Warning: Permanently added '[localhost]:44603' (ECDSA) to the list of known hosts. 2022/09/14 13:52:16 fuzzer started 2022/09/14 13:52:17 dialing manager at localhost:33849 syzkaller login: [ 44.548040] cgroup: Unknown subsys name 'net' [ 44.712511] cgroup: Unknown subsys name 'rlimit' 2022/09/14 13:52:29 syscalls: 2215 2022/09/14 13:52:29 code coverage: enabled 2022/09/14 13:52:29 comparison tracing: enabled 2022/09/14 13:52:29 extra coverage: enabled 2022/09/14 13:52:29 setuid sandbox: enabled 2022/09/14 13:52:29 namespace sandbox: enabled 2022/09/14 13:52:29 Android sandbox: enabled 2022/09/14 13:52:29 fault injection: enabled 2022/09/14 13:52:29 leak checking: enabled 2022/09/14 13:52:29 net packet injection: enabled 2022/09/14 13:52:29 net device setup: enabled 2022/09/14 13:52:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 13:52:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 13:52:29 USB emulation: enabled 2022/09/14 13:52:29 hci packet injection: enabled 2022/09/14 13:52:29 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 13:52:29 802.15.4 emulation: enabled 2022/09/14 13:52:29 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 13:52:29 fetching corpus: 32, signal 33227/36705 (executing program) 2022/09/14 13:52:29 fetching corpus: 82, signal 42006/47045 (executing program) 2022/09/14 13:52:30 fetching corpus: 132, signal 53244/59653 (executing program) 2022/09/14 13:52:30 fetching corpus: 182, signal 59662/67445 (executing program) 2022/09/14 13:52:30 fetching corpus: 232, signal 69880/78731 (executing program) 2022/09/14 13:52:30 fetching corpus: 282, signal 76468/86418 (executing program) 2022/09/14 13:52:30 fetching corpus: 332, signal 81296/92368 (executing program) 2022/09/14 13:52:30 fetching corpus: 382, signal 85738/97864 (executing program) 2022/09/14 13:52:31 fetching corpus: 432, signal 90875/103907 (executing program) 2022/09/14 13:52:31 fetching corpus: 482, signal 97299/111059 (executing program) 2022/09/14 13:52:31 fetching corpus: 532, signal 101708/116285 (executing program) 2022/09/14 13:52:31 fetching corpus: 582, signal 105195/120677 (executing program) 2022/09/14 13:52:31 fetching corpus: 632, signal 109623/125753 (executing program) 2022/09/14 13:52:31 fetching corpus: 682, signal 112126/129126 (executing program) 2022/09/14 13:52:32 fetching corpus: 732, signal 116534/134104 (executing program) 2022/09/14 13:52:32 fetching corpus: 782, signal 120088/138307 (executing program) 2022/09/14 13:52:32 fetching corpus: 832, signal 122402/141357 (executing program) 2022/09/14 13:52:32 fetching corpus: 882, signal 125140/144757 (executing program) 2022/09/14 13:52:32 fetching corpus: 932, signal 128437/148586 (executing program) 2022/09/14 13:52:32 fetching corpus: 982, signal 130343/151148 (executing program) 2022/09/14 13:52:33 fetching corpus: 1032, signal 133467/154664 (executing program) 2022/09/14 13:52:33 fetching corpus: 1082, signal 135847/157600 (executing program) 2022/09/14 13:52:33 fetching corpus: 1132, signal 137362/159754 (executing program) 2022/09/14 13:52:33 fetching corpus: 1182, signal 139193/162169 (executing program) 2022/09/14 13:52:33 fetching corpus: 1232, signal 140884/164400 (executing program) 2022/09/14 13:52:33 fetching corpus: 1282, signal 143354/167241 (executing program) 2022/09/14 13:52:33 fetching corpus: 1332, signal 145736/169979 (executing program) 2022/09/14 13:52:34 fetching corpus: 1381, signal 147405/172152 (executing program) 2022/09/14 13:52:34 fetching corpus: 1431, signal 149166/174361 (executing program) 2022/09/14 13:52:34 fetching corpus: 1481, signal 151051/176642 (executing program) 2022/09/14 13:52:34 fetching corpus: 1531, signal 152382/178405 (executing program) 2022/09/14 13:52:34 fetching corpus: 1581, signal 154335/180728 (executing program) 2022/09/14 13:52:34 fetching corpus: 1631, signal 156110/182820 (executing program) 2022/09/14 13:52:34 fetching corpus: 1681, signal 157274/184388 (executing program) 2022/09/14 13:52:34 fetching corpus: 1731, signal 159207/186511 (executing program) 2022/09/14 13:52:35 fetching corpus: 1781, signal 160411/188135 (executing program) 2022/09/14 13:52:35 fetching corpus: 1831, signal 162589/190339 (executing program) 2022/09/14 13:52:35 fetching corpus: 1881, signal 163551/191709 (executing program) 2022/09/14 13:52:35 fetching corpus: 1931, signal 165731/193929 (executing program) 2022/09/14 13:52:35 fetching corpus: 1981, signal 167832/195969 (executing program) 2022/09/14 13:52:35 fetching corpus: 2031, signal 169351/197664 (executing program) 2022/09/14 13:52:36 fetching corpus: 2081, signal 170645/199156 (executing program) 2022/09/14 13:52:36 fetching corpus: 2130, signal 171417/200341 (executing program) 2022/09/14 13:52:36 fetching corpus: 2180, signal 172633/201789 (executing program) 2022/09/14 13:52:36 fetching corpus: 2230, signal 173672/203073 (executing program) 2022/09/14 13:52:36 fetching corpus: 2280, signal 174926/204487 (executing program) 2022/09/14 13:52:36 fetching corpus: 2330, signal 176230/205952 (executing program) 2022/09/14 13:52:36 fetching corpus: 2380, signal 178564/208057 (executing program) 2022/09/14 13:52:36 