Warning: Permanently added '[localhost]:62785' (ECDSA) to the list of known hosts. 2022/09/15 11:09:42 fuzzer started 2022/09/15 11:09:42 dialing manager at localhost:36559 syzkaller login: [ 44.380270] cgroup: Unknown subsys name 'net' [ 44.483749] cgroup: Unknown subsys name 'rlimit' 2022/09/15 11:09:57 syscalls: 2215 2022/09/15 11:09:57 code coverage: enabled 2022/09/15 11:09:57 comparison tracing: enabled 2022/09/15 11:09:57 extra coverage: enabled 2022/09/15 11:09:57 setuid sandbox: enabled 2022/09/15 11:09:57 namespace sandbox: enabled 2022/09/15 11:09:57 Android sandbox: enabled 2022/09/15 11:09:57 fault injection: enabled 2022/09/15 11:09:57 leak checking: enabled 2022/09/15 11:09:57 net packet injection: enabled 2022/09/15 11:09:57 net device setup: enabled 2022/09/15 11:09:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 11:09:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 11:09:57 USB emulation: enabled 2022/09/15 11:09:57 hci packet injection: enabled 2022/09/15 11:09:57 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 11:09:57 802.15.4 emulation: enabled 2022/09/15 11:09:57 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 11:09:57 fetching corpus: 44, signal 28142/31148 (executing program) 2022/09/15 11:09:57 fetching corpus: 94, signal 43387/47111 (executing program) 2022/09/15 11:09:57 fetching corpus: 144, signal 52589/56850 (executing program) 2022/09/15 11:09:57 fetching corpus: 193, signal 63775/68208 (executing program) 2022/09/15 11:09:58 fetching corpus: 243, signal 72268/76744 (executing program) 2022/09/15 11:09:58 fetching corpus: 293, signal 78437/82902 (executing program) 2022/09/15 11:09:59 fetching corpus: 343, signal 83053/87555 (executing program) 2022/09/15 11:09:59 fetching corpus: 393, signal 86233/90921 (executing program) 2022/09/15 11:09:59 fetching corpus: 443, signal 91633/95897 (executing program) 2022/09/15 11:10:00 fetching corpus: 493, signal 94807/98857 (executing program) 2022/09/15 11:10:00 fetching corpus: 542, signal 96665/100758 (executing program) 2022/09/15 11:10:00 fetching corpus: 592, signal 100128/103761 (executing program) 2022/09/15 11:10:00 fetching corpus: 642, signal 102837/106074 (executing program) 2022/09/15 11:10:00 fetching corpus: 692, signal 104720/107691 (executing program) 2022/09/15 11:10:01 fetching corpus: 742, signal 107820/110094 (executing program) 2022/09/15 11:10:01 fetching corpus: 792, signal 110457/112209 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112363 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112461 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112575 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112677 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112776 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112898 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/112994 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113104 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113201 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113295 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113392 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113484 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113607 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113703 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113806 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113903 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/113997 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114092 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114201 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114294 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114394 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114497 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114593 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114695 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114797 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/114900 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115000 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115109 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115211 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115300 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115412 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115529 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115619 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115716 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115829 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/115926 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/116035 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/116109 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/116151 (executing program) 2022/09/15 11:10:01 fetching corpus: 794, signal 110527/116151 (executing program) 2022/09/15 11:10:04 starting 8 fuzzer processes 11:10:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x541b, &(0x7f0000000000)={0x0, 0x40100004}) 11:10:04 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:10:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:10:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:10:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:04 executing program 4: syz_mount_image$tmpfs(&(0x7f0000004800), &(0x7f0000004840)='./file0\x00', 