R9 =000000000000000d R10=000000000000000f R11=0000000000000001 R12=ffff88800c09f478 R13=000000000000000d R14=000000000000000f R15=000000000000000d RIP=ffffffff81461747 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffaba4b58c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc771ff56f4 CR3=000000000dda4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 ffffffffffffffff 00000000000000ff YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 000055c6cef357f0 000055c6cef357d0 YMM05=0000000000000000 0000000000000000 0000000000000009 000055c6cef434d0 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000002000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000