fetching corpus: 2430, signal 180325/209691 (executing program) 2022/09/14 13:52:37 fetching corpus: 2480, signal 181289/210829 (executing program) 2022/09/14 13:52:37 fetching corpus: 2530, signal 182286/211992 (executing program) 2022/09/14 13:52:37 fetching corpus: 2580, signal 183300/213092 (executing program) 2022/09/14 13:52:37 fetching corpus: 2630, signal 184604/214387 (executing program) 2022/09/14 13:52:37 fetching corpus: 2679, signal 185549/215447 (executing program) 2022/09/14 13:52:37 fetching corpus: 2729, signal 186015/216261 (executing program) 2022/09/14 13:52:37 fetching corpus: 2779, signal 187152/217418 (executing program) 2022/09/14 13:52:38 fetching corpus: 2829, signal 188156/218518 (executing program) 2022/09/14 13:52:38 fetching corpus: 2879, signal 189099/219552 (executing program) 2022/09/14 13:52:38 fetching corpus: 2929, signal 189607/220367 (executing program) 2022/09/14 13:52:38 fetching corpus: 2979, signal 190347/221236 (executing program) 2022/09/14 13:52:38 fetching corpus: 3029, signal 191490/222410 (executing program) 2022/09/14 13:52:38 fetching corpus: 3079, signal 192274/223301 (executing program) 2022/09/14 13:52:38 fetching corpus: 3129, signal 193385/224309 (executing program) 2022/09/14 13:52:38 fetching corpus: 3179, signal 194358/225244 (executing program) 2022/09/14 13:52:39 fetching corpus: 3229, signal 195875/226365 (executing program) 2022/09/14 13:52:39 fetching corpus: 3279, signal 196523/227164 (executing program) 2022/09/14 13:52:39 fetching corpus: 3329, signal 197016/227835 (executing program) 2022/09/14 13:52:39 fetching corpus: 3379, signal 197683/228603 (executing program) 2022/09/14 13:52:39 fetching corpus: 3429, signal 198410/229346 (executing program) 2022/09/14 13:52:39 fetching corpus: 3479, signal 199594/230256 (executing program) 2022/09/14 13:52:39 fetching corpus: 3529, signal 201265/231334 (executing program) 2022/09/14 13:52:40 fetching corpus: 3579, signal 202906/232493 (executing program) 2022/09/14 13:52:40 fetching corpus: 3629, signal 203733/233209 (executing program) 2022/09/14 13:52:40 fetching corpus: 3679, signal 204331/233826 (executing program) 2022/09/14 13:52:40 fetching corpus: 3729, signal 205113/234507 (executing program) 2022/09/14 13:52:40 fetching corpus: 3779, signal 206119/235241 (executing program) 2022/09/14 13:52:40 fetching corpus: 3829, signal 207205/235989 (executing program) 2022/09/14 13:52:40 fetching corpus: 3879, signal 207984/236603 (executing program) 2022/09/14 13:52:41 fetching corpus: 3929, signal 208882/237302 (executing program) 2022/09/14 13:52:41 fetching corpus: 3979, signal 209419/237803 (executing program) 2022/09/14 13:52:41 fetching corpus: 4029, signal 210198/238407 (executing program) 2022/09/14 13:52:41 fetching corpus: 4079, signal 211006/238992 (executing program) 2022/09/14 13:52:41 fetching corpus: 4129, signal 211574/239541 (executing program) 2022/09/14 13:52:41 fetching corpus: 4179, signal 212610/240246 (executing program) 2022/09/14 13:52:41 fetching corpus: 4229, signal 213723/240904 (executing program) 2022/09/14 13:52:42 fetching corpus: 4279, signal 214330/241350 (executing program) 2022/09/14 13:52:42 fetching corpus: 4329, signal 214702/241755 (executing program) 2022/09/14 13:52:42 fetching corpus: 4379, signal 215596/242304 (executing program) 2022/09/14 13:52:42 fetching corpus: 4429, signal 216511/242830 (executing program) 2022/09/14 13:52:42 fetching corpus: 4479, signal 217171/243334 (executing program) 2022/09/14 13:52:42 fetching corpus: 4529, signal 217978/243906 (executing program) 2022/09/14 13:52:42 fetching corpus: 4579, signal 218743/244347 (executing program) 2022/09/14 13:52:43 fetching corpus: 4629, signal 219608/244863 (executing program) 2022/09/14 13:52:43 fetching corpus: 4679, signal 220431/245292 (executing program) 2022/09/14 13:52:43 fetching corpus: 4729, signal 221513/245766 (executing program) 2022/09/14 13:52:43 fetching corpus: 4778, signal 222339/246172 (executing program) 2022/09/14 13:52:43 fetching corpus: 4828, signal 222986/246537 (executing program) 2022/09/14 13:52:43 fetching corpus: 4878, signal 223511/246837 (executing program) 2022/09/14 13:52:43 fetching corpus: 4928, signal 224059/247157 (executing program) 2022/09/14 13:52:44 fetching corpus: 4978, signal 224725/247497 (executing program) 2022/09/14 13:52:44 fetching corpus: 5028, signal 225613/247841 (executing program) 2022/09/14 13:52:44 fetching corpus: 5078, signal 226225/248128 (executing program) 2022/09/14 13:52:44 fetching corpus: 5128, signal 227012/248516 (executing program) 2022/09/14 13:52:44 fetching corpus: 5178, signal 227599/248808 (executing program) 2022/09/14 13:52:44 fetching corpus: 5228, signal 228028/249086 (executing program) 2022/09/14 13:52:44 fetching corpus: 5278, signal 228606/249403 (executing program) 2022/09/14 13:52:45 fetching corpus: 5328, signal 229037/249660 (executing program) 2022/09/14 13:52:45 fetching corpus: 5378, signal 229555/249976 (executing program) 2022/09/14 13:52:45 fetching corpus: 5428, signal 230283/250209 (executing program) 2022/09/14 13:52:45 fetching corpus: 5478, signal 230718/250451 (executing program) 2022/09/14 13:52:45 fetching corpus: 5528, signal 231086/250631 (executing program) 2022/09/14 13:52:45 fetching corpus: 5578, signal 231828/250821 (executing program) 2022/09/14 13:52:45 fetching corpus: 5628, signal 232156/251032 (executing program) 2022/09/14 13:52:45 fetching corpus: 5678, signal 232641/251269 (executing program) 2022/09/14 13:52:46 fetching corpus: 5728, signal 233433/251453 (executing program) 2022/09/14 13:52:46 fetching corpus: 5778, signal 233991/251638 (executing program) 2022/09/14 13:52:46 fetching corpus: 5828, signal 234751/251656 (executing program) 2022/09/14 13:52:46 fetching corpus: 5878, signal 235668/251674 (executing program) 2022/09/14 13:52:46 fetching corpus: 5928, signal 236154/251721 (executing program) 2022/09/14 13:52:46 fetching corpus: 5978, signal 236703/251726 (executing program) 2022/09/14 13:52:46 fetching corpus: 6028, signal 237364/251749 (executing program) 2022/09/14 13:52:47 fetching corpus: 6078, signal 237915/251810 (executing program) 2022/09/14 13:52:47 fetching corpus: 6128, signal 238315/251820 (executing program) 2022/09/14 13:52:47 fetching corpus: 6178, signal 238866/251853 (executing program) 2022/09/14 13:52:47 fetching corpus: 6228, signal 239307/251878 (executing program) 2022/09/14 13:52:47 fetching corpus: 6278, signal 239702/251878 (executing program) 2022/09/14 13:52:47 fetching corpus: 6328, signal 240522/251887 (executing program) 2022/09/14 13:52:47 fetching corpus: 6378, signal 241110/251925 (executing program) 2022/09/14 13:52:48 fetching corpus: 6428, signal 241525/251944 (executing program) 2022/09/14 13:52:48 fetching corpus: 6478, signal 242173/252003 (executing program) 2022/09/14 13:52:48 fetching corpus: 6528, signal 242669/252003 (executing program) 2022/09/14 13:52:48 fetching corpus: 6578, signal 243496/252011 (executing program) 2022/09/14 13:52:48 fetching corpus: 6584, signal 243517/252012 (executing program) 2022/09/14 13:52:48 fetching corpus: 6584, signal 243517/252012 (executing program) 2022/09/14 13:52:50 starting 8 fuzzer processes 13:52:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:52:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001900000004000180"], 0x18}}, 0x0) 13:52:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 13:52:50 executing program 3: open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) 13:52:50 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r0) [ 78.114906] audit: type=1400 audit(1663163570.749:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:52:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 13:52:50 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0x2, 0x4) 13:52:50 executing program 7: mq_open(&(0x7f0000000880)=']-\xf4]+)-\x00', 0x40, 0x0, 0x0) [ 79.555982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.566129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.568936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.570437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.571629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.573032] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.574604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.575522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.576074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.577163] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.577485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.579583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.580198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.581999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.582574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.585050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.587077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.587246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.589405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.589532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.590865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.591809] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.592449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.594708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.598861] Bluetooth: hci0: HCI_REQ-0x0c1a [ 79.605430] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.606438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.607828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.608955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.610186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.610338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.612941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.627282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.629815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.631563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.633061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.634915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.635959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.637547] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.643552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.645284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.646819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.648205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.649306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.650805] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.651867] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.653407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.654696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.655976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.657290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.664176] Bluetooth: hci5: HCI_REQ-0x0c1a [ 79.665194] Bluetooth: hci3: HCI_REQ-0x0c1a [ 79.666194] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.668058] Bluetooth: hci4: HCI_REQ-0x0c1a [ 79.671927] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.687363] Bluetooth: hci6: HCI_REQ-0x0c1a [ 81.659741] Bluetooth: hci0: command 0x0409 tx timeout [ 81.659741] Bluetooth: hci7: command 0x0409 tx timeout [ 81.723137] Bluetooth: hci4: command 0x0409 tx timeout [ 81.723223] Bluetooth: hci2: command 0x0409 tx timeout [ 81.724844] Bluetooth: hci6: command 0x0409 tx timeout [ 81.725617] Bluetooth: hci3: command 0x0409 tx timeout [ 81.726396] Bluetooth: hci1: command 0x0409 tx timeout [ 81.727197] Bluetooth: hci5: command 0x0409 tx timeout [ 83.707265] Bluetooth: hci0: command 0x041b tx timeout [ 83.709727] Bluetooth: hci7: command 0x041b tx timeout [ 83.771229] Bluetooth: hci5: command 0x041b tx timeout [ 83.772146] Bluetooth: hci1: command 0x041b tx timeout [ 83.772927] Bluetooth: hci3: command 0x041b tx timeout [ 83.775831] Bluetooth: hci6: command 0x041b tx timeout [ 83.776804] Bluetooth: hci2: command 0x041b tx timeout [ 83.779547] Bluetooth: hci4: command 0x041b tx timeout [ 85.755148] Bluetooth: hci7: command 0x040f tx timeout [ 85.755660] Bluetooth: hci0: command 0x040f tx timeout [ 85.819199] Bluetooth: hci4: command 0x040f tx timeout [ 85.819738] Bluetooth: hci2: command 0x040f tx timeout [ 85.820229] Bluetooth: hci6: command 0x040f tx timeout [ 85.820652] Bluetooth: hci3: command 0x040f tx timeout [ 85.821414] Bluetooth: hci1: command 0x040f tx timeout [ 85.824129] Bluetooth: hci5: command 0x040f tx timeout [ 87.803207] Bluetooth: hci0: command 0x0419 tx timeout [ 87.803719] Bluetooth: hci7: command 0x0419 tx timeout [ 87.867158] Bluetooth: hci5: command 0x0419 tx timeout [ 87.867612] Bluetooth: hci1: command 0x0419 tx timeout [ 87.868004] Bluetooth: hci3: command 0x0419 tx timeout [ 87.868786] Bluetooth: hci6: command 0x0419 tx timeout [ 87.869203] Bluetooth: hci2: command 0x0419 tx timeout [ 87.871378] Bluetooth: hci4: command 0x0419 tx timeout 13:53:46 executing program 6: syz_io_uring_setup(0xafc, &(0x7f0000007640), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) get_mempolicy(&(0x7f00000078c0), &(0x7f0000007900), 0xe4, &(0x7f0000ffc000/0x4000)=nil, 0x2) 13:53:46 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="58fe", 0x2}], 0x1}, 0x810) 13:53:46 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 13:53:46 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x20}, 0x0) 13:53:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 13:53:46 executing program 6: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) unshare(0x0) 13:53:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 13:53:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) [ 134.788874] audit: type=1400 audit(1663163627.423:7): avc: denied { open } for pid=3947 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.790975] audit: type=1400 audit(1663163627.423:8): avc: denied { kernel } for pid=3947 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.797103] hrtimer: interrupt took 19907 ns [ 134.798705] ------------[ cut here ]------------ [ 134.798724] [ 134.798727] ====================================================== [ 134.798731] WARNING: possible circular locking dependency detected [ 134.798735] 6.0.0-rc5-next-20220914 #1 Not tainted [ 134.798742] ------------------------------------------------------ [ 134.798745] syz-executor.0/3951 is trying to acquire lock: [ 134.798752] ffffffff853fa878 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 134.798793] [ 134.798793] but task is already holding lock: [ 134.798796] ffff88800fe48420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.798824] [ 134.798824] which lock already depends on the new lock. [ 134.798824] [ 134.798828] [ 134.798828] the existing dependency chain (in reverse order) is: [ 134.798831] [ 134.798831] -> #3 (&ctx->lock){....