syzkaller login: [ 41.943338] sshd (244) used greatest stack depth: 24536 bytes left Warning: Permanently added '[localhost]:25230' (ECDSA) to the list of known hosts. 2022/09/15 13:11:17 fuzzer started 2022/09/15 13:11:18 dialing manager at localhost:36559 [ 44.092131] cgroup: Unknown subsys name 'net' [ 44.230545] cgroup: Unknown subsys name 'rlimit' 2022/09/15 13:11:33 syscalls: 2215 2022/09/15 13:11:33 code coverage: enabled 2022/09/15 13:11:33 comparison tracing: enabled 2022/09/15 13:11:33 extra coverage: enabled 2022/09/15 13:11:33 setuid sandbox: enabled 2022/09/15 13:11:33 namespace sandbox: enabled 2022/09/15 13:11:33 Android sandbox: enabled 2022/09/15 13:11:33 fault injection: enabled 2022/09/15 13:11:33 leak checking: enabled 2022/09/15 13:11:33 net packet injection: enabled 2022/09/15 13:11:33 net device setup: enabled 2022/09/15 13:11:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 13:11:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 13:11:33 USB emulation: enabled 2022/09/15 13:11:33 hci packet injection: enabled 2022/09/15 13:11:33 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 13:11:33 802.15.4 emulation: enabled 2022/09/15 13:11:33 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 13:11:33 fetching corpus: 50, signal 33886/37287 (executing program) 2022/09/15 13:11:33 fetching corpus: 100, signal 48122/52829 (executing program) 2022/09/15 13:11:33 fetching corpus: 150, signal 57565/63513 (executing program) 2022/09/15 13:11:34 fetching corpus: 200, signal 63877/71036 (executing program) 2022/09/15 13:11:34 fetching corpus: 250, signal 70521/78768 (executing program) 2022/09/15 13:11:34 fetching corpus: 300, signal 74723/84090 (executing program) 2022/09/15 13:11:34 fetching corpus: 350, signal 79752/90162 (executing program) 2022/09/15 13:11:34 fetching corpus: 400, signal 85782/97008 (executing program) 2022/09/15 13:11:34 fetching corpus: 450, signal 88414/100601 (executing program) 2022/09/15 13:11:34 fetching corpus: 500, signal 93811/106713 (executing program) 2022/09/15 13:11:35 fetching corpus: 550, signal 96426/110209 (executing program) 2022/09/15 13:11:35 fetching corpus: 600, signal 99897/114460 (executing program) 2022/09/15 13:11:35 fetching corpus: 650, signal 102667/118014 (executing program) 2022/09/15 13:11:35 fetching corpus: 700, signal 105005/121163 (executing program) 2022/09/15 13:11:35 fetching corpus: 750, signal 106982/123954 (executing program) 2022/09/15 13:11:35 fetching corpus: 800, signal 109048/126767 (executing program) 2022/09/15 13:11:35 fetching corpus: 850, signal 111353/129754 (executing program) 2022/09/15 13:11:36 fetching corpus: 900, signal 114071/133075 (executing program) 2022/09/15 13:11:36 fetching corpus: 950, signal 116757/136323 (executing program) 2022/09/15 13:11:36 fetching corpus: 1000, signal 119523/139616 (executing program) 2022/09/15 13:11:36 fetching corpus: 1050, signal 123234/143608 (executing program) 2022/09/15 13:11:36 fetching corpus: 1100, signal 124323/145369 (executing program) 2022/09/15 13:11:36 fetching corpus: 1150, signal 126036/147617 (executing program) 2022/09/15 13:11:36 fetching corpus: 1200, signal 127761/149936 (executing program) 2022/09/15 13:11:36 fetching corpus: 1250, signal 130357/152851 (executing program) 2022/09/15 13:11:37 fetching corpus: 1300, signal 132456/155335 (executing program) 2022/09/15 13:11:37 fetching corpus: 1350, signal 134992/158091 (executing program) 2022/09/15 13:11:37 fetching corpus: 1400, signal 137410/160712 (executing program) 2022/09/15 13:11:37 fetching corpus: 1450, signal 139580/163103 (executing program) 2022/09/15 13:11:37 fetching corpus: 1500, signal 141852/165590 (executing program) 2022/09/15 13:11:37 fetching corpus: 1550, signal 143257/167366 (executing program) 2022/09/15 13:11:37 fetching corpus: 1600, signal 144477/168993 (executing program) 2022/09/15 13:11:38 fetching corpus: 1650, signal 146779/171450 (executing program) 2022/09/15 13:11:38 fetching corpus: 1700, signal 148139/173104 (executing program) 2022/09/15 13:11:38 