0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b80)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000007ac0)) syz_mount_image$msdos(&(0x7f0000007b00), &(0x7f0000007b40)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000007c80)=[{&(0x7f0000007b80)="ba", 0x1}], 0x216001, &(0x7f0000007cc0)) 11:10:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:10:04 executing program 6: request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)=']\x00', 0xfffffffffffffffc) [ 65.457932] audit: type=1400 audit(1663240204.229:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 66.889592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.891087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.892503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.893882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.895565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.897462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.899253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.901460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.903161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.906574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.907657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.909077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.910528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.911564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.912773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.913950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.915416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.916848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.917957] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.919086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.920248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.921449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.922475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.923626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.946327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.948304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.950287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.951646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.952935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.954072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.956810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.958598] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.958677] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.961252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.961477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.962822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.963832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.964995] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.966738] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.968073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.969541] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.969640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.971524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.972289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.976642] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.979169] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.980253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.982105] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.982125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.988702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.991622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.992978] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.001689] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.006462] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.018847] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.021392] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.036716] Bluetooth: hci2: command 0x0409 tx timeout [ 69.036716] Bluetooth: hci3: command 0x0409 tx timeout [ 69.037274] Bluetooth: hci1: command 0x0409 tx timeout [ 69.037436] Bluetooth: hci0: command 0x0409 tx timeout [ 69.038754] Bluetooth: hci7: command 0x0409 tx timeout [ 69.039514] Bluetooth: hci5: command 0x0409 tx timeout [ 69.039878] Bluetooth: hci4: command 0x0409 tx timeout [ 69.040283] Bluetooth: hci6: command 0x0409 tx timeout [ 71.084112] Bluetooth: hci0: command 0x041b tx timeout [ 71.084294] Bluetooth: hci6: command 0x041b tx timeout [ 71.088718] Bluetooth: hci4: command 0x041b tx timeout [ 71.089665] Bluetooth: hci5: command 0x041b tx timeout [ 71.090106] Bluetooth: hci7: command 0x041b tx timeout [ 71.091295] Bluetooth: hci1: command 0x041b tx timeout [ 71.091984] Bluetooth: hci3: command 0x041b tx timeout [ 71.093413] Bluetooth: hci2: command 0x041b tx timeout [ 73.132091] Bluetooth: hci0: command 0x040f tx timeout [ 73.133983] Bluetooth: hci2: command 0x040f tx timeout [ 73.134488] Bluetooth: hci3: command 0x040f tx timeout [ 73.134924] Bluetooth: hci1: command 0x040f tx timeout [ 73.136187] Bluetooth: hci7: command 0x040f tx timeout [ 73.136622] Bluetooth: hci5: command 0x040f tx timeout [ 73.137473] Bluetooth: hci4: command 0x040f tx timeout [ 73.137902] Bluetooth: hci6: command 0x040f tx timeout [ 75.181171] Bluetooth: hci6: command 0x0419 tx timeout [ 75.181647] Bluetooth: hci4: command 0x0419 tx timeout [ 75.183418] Bluetooth: hci5: command 0x0419 tx timeout [ 75.183842] Bluetooth: hci7: command 0x0419 tx timeout [ 75.185431] Bluetooth: hci1: command 0x0419 tx timeout [ 75.185861] Bluetooth: hci3: command 0x0419 tx timeout [ 75.186977] Bluetooth: hci2: command 0x0419 tx timeout [ 75.187897] Bluetooth: hci0: command 0x0419 tx timeout 11:10:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000400)) timer_getoverrun(0x0) 11:10:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x30, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475"]}, 0x18}], 0x1}, 0x0) [ 119.684562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:10:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x30, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475"]}, 0x18}], 0x1}, 0x0) [ 119.835667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 120.212977] audit: type=1400 audit(1663240258.984:7): avc: denied { open } for pid=3802 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.215969] audit: type=1400 audit(1663240258.984:8): avc: denied { kernel } for pid=3802 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.238923] ------------[ cut here ]------------ [ 120.238956] [ 120.238962] ====================================================== [ 120.238969] WARNING: possible circular locking dependency detected [ 120.238976] 6.0.0-rc5-next-20220915 #1 Not tainted [ 120.238989] ------------------------------------------------------ [ 120.238995] syz-executor.7/3804 is trying to acquire lock: [ 120.239008] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.239079] [ 120.239079] but task is already holding lock: [ 120.239084] ffff88803c813020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.239138] [ 120.239138] which lock already depends on the new lock. [ 120.239138] [ 120.239144] [ 120.239144] the existing dependency chain (in reverse order) is: [ 120.239150] [ 120.239150] -> #3 (&ctx->lock){....}-{2:2}: [ 120.239178] _raw_spin_lock+0x2a/0x40 [ 120.239212] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.239237] __schedule+0xedd/0x2470 [ 120.239258] schedule+0xda/0x1b0 [ 120.239278] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.239319] syscall_exit_to_user_mode+0x19/0x40 [ 120.239356] do_syscall_64+0x48/0x90 [ 120.239384] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.239421] [ 120.239421] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.239449] _raw_spin_lock_nested+0x30/0x40 [ 120.239480] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.239515] task_fork_fair+0x63/0x4d0 [ 120.239549] sched_cgroup_fork+0x3d0/0x540 [ 120.239578] copy_process+0x4183/0x6e20 [ 120.239598] kernel_clone+0xe7/0x890 [ 120.239617] user_mode_thread+0xad/0xf0 [ 120.239638] rest_init+0x24/0x250 [ 120.239673] arch_call_rest_init+0xf/0x14 [ 120.239696] start_kernel+0x4c1/0x4e6 [ 120.239717] secondary_startup_64_no_verify+0xe0/0xeb [ 120.239744] [ 120.239744] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.239772] _raw_spin_lock_irqsave+0x39/0x60 [ 120.239804] try_to_wake_up+0xab/0x1920 [ 120.239831] up+0x75/0xb0 [ 120.239855] __up_console_sem+0x6e/0x80 [ 120.239887] console_unlock+0x46a/0x590 [ 120.239920] vt_ioctl+0x2822/0x2ca0 [ 120.239944] tty_ioctl+0x7c4/0x1700 [ 120.239967] __x64_sys_ioctl+0x19a/0x210 [ 120.239998] do_syscall_64+0x3b/0x90 [ 120.240026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.240062] [ 120.240062] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.240090] __lock_acquire+0x2a02/0x5e70 [ 120.240124] lock_acquire+0x1a2/0x530 [ 120.240157] _raw_spin_lock_irqsave+0x39/0x60 [ 120.240189] down_trylock+0xe/0x70 [ 120.240215] __down_trylock_console_sem+0x3b/0xd0 [ 120.240249] vprintk_emit+0x16b/0x560 [ 120.240283] vprintk+0x84/0xa0 [ 120.240317] _printk+0xba/0xf1 [ 120.240353] report_bug.cold+0x72/0xab [ 120.240380] handle_bug+0x3c/0x70 [ 120.240407] exc_invalid_op+0x14/0x50 [ 120.240436] asm_exc_invalid_op+0x16/0x20 [ 120.240471] group_sched_out.part.0+0x2c7/0x460 [ 120.240492] ctx_sched_out+0x8f1/0xc10 [ 120.240512] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.240537] __schedule+0xedd/0x2470 [ 120.240558] schedule+0xda/0x1b0 [ 120.240578] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.240618] syscall_exit_to_user_mode+0x19/0x40 [ 120.240654] do_syscall_64+0x48/0x90 [ 120.240682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.240718] [ 120.240718] other info that might help us debug this: [ 120.240718] [ 120.240724] Chain exists of: [ 120.240724] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.240724] [ 120.240754] Possible unsafe locking scenario: [ 120.240754] [ 120.240758] CPU0 CPU1 [ 120.240763] ---- ---- [ 120.240767] lock(&ctx->lock); [ 120.240778] lock(&rq->__lock); [ 120.240791] lock(&ctx->lock); [ 120.240804] lock((console_sem).lock); [ 120.240816] [ 120.240816] *** DEADLOCK *** [ 120.240816] [ 120.240820] 2 locks held by syz-executor.7/3804: [ 120.240834] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.240887] #1: ffff88803c813020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.240943] [ 120.240943] stack backtrace: [ 120.240948] CPU: 1 PID: 3804 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 120.240974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.240989] Call Trace: [ 120.240995] [ 120.241003] dump_stack_lvl+0x8b/0xb3 [ 120.241034] check_noncircular+0x263/0x2e0 [ 120.241068] ? format_decode+0x26c/0xb50 [ 120.241098] ? print_circular_bug+0x450/0x450 [ 120.241134] ? enable_ptr_key_workfn+0x20/0x20 [ 120.241166] ? format_decode+0x26c/0xb50 [ 120.241199] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.241236] __lock_acquire+0x2a02/0x5e70 [ 120.241281] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.241327] lock_acquire+0x1a2/0x530 [ 120.241363] ? down_trylock+0xe/0x70 [ 120.241393] ? rcu_read_unlock+0x40/0x40 [ 120.241436] ? vprintk+0x84/0xa0 [ 120.241474] _raw_spin_lock_irqsave+0x39/0x60 [ 120.241507] ? down_trylock+0xe/0x70 [ 120.241535] down_trylock+0xe/0x70 [ 120.241563] ? vprintk+0x84/0xa0 [ 120.241599] __down_trylock_console_sem+0x3b/0xd0 [ 120.241635] vprintk_emit+0x16b/0x560 [ 120.241675] vprintk+0x84/0xa0 [ 120.241712] _printk+0xba/0xf1 [ 120.241750] ? record_print_text.cold+0x16/0x16 [ 120.241797] ? report_bug.cold+0x66/0xab [ 120.241827] ? group_sched_out.part.0+0x2c7/0x460 [ 120.241851] report_bug.cold+0x72/0xab [ 120.241883] handle_bug+0x3c/0x70 [ 120.241912] exc_invalid_op+0x14/0x50 [ 120.241943] asm_exc_invalid_op+0x16/0x20 [ 120.241980] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.242007] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.242030] RSP: 0018:ffff88803e217c48 EFLAGS: 00010006 [ 120.242048] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.242063] RDX: ffff88803bfb9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 120.242079] RBP: ffff88803dbf0000 R08: 0000000000000005 R09: 0000000000000001 [ 120.242094] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88803c813000 [ 120.242110] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 120.242132] ? group_sched_out.part.0+0x2c7/0x460 [ 120.242159] ? group_sched_out.part.0+0x2c7/0x460 [ 120.242185] ctx_sched_out+0x8f1/0xc10 [ 120.242211] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.242242] ? lock_is_held_type+0xd7/0x130 [ 120.242282] ? __perf_cgroup_move+0x160/0x160 [ 120.242306] ? set_next_entity+0x304/0x550 [ 120.242343] ? update_curr+0x267/0x740 [ 120.242382] ? lock_is_held_type+0xd7/0x130 [ 120.242422] __schedule+0xedd/0x2470 [ 120.242450] ? io_schedule_timeout+0x150/0x150 [ 120.242477] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.242518] schedule+0xda/0x1b0 [ 120.242542] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.242585] syscall_exit_to_user_mode+0x19/0x40 [ 120.242624] do_syscall_64+0x48/0x90 [ 120.242654] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.242692] RIP: 0033:0x7f2cf2f89b19 [ 120.242708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.242731] RSP: 002b:00007f2cf04ff218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.242753] RAX: 0000000000000001 RBX: 00007f2cf309cf68 RCX: 00007f2cf2f89b19 [ 120.242768] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cf309cf6c [ 120.242783] RBP: 00007f2cf309cf60 R08: 000000000000000e R09: 0000000000000000 [ 120.242798] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2cf309cf6c [ 120.242813] R13: 00007fff6d9be28f R14: 00007f2cf04ff300 R15: 0000000000022000 [ 120.242839] [ 120.346010] WARNING: CPU: 1 PID: 3804 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.347251] Modules linked in: [ 120.347720] CPU: 1 PID: 3804 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 120.348823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.350286] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.351009] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.353471] RSP: 0018:ffff88803e217c48 EFLAGS: 00010006 [ 120.354209] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.355142] RDX: ffff88803bfb9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 120.356147] RBP: ffff88803dbf0000 R08: 0000000000000005 R09: 0000000000000001 [ 120.357166] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88803c813000 [ 120.358174] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 120.359135] FS: 00007f2cf04ff700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 120.360256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.361066] CR2: 0000564d07f87080 CR3: 00000000101d8000 CR4: 0000000000350ee0 [ 120.362051] Call Trace: [ 120.362409] [ 120.362718] ctx_sched_out+0x8f1/0xc10 [ 120.363261] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.364010] ? lock_is_held_type+0xd7/0x130 [ 120.364631] ? __perf_cgroup_move+0x160/0x160 [ 120.365269] ? set_next_entity+0x304/0x550 [ 120.365850] ? update_curr+0x267/0x740 [ 120.366404] ? lock_is_held_type+0xd7/0x130 [ 120.367020] __schedule+0xedd/0x2470 [ 120.367561] ? io_schedule_timeout+0x150/0x150 [ 120.368209] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.368873] schedule+0xda/0x1b0 [ 120.369354] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.370072] syscall_exit_to_user_mode+0x19/0x40 [ 120.370768] do_syscall_64+0x48/0x90 [ 120.371305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.372046] RIP: 0033:0x7f2cf2f89b19 [ 120.372563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.375024] RSP: 002b:00007f2cf04ff218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.376157] RAX: 0000000000000001 RBX: 00007f2cf309cf68 RCX: 00007f2cf2f89b19 [ 120.377152] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cf309cf6c [ 120.378075] RBP: 00007f2cf309cf60 R08: 000000000000000e R09: 0000000000000000 [ 120.379073] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2cf309cf6c [ 120.380094] R13: 00007fff6d9be28f R14: 00007f2cf04ff300 R15: 0000000000022000 [ 120.381097] [ 120.381427] irq event stamp: 814 [ 120.381877] hardirqs last enabled at (813): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.383256] hardirqs last disabled at (814): [] __schedule+0x1225/0x2470 [ 120.384498] softirqs last enabled at (544): [] __irq_exit_rcu+0x11b/0x180 [ 120.385689] softirqs last disabled at (535): [] __irq_exit_rcu+0x11b/0x180 [ 120.386811] ---[ end trace 0000000000000000 ]--- [ 120.829048] hrtimer: interrupt took 17894 ns [ 122.059508] device lo entered promiscuous mode [ 122.065349] device syz_tun entered promiscuous mode [ 122.066277] device syz_tun left promiscuous mode [ 122.067303] device lo left promiscuous mode [ 122.086293] device lo entered promiscuous mode [ 122.088093] device syz_tun entered promiscuous mode [ 122.089383] device syz_tun left promiscuous mode [ 122.090329] device lo left promiscuous mode [ 123.121607] tmpfs: Bad value for 'uid' [ 123.134355] tmpfs: Bad value for 'uid' 11:11:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x541b, &(0x7f0000000000)={0x0, 0x40100004}) 11:11:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x30, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475"]}, 0x18}], 0x1}, 0x0) 11:11:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:11:01 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:01 executing program 6: request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)=']\x00', 0xfffffffffffffffc) 11:11:01 executing program 4: syz_mount_image$tmpfs(&(0x7f0000004800), &(0x7f0000004840)='./file0\x00', 0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b80)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000007ac0)) syz_mount_image$msdos(&(0x7f0000007b00), &(0x7f0000007b40)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000007c80)=[{&(0x7f0000007b80)="ba", 0x1}], 0x216001, &(0x7f0000007cc0)) [ 123.165820] device lo entered promiscuous mode [ 123.171528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 123.176565] device syz_tun entered promiscuous mode [ 123.177304] device syz_tun left promiscuous mode [ 123.177736] device lo left promiscuous mode [ 123.187580] tmpfs: Bad value for 'uid' 11:11:01 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x30, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475"]}, 0x18}], 0x1}, 0x0) 11:11:01 executing program 6: request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)=']\x00', 0xfffffffffffffffc) 11:11:02 executing program 4: syz_mount_image$tmpfs(&(0x7f0000004800), &(0x7f0000004840)='./file0\x00', 0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b80)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000007ac0)) syz_mount_image$msdos(&(0x7f0000007b00), &(0x7f0000007b40)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000007c80)=[{&(0x7f0000007b80)="ba", 0x1}], 0x216001, &(0x7f0000007cc0)) [ 123.249898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 123.265835] tmpfs: Bad value for 'uid' 11:11:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x541b, &(0x7f0000000000)={0x0, 0x40100004}) [ 123.348192] tmpfs: Bad value for 'uid' 11:11:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:11:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 6: request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)=']\x00', 0xfffffffffffffffc) 11:11:02 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:02 executing program 4: syz_mount_image$tmpfs(&(0x7f0000004800), &(0x7f0000004840)='./file0\x00', 0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b80)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000007ac0)) syz_mount_image$msdos(&(0x7f0000007b00), &(0x7f0000007b40)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000007c80)=[{&(0x7f0000007b80)="ba", 0x1}], 0x216001, &(0x7f0000007cc0)) 11:11:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) [ 123.350427] device lo entered promiscuous mode [ 123.360621] device syz_tun entered promiscuous mode [ 123.361662] device syz_tun left promiscuous mode [ 123.362131] device lo left promiscuous mode 11:11:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:11:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x541b, &(0x7f0000000000)={0x0, 0x40100004}) 11:11:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) [ 123.429309] device lo entered promiscuous mode [ 123.430347] device syz_tun entered promiscuous mode [ 123.430967] device syz_tun left promiscuous mode [ 123.431438] device lo left promiscuous mode 11:11:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:11:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') [ 123.548514] device lo entered promiscuous mode [ 123.549671] device syz_tun entered promiscuous mode 11:11:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') [ 123.559911] device syz_tun left promiscuous mode [ 123.560399] device lo left promiscuous mode 11:11:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 11:11:02 executing program 5: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) [ 123.652430] device lo entered promiscuous mode [ 123.652879] device syz_tun entered promiscuous mode [ 123.656508] device syz_tun left promiscuous mode [ 123.656605] device lo left promiscuous mode 11:11:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) [ 123.759603] device lo entered promiscuous mode [ 123.763333] device syz_tun entered promiscuous mode [ 123.764762] device syz_tun left promiscuous mode [ 123.765348] device lo left promiscuous mode 11:11:02 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x82442, 0x0) 11:11:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}}}, 0x0) 11:11:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) 11:11:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 11:11:02 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x82442, 