}-{2:2}: [ 134.798845] _raw_spin_lock+0x2a/0x40 [ 134.798863] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.798876] __schedule+0xedd/0x2470 [ 134.798887] preempt_schedule_common+0x45/0xc0 [ 134.798899] __cond_resched+0x17/0x30 [ 134.798909] __mutex_lock+0xa3/0x14d0 [ 134.798920] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.798933] do_syscall_64+0x3b/0x90 [ 134.798947] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.798964] [ 134.798964] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.798978] _raw_spin_lock_nested+0x30/0x40 [ 134.798993] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.799007] task_fork_fair+0x63/0x4d0 [ 134.799023] sched_cgroup_fork+0x3d0/0x540 [ 134.799037] copy_process+0x4183/0x6e20 [ 134.799048] kernel_clone+0xe7/0x890 [ 134.799057] user_mode_thread+0xad/0xf0 [ 134.799068] rest_init+0x24/0x250 [ 134.799086] arch_call_rest_init+0xf/0x14 [ 134.799099] start_kernel+0x4c1/0x4e6 [ 134.799108] secondary_startup_64_no_verify+0xe0/0xeb [ 134.799123] [ 134.799123] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.799137] _raw_spin_lock_irqsave+0x39/0x60 [ 134.799152] try_to_wake_up+0xab/0x1920 [ 134.799171] up+0x75/0xb0 [ 134.799183] __up_console_sem+0x6e/0x80 [ 134.799199] console_unlock+0x46a/0x590 [ 134.799214] do_con_write+0xc05/0x1d50 [ 134.799226] con_write+0x21/0x40 [ 134.799235] n_tty_write+0x4d4/0xfe0 [ 134.799248] file_tty_write.constprop.0+0x49c/0x8f0 [ 134.799260] vfs_write+0x9c3/0xd90 [ 134.799278] ksys_write+0x127/0x250 [ 134.799294] do_syscall_64+0x3b/0x90 [ 134.799307] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.799323] [ 134.799323] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 134.799337] __lock_acquire+0x2a02/0x5e70 [ 134.799353] lock_acquire+0x1a2/0x530 [ 134.799369] _raw_spin_lock_irqsave+0x39/0x60 [ 134.799384] down_trylock+0xe/0x70 [ 134.799396] __down_trylock_console_sem+0x3b/0xd0 [ 134.799412] vprintk_emit+0x16b/0x560 [ 134.799428] vprintk+0x84/0xa0 [ 134.799443] _printk+0xba/0xf1 [ 134.799461] report_bug.cold+0x72/0xab [ 134.799473] handle_bug+0x3c/0x70 [ 134.799485] exc_invalid_op+0x14/0x50 [ 134.799498] asm_exc_invalid_op+0x16/0x20 [ 134.799514] group_sched_out.part.0+0x2c7/0x460 [ 134.799525] ctx_sched_out+0x8f1/0xc10 [ 134.799534] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.799547] __schedule+0xedd/0x2470 [ 134.799556] preempt_schedule_common+0x45/0xc0 [ 134.799567] __cond_resched+0x17/0x30 [ 134.799577] __mutex_lock+0xa3/0x14d0 [ 134.799588] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.799601] do_syscall_64+0x3b/0x90 [ 134.799614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.799630] [ 134.799630] other info that might help us debug this: [ 134.799630] [ 134.799633] Chain exists of: [ 134.799633] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.799633] [ 134.799648] Possible unsafe locking scenario: [ 134.799648] [ 134.799651] CPU0 CPU1 [ 134.799653] ---- ---- [ 134.799656] lock(&ctx->lock); [ 134.799661] lock(&rq->__lock); [ 134.799668] lock(&ctx->lock); [ 134.799674] lock((console_sem).lock); [ 134.799680] [ 134.799680] *** DEADLOCK *** [ 134.799680] [ 134.799682] 2 locks held by syz-executor.0/3951: [ 134.799689] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.799715] #1: ffff88800fe48420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.799743] [ 134.799743] stack backtrace: [ 134.799746] CPU: 0 PID: 3951 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220914 #1 [ 134.799759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.799768] Call Trace: [ 134.799771] [ 134.799775] dump_stack_lvl+0x8b/0xb3 [ 134.799790] check_noncircular+0x263/0x2e0 [ 134.799806] ? format_decode+0x26c/0xb50 [ 134.799821] ? print_circular_bug+0x450/0x450 [ 134.799838] ? enable_ptr_key_workfn+0x20/0x20 [ 134.799851] ? __lockdep_reset_lock+0x180/0x180 [ 134.799868] ? format_decode+0x26c/0xb50 [ 134.799883] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.799901] __lock_acquire+0x2a02/0x5e70 [ 134.799922] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.799944] lock_acquire+0x1a2/0x530 [ 134.799961] ? down_trylock+0xe/0x70 [ 134.799975] ? rcu_read_unlock+0x40/0x40 [ 134.799992] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.800012] ? vprintk+0x84/0xa0 [ 134.800030] _raw_spin_lock_irqsave+0x39/0x60 [ 134.800045] ? down_trylock+0xe/0x70 [ 134.800059] down_trylock+0xe/0x70 [ 134.800072] ? vprintk+0x84/0xa0 [ 134.800088] __down_trylock_console_sem+0x3b/0xd0 [ 134.800105] vprintk_emit+0x16b/0x560 [ 134.800122] ? lock_downgrade+0x6d0/0x6d0 [ 134.800140] vprintk+0x84/0xa0 [ 134.800157] _printk+0xba/0xf1 [ 134.800174] ? record_print_text.cold+0x16/0x16 [ 134.800194] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 134.800208] ? lock_downgrade+0x6d0/0x6d0 [ 134.800225] ? report_bug.cold+0x66/0xab [ 134.800239] ? group_sched_out.part.0+0x2c7/0x460 [ 134.800250] report_bug.cold+0x72/0xab [ 134.800265] handle_bug+0x3c/0x70 [ 134.800279] exc_invalid_op+0x14/0x50 [ 134.800293] asm_exc_invalid_op+0x16/0x20 [ 134.800310] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.800324] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.800336] RSP: 0018:ffff88801769f978 EFLAGS: 00010006 [ 134.800345] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.800352] RDX: ffff888015f61ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.800361] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.800368] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800fe48400 [ 134.800376] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.800387] ? group_sched_out.part.0+0x2c7/0x460 [ 134.800400] ? group_sched_out.part.0+0x2c7/0x460 [ 134.800412] ctx_sched_out+0x8f1/0xc10 [ 134.800425] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.800440] ? lock_is_held_type+0xd7/0x130 [ 