fetching corpus: 1750, signal 149463/174704 (executing program) 2022/09/15 13:11:38 fetching corpus: 1800, signal 150394/176025 (executing program) 2022/09/15 13:11:38 fetching corpus: 1850, signal 151370/177364 (executing program) 2022/09/15 13:11:38 fetching corpus: 1900, signal 152436/178725 (executing program) 2022/09/15 13:11:38 fetching corpus: 1950, signal 154272/180602 (executing program) 2022/09/15 13:11:39 fetching corpus: 2000, signal 155964/182360 (executing program) 2022/09/15 13:11:39 fetching corpus: 2050, signal 157191/183819 (executing program) 2022/09/15 13:11:39 fetching corpus: 2100, signal 158619/185399 (executing program) 2022/09/15 13:11:39 fetching corpus: 2150, signal 159560/186587 (executing program) 2022/09/15 13:11:39 fetching corpus: 2200, signal 161569/188585 (executing program) 2022/09/15 13:11:39 fetching corpus: 2250, signal 162682/189808 (executing program) 2022/09/15 13:11:39 fetching corpus: 2300, signal 164358/191374 (executing program) 2022/09/15 13:11:39 fetching corpus: 2350, signal 165627/192682 (executing program) 2022/09/15 13:11:40 fetching corpus: 2400, signal 166560/193773 (executing program) 2022/09/15 13:11:40 fetching corpus: 2450, signal 167689/194903 (executing program) 2022/09/15 13:11:40 fetching corpus: 2500, signal 169168/196466 (executing program) 2022/09/15 13:11:40 fetching corpus: 2550, signal 170204/197557 (executing program) 2022/09/15 13:11:40 fetching corpus: 2600, signal 171227/198629 (executing program) 2022/09/15 13:11:40 fetching corpus: 2650, signal 172491/199840 (executing program) 2022/09/15 13:11:40 fetching corpus: 2700, signal 173989/201068 (executing program) 2022/09/15 13:11:40 fetching corpus: 2750, signal 174798/201936 (executing program) 2022/09/15 13:11:41 fetching corpus: 2800, signal 175712/202837 (executing program) 2022/09/15 13:11:41 fetching corpus: 2850, signal 176959/203973 (executing program) 2022/09/15 13:11:41 fetching corpus: 2900, signal 178297/205081 (executing program) 2022/09/15 13:11:41 fetching corpus: 2950, signal 178921/205847 (executing program) 2022/09/15 13:11:41 fetching corpus: 3000, signal 180017/206768 (executing program) 2022/09/15 13:11:41 fetching corpus: 3050, signal 181113/207658 (executing program) 2022/09/15 13:11:41 fetching corpus: 3100, signal 181890/208447 (executing program) 2022/09/15 13:11:42 fetching corpus: 3150, signal 183189/209443 (executing program) 2022/09/15 13:11:42 fetching corpus: 3200, signal 184174/210290 (executing program) 2022/09/15 13:11:42 fetching corpus: 3250, signal 186090/211472 (executing program) 2022/09/15 13:11:42 fetching corpus: 3300, signal 187018/212263 (executing program) 2022/09/15 13:11:42 fetching corpus: 3350, signal 187708/212899 (executing program) 2022/09/15 13:11:42 fetching corpus: 3400, signal 188656/213631 (executing program) 2022/09/15 13:11:42 fetching corpus: 3450, signal 189518/214292 (executing program) 2022/09/15 13:11:43 fetching corpus: 3500, signal 190169/214896 (executing program) 2022/09/15 13:11:43 fetching corpus: 3550, signal 191047/215529 (executing program) 2022/09/15 13:11:43 fetching corpus: 3600, signal 192012/216212 (executing program) 2022/09/15 13:11:43 fetching corpus: 3650, signal 192696/216804 (executing program) 2022/09/15 13:11:43 fetching corpus: 3700, signal 193573/217428 (executing program) 2022/09/15 13:11:43 fetching corpus: 3750, signal 194320/218003 (executing program) 2022/09/15 13:11:43 fetching corpus: 3800, signal 194999/218565 (executing program) 2022/09/15 13:11:43 fetching corpus: 3850, signal 195981/219168 (executing program) 2022/09/15 13:11:44 fetching corpus: 3900, signal 196886/219723 (executing program) 2022/09/15 13:11:44 fetching corpus: 3950, signal 197822/220260 (executing program) 2022/09/15 13:11:44 fetching corpus: 4000, signal 198584/220730 (executing program) 2022/09/15 13:11:44 fetching corpus: 4050, signal 199363/221218 (executing program) 2022/09/15 13:11:44 fetching corpus: 4100, signal 200180/221763 (executing program) 2022/09/15 13:11:44 fetching corpus: 4150, signal 