0x0) 11:11:02 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}}}, 0x0) 11:11:02 executing program 6: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000009c0)=""/99) 11:11:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 11:11:02 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}}}, 0x0) 11:11:02 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x82442, 0x0) 11:11:02 executing program 6: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000009c0)=""/99) 11:11:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 11:11:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}}}, 0x0) 11:11:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 11:11:02 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x82442, 0x0) 11:11:02 executing program 6: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000009c0)=""/99) 11:11:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x1ff8) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100", @ANYRES32=r2, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c00300041201122816fb2512eec64fc4bc609abaf1184211e3df549c056390d179f44615531a0cf2fd52033a4e4f17a4a062d172937166657779bda5e0a67a26c575bd6e8d6a6378f425c3c9db33efa5c4822882d3bbedd029e6fc31c0d4a56f2c91fa5800aa760101b82c2b7fc0cbdf794"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 11:11:02 executing program 3: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) [ 124.196835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.224258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x6, "8206c11ba072"}}) 11:11:03 executing program 6: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000009c0)=""/99) 11:11:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'vcan0\x00', &(0x7f0000001440)=@ethtool_ts_info}) [ 124.274765] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:11:03 executing program 5: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000580001"], 0x28}], 0x1}, 0x0) 11:11:03 executing program 3: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 4: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x6, "8206c11ba072"}}) [ 124.299778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.316372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:11:03 executing program 5: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000580001"], 0x28}], 0x1}, 0x0) 11:11:03 executing program 6: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 0: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x6, "8206c11ba072"}}) 11:11:03 executing program 4: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 3: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'vcan0\x00', &(0x7f0000001440)=@ethtool_ts_info}) 11:11:03 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) [ 124.429161] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 124.429537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.433348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 11:11:03 executing program 5: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000580001"], 0x28}], 0x1}, 0x0) 11:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x6, "8206c11ba072"}}) [ 124.496141] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:11:03 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 3: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 5: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000580001"], 0x28}], 0x1}, 0x0) 11:11:03 executing program 4: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 6: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) [ 124.554869] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:11:03 executing program 0: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 1: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) [ 124.738367] ======================================================= [ 124.738367] WARNING: The mand mount option has been deprecated and [ 124.738367] and is ignored by this kernel. Remove the mand [ 124.738367] option from the mount to silence this warning. [ 124.738367] ======================================================= [ 124.756540] __nla_validate_parse: 9 callbacks suppressed [ 124.756549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 124.760797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.761707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:11:03 executing program 1: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:03 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 6: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 0: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'vcan0\x00', &(0x7f0000001440)=@ethtool_ts_info}) 11:11:03 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) [ 124.779586] loop4: detected capacity change from 0 to 256 11:11:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) [ 124.796324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.803525] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:03 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 11:11:03 executing program 1: io_setup(0x9, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000680)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001300310626e75587d3e8b4932001ff030000000000002000000000017f00000100000000000000000000000000000000000000000a0000720000000089472b8c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000009c09268000000000000000000000000000000c0008000826"], 0xc4}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) io_setup(0x8, &(0x7f0000000800)) io_setup(0xfff, &(0x7f0000000f00)) 