134.800459] ? __perf_cgroup_move+0x160/0x160 [ 134.800470] ? set_next_entity+0x304/0x550 [ 134.800487] ? update_curr+0x267/0x740 [ 134.800505] ? lock_is_held_type+0xd7/0x130 [ 134.800523] __schedule+0xedd/0x2470 [ 134.800537] ? io_schedule_timeout+0x150/0x150 [ 134.800548] ? find_held_lock+0x2c/0x110 [ 134.800564] ? lock_is_held_type+0xd7/0x130 [ 134.800581] ? __cond_resched+0x17/0x30 [ 134.800593] preempt_schedule_common+0x45/0xc0 [ 134.800605] __cond_resched+0x17/0x30 [ 134.800616] __mutex_lock+0xa3/0x14d0 [ 134.800629] ? lock_is_held_type+0xd7/0x130 [ 134.800646] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.800660] ? mutex_lock_io_nested+0x1310/0x1310 [ 134.800673] ? lock_release+0x3b2/0x750 [ 134.800690] ? __up_read+0x192/0x730 [ 134.800704] ? up_write+0x480/0x480 [ 134.800721] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.800737] ? sock_ioctl+0x1be/0x670 [ 134.800756] ? perf_compat_ioctl+0x130/0x130 [ 134.800774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.800792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.800812] do_syscall_64+0x3b/0x90 [ 134.800827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.800848] RIP: 0033:0x7fdd23a57b19 [ 134.800859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.800872] RSP: 002b:00007fdd20fcd188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.800885] RAX: ffffffffffffffda RBX: 00007fdd23b6af60 RCX: 00007fdd23a57b19 [ 134.800894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 134.800903] RBP: 00007fdd23ab1f6d R08: 0000000000000000 R09: 0000000000000000 [ 134.800912] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.800921] R13: 00007ffcd588776f R14: 00007fdd20fcd300 R15: 0000000000022000 [ 134.800936] [ 134.921004] WARNING: CPU: 0 PID: 3951 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.922386] Modules linked in: [ 134.922866] CPU: 0 PID: 3951 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220914 #1 [ 134.924085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.925760] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.926575] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.929272] RSP: 0018:ffff88801769f978 EFLAGS: 00010006 [ 134.930070] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.931133] RDX: ffff888015f61ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.932229] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.933302] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800fe48400 [ 134.934377] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.935456] FS: 00007fdd20fcd700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 134.936661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.937536] CR2: 00007f16da3cb100 CR3: 000000004004a000 CR4: 0000000000350ef0 [ 134.938595] Call Trace: [ 134.938995] [ 134.939367] ctx_sched_out+0x8f1/0xc10 [ 134.939978] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.940773] ? lock_is_held_type+0xd7/0x130 [ 134.941457] ? __perf_cgroup_move+0x160/0x160 [ 134.942154] ? set_next_entity+0x304/0x550 [ 134.942828] ? update_curr+0x267/0x740 [ 134.943456] ? lock_is_held_type+0xd7/0x130 [ 134.944134] __schedule+0xedd/0x2470 [ 134.944722] ? io_schedule_timeout+0x150/0x150 [ 134.945431] ? find_held_lock+0x2c/0x110 [ 134.946081] ? lock_is_held_type+0xd7/0x130 [ 134.946766] ? __cond_resched+0x17/0x30 [ 134.947404] preempt_schedule_common+0x45/0xc0 [ 134.948118] __cond_resched+0x17/0x30 [ 134.948697] __mutex_lock+0xa3/0x14d0 [ 134.949295] ? lock_is_held_type+0xd7/0x130 [ 134.949967] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.950768] ? mutex_lock_io_nested+0x1310/0x1310 [ 134.951519] ? lock_release+0x3b2/0x750 [ 134.952152] ? __up_read+0x192/0x730 [ 134.952743] ? up_write+0x480/0x480 [ 134.953313] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.954082] ? sock_ioctl+0x1be/0x670 [ 134.954683] ? perf_compat_ioctl+0x130/0x130 [ 134.955407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.956214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.957031] do_syscall_64+0x3b/0x90 [ 134.957625] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.958430] RIP: 0033:0x7fdd23a57b19 [ 134.958992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.961741] RSP: 002b:00007fdd20fcd188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.962913] RAX: ffffffffffffffda RBX: 00007fdd23b6af60 RCX: 00007fdd23a57b19 [ 134.964019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 134.965082] RBP: 00007fdd23ab1f6d R08: 0000000000000000 R09: 0000000000000000 [ 134.966142] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.967214] R13: 00007ffcd588776f R14: 00007fdd20fcd300 R15: 0000000000022000 [ 134.968289] [ 134.968647] irq event stamp: 1132 [ 134.969161] hardirqs last enabled at (1131): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.970517] hardirqs last disabled at (1132): [] __schedule+0x1225/0x2470 [ 134.971606] softirqs last enabled at (1118): [] __irq_exit_rcu+0x11b/0x180 [ 134.972732] softirqs last disabled at (701): [] __irq_exit_rcu+0x11b/0x180 [ 134.973852] ---[ end trace 0000000000000000 ]--- 13:53:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x2b}) 13:53:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0x0) 