200826/222168 (executing program) 2022/09/15 13:11:45 fetching corpus: 4200, signal 201522/222621 (executing program) 2022/09/15 13:11:45 fetching corpus: 4250, signal 202086/222989 (executing program) 2022/09/15 13:11:45 fetching corpus: 4300, signal 202825/223386 (executing program) 2022/09/15 13:11:45 fetching corpus: 4350, signal 203501/223733 (executing program) 2022/09/15 13:11:45 fetching corpus: 4400, signal 203969/224072 (executing program) 2022/09/15 13:11:45 fetching corpus: 4450, signal 204715/224424 (executing program) 2022/09/15 13:11:45 fetching corpus: 4500, signal 205717/224840 (executing program) 2022/09/15 13:11:45 fetching corpus: 4550, signal 206406/225192 (executing program) 2022/09/15 13:11:46 fetching corpus: 4600, signal 207365/225552 (executing program) 2022/09/15 13:11:46 fetching corpus: 4650, signal 208274/225940 (executing program) 2022/09/15 13:11:46 fetching corpus: 4700, signal 209522/226309 (executing program) 2022/09/15 13:11:46 fetching corpus: 4750, signal 210372/226620 (executing program) 2022/09/15 13:11:46 fetching corpus: 4800, signal 210896/226833 (executing program) 2022/09/15 13:11:46 fetching corpus: 4850, signal 212036/227195 (executing program) 2022/09/15 13:11:47 fetching corpus: 4900, signal 212506/227436 (executing program) 2022/09/15 13:11:47 fetching corpus: 4950, signal 213010/227631 (executing program) 2022/09/15 13:11:47 fetching corpus: 5000, signal 213633/227877 (executing program) 2022/09/15 13:11:47 fetching corpus: 5050, signal 214418/228082 (executing program) 2022/09/15 13:11:47 fetching corpus: 5100, signal 214880/228269 (executing program) 2022/09/15 13:11:47 fetching corpus: 5150, signal 215260/228438 (executing program) 2022/09/15 13:11:47 fetching corpus: 5200, signal 215646/228614 (executing program) 2022/09/15 13:11:48 fetching corpus: 5250, signal 216338/228801 (executing program) 2022/09/15 13:11:48 fetching corpus: 5300, signal 216939/228969 (executing program) 2022/09/15 13:11:48 fetching corpus: 5350, signal 217611/229144 (executing program) 2022/09/15 13:11:48 fetching corpus: 5400, signal 218228/229272 (executing program) 2022/09/15 13:11:48 fetching corpus: 5450, signal 219037/229390 (executing program) 2022/09/15 13:11:48 fetching corpus: 5500, signal 219598/229405 (executing program) 2022/09/15 13:11:48 fetching corpus: 5550, signal 220174/229411 (executing program) 2022/09/15 13:11:49 fetching corpus: 5600, signal 220933/229429 (executing program) 2022/09/15 13:11:49 fetching corpus: 5650, signal 221594/229437 (executing program) 2022/09/15 13:11:49 fetching corpus: 5700, signal 222248/229447 (executing program) 2022/09/15 13:11:49 fetching corpus: 5716, signal 222515/229447 (executing program) 2022/09/15 13:11:49 fetching corpus: 5716, signal 222515/229447 (executing program) 2022/09/15 13:11:51 starting 8 fuzzer processes 13:11:51 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) 13:11:51 executing program 5: socket$inet6(0xa, 0x0, 0x0) 13:11:51 executing program 1: init_module(0x0, 0x0, 0x0) 13:11:51 executing program 7: keyctl$assume_authority(0x10, 0x0) r0 = add_key$user(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)="ba", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000016c0)="95", 0x1) keyctl$setperm(0x5, 0x0, 0x0) 13:11:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 13:11:51 executing program 3: set_mempolicy(0x1, &(0x7f0000000340)=0x8, 0x9) [ 77.312499] audit: type=1400 audit(1663247511.806:6): avc: denied { execmem } for pid=289 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:11:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:11:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) [ 