11:11:03 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 11:11:03 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) [ 124.932697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:11:03 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.177725] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:03 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'vcan0\x00', &(0x7f0000001440)=@ethtool_ts_info}) 11:11:03 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11:11:03 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 11:11:03 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:03 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.313018] loop3: detected capacity change from 0 to 256 11:11:04 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 125.332077] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.368836] loop4: detected capacity change from 0 to 256 [ 125.376580] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.467948] loop5: detected capacity change from 0 to 256 [ 125.473849] loop2: detected capacity change from 0 to 256 11:11:04 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.526234] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.533396] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.548965] loop4: detected capacity change from 0 to 256 [ 125.593677] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.641980] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.743961] syz-executor.5 (4228) used greatest stack depth: 24728 bytes left [ 125.756211] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.804821] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.885367] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:04 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 0: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:04 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 125.949597] loop6: detected capacity change from 0 to 256 [ 125.950945] loop0: detected capacity change from 0 to 256 [ 125.959012] loop5: detected capacity change from 0 to 256 [ 125.960663] loop3: detected capacity change from 0 to 256 [ 125.961627] loop4: detected capacity change from 0 to 256 [ 125.964577] loop2: detected capacity change from 0 to 256 [ 125.970518] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.971272] loop7: detected capacity change from 0 to 256 [ 125.976114] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.986810] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.995952] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 125.999595] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.000613] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.004002] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:05 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x3f, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11:11:05 executing program 0: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 126.374945] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.378351] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.392807] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:05 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 126.405791] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.418101] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.427941] loop0: detected capacity change from 0 to 256 [ 126.433809] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.437349] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.443825] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.444734] loop6: detected capacity change from 0 to 256 [ 126.483316] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.587984] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.630907] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:11:05 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'osx.', 'vfat\x00'}) write(r1, &(0x7f0000000080)="01", 0xffff8000) 11:11:05 executing program 2: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x VM DIAGNOSIS: 11:10:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff11007c01f07 RCX=ffffffff812a3fcf RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff85b02f50 RBP=0000000000000001 RSP=ffff88803e00f828 R8 =0000000000000000 R9 =ffffffff85b02f57 R10=fffffbfff0b605ea R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff854ced98 R15=0000000000000000 RIP=ffffffff812a3fdc RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbaf3aaa540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbaf3b7b710 CR3=00000000180d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000ff00000000 00000000000000ff YMM01=0000000000000000 0000000000000000 ffffff0000ff00ff ffffffffffffff00 YMM02=0000000000000000 0000000000000000 494c4700362e322e 325f4342494c4700 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000004700 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803e217698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006c R11=0000000000000001 R12=000000000000006c R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2cf04ff700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564d07f87080 CR3=00000000101d8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f2cf30707c0 00007f2cf30707c8 YMM02=0000000000000000 0000000000000000 00007f2cf30707e0 00007f2cf30707c0 YMM03=0000000000000000 0000000000000000 00007f2cf30707c8 00007f2cf30707c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000