13:53:48 executing program 6: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) unshare(0x0) 13:53:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 13:53:48 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 13:53:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r0) 13:53:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 6: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) unshare(0x0) 13:53:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 13:53:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 13:53:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 6: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) unshare(0x0) 13:53:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r0) 13:53:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 13:53:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x201, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x51440, 0x1, 0x1, 0x8, 0x6, 0x64, 0xef25, 0x0, 0xfffffffe, 0x0, 0x6073}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:53:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r0) 13:53:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:48 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 13:53:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:48 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 13:53:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 13:53:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:49 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 13:53:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000081c0)={0x7ff}) 13:53:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 13:53:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:53:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x610) 13:53:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) [ 136.615718] loop0: detected capacity change from 0 to 40 13:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 136.655004] syz-executor.0: attempt to access beyond end of device [ 136.655004] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 136.656327] Buffer I/O error on dev loop0, logical block 31, lost async page write 13:53:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 13:53:49 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:53:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 136.750931] audit: type=1400 audit(1663163629.384:9): avc: denied { module_load } for pid=4068 comm="syz-executor.7" path="/syz-executor.7" dev="sda" ino=15935 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 136.766801] loop0: detected capacity change from 0 to 40 13:53:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 136.798039] Invalid ELF header type: 3 != 1 13:53:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat(r0, 0x0, 0x101000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600) openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140) shmctl$IPC_RMID(r2, 0xb) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 13:53:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 136.828742] syz-executor.0: attempt to access beyond end of device [ 136.828742] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 136.829867] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 136.847818] loop5: detected capacity change from 0 to 40 [ 136.881373] syz-executor.5: attempt to access beyond end of device [ 136.881373] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 136.882601] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 136.893020] Invalid ELF header type: 3 != 1 13:53:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 136.953351] loop0: detected capacity change from 0 to 40 [ 136.981194] syz-executor.0: attempt to access beyond end of device [ 136.981194] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 136.982845] Buffer I/O error on dev loop0, logical block 31, lost async page write 13:53:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 137.049018] loop5: detected capacity change from 0 to 40 13:53:49 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:49 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:53:49 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 137.074348] Invalid ELF header type: 3 != 1 [ 137.088444] syz-executor.5: attempt to access beyond end of device [ 137.088444] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.089471] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 137.090859] loop1: detected capacity change from 0 to 40 13:53:49 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.121035] Invalid ELF header type: 3 != 1 [ 137.126985] loop0: detected capacity change from 0 to 40 13:53:49 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.145035] syz-executor.1: attempt to access beyond end of device [ 137.145035] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.145916] Buffer I/O error on dev loop1, logical block 31, lost async page write 13:53:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 137.165006] Invalid ELF header type: 3 != 1 [ 137.182542] syz-executor.0: attempt to access beyond end of device [ 137.182542] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.183961] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 137.189869] loop5: detected capacity change from 0 to 40 13:53:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 137.255405] Invalid ELF header type: 3 != 1 [ 137.272103] syz-executor.5: attempt to access beyond end of device [ 137.272103] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.273522] Buffer I/O error on dev loop5, logical block 31, lost async page write 13:53:49 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:49 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.369534] loop1: detected capacity change from 0 to 40 13:53:50 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.419385] syz-executor.1: attempt to access beyond end of device [ 137.419385] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.421503] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 137.454568] Invalid ELF header type: 3 != 1 13:53:50 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.513068] Invalid ELF header type: 3 != 1 [ 137.530176] Invalid ELF header type: 3 != 1 13:53:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:53:50 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.646937] loop1: detected capacity change from 0 to 40 13:53:50 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.686506] syz-executor.1: attempt to access beyond end of device [ 137.686506] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 137.687847] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 137.733885] Invalid ELF header type: 3 != 1 [ 137.742445] Invalid ELF header type: 3 != 1 13:53:50 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.802803] Invalid ELF header type: 3 != 1 [ 137.835346] Invalid ELF header type: 3 != 1 13:53:50 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 137.976475] Invalid ELF header type: 3 != 1 [ 138.003422] Invalid ELF header type: 3 != 1 13:53:50 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) [ 138.249382] Invalid ELF header type: 3 != 1 [ 138.252521] Invalid ELF header type: 3 != 1 [ 138.253539] Invalid ELF header type: 3 != 1 [ 138.311611] Invalid ELF header type: 3 != 1 [ 138.312196] Invalid ELF header type: 3 != 1 [ 138.327692] Invalid ELF header type: 3 != 1 13:53:50 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r3, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r4, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) 13:53:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f00000003c0)={@multicast1, @local}, 0xc) [ 138.440366] Invalid ELF header type: 3 != 1 [ 138.477368] audit: type=1400 audit(1663163631.110:10): avc: denied { write } for pid=4163 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:53:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 138.552342] Invalid ELF header type: 3 != 1 [ 138.664734] Invalid ELF header type: 3 != 1 13:53:51 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:51 executing program 7: membarrier(0x2, 0x0) 13:53:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r3, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r4, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) 13:53:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 13:53:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 13:53:51 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:51 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 139.091507] Invalid ELF header type: 3 != 1 13:53:51 executing program 7: membarrier(0x2, 0x0) [ 139.128353] Invalid ELF header type: 3 != 1 [ 139.156982] Invalid ELF header type: 3 != 1 13:53:51 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12002, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r3, 0x0, 0x0) 13:53:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 13:53:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 13:53:47 Registers: info registers vcpu 0 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88801769f3c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000077 R11=0000000000000001 R12=0000000000000077 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdd20fcd700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f16da3cb100 CR3=000000004004a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 c4b693a395d6c99b 06449bb1d4cfdc26 YMM02=0000000000000000 0000000000000000 2e06d2ac5fb9a999 00000000000ae988 YMM03=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM04=0000000000000000 0000000000000000 9f5c8f1639fa6718 0000000000135ee8 YMM05=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM06=0000000000000000 0000000000000000 8ca0b852b1c7c8e1 00000000000ae7b8 YMM07=0000000000000000 0000000000000000 15c32259ea588043 00000000000ae6a8 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffffffff0b75c95 RBX=ffffffff85bae4ac RCX=ffffffff816c5367 RDX=0000000000000000 RSI=ffffffff85ecb500 RDI=ffffffff85bae4a8 RBP=ffffffff85bae4a8 RSP=ffff888040adf360 R8 =ffffffff85ecb500 R9 =ffffffff85ecb3c6 R10=ffffed100815be92 R11=000000000003603d R12=ffffffff85bae4b4 R13=ffffffff85bae4a8 R14=ffffffff85bae4a8 R15=dffffc0000000000 RIP=ffffffff8111ac7f RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8c8700b1f0 CR3=000000003f238000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000