78.513370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.515157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.517083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.518421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.521393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.523388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.526020] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.527673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.529143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.534909] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.543382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.580368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.584225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.591094] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.598716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.624404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.626750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.633496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.635924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.637878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.639549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.641474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.642666] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.643957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.645567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.646824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.648362] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.649652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.652077] Bluetooth: hci6: HCI_REQ-0x0c1a [ 78.661236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.662458] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.665814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.667426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.669271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.669527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.672419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.673945] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.676301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.677506] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.679301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.680810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.683514] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.685608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.686810] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.688338] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.690715] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.713300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.729780] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.734564] Bluetooth: hci4: HCI_REQ-0x0c1a [ 80.592051] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 80.632015] Bluetooth: hci1: command 0x0409 tx timeout [ 80.683480] Bluetooth: hci0: command 0x0409 tx timeout [ 80.720121] Bluetooth: hci7: command 0x0409 tx timeout [ 80.720268] Bluetooth: hci5: command 0x0409 tx timeout [ 80.720701] Bluetooth: hci6: command 0x0409 tx timeout [ 80.784948] Bluetooth: hci4: command 0x0409 tx timeout [ 80.786133] Bluetooth: hci2: command 0x0409 tx timeout [ 82.640033] Bluetooth: hci1: command 0x041b tx timeout [ 82.705097] Bluetooth: hci0: command 0x041b tx timeout [ 82.769110] Bluetooth: hci6: command 0x041b tx timeout [ 82.769671] Bluetooth: hci5: command 0x041b tx timeout [ 82.771220] Bluetooth: hci7: command 0x041b tx timeout [ 82.833028] Bluetooth: hci2: command 0x041b tx timeout [ 82.833498] Bluetooth: hci4: command 0x041b tx timeout [ 83.858944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.860541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.862336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.869422] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.112539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.115119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.148525] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.689030] Bluetooth: hci1: command 0x040f tx timeout [ 84.753042] Bluetooth: hci0: command 0x040f tx timeout [ 84.816045] Bluetooth: hci7: command 0x040f tx timeout [ 84.816539] Bluetooth: hci5: command 0x040f tx timeout [ 84.816966] Bluetooth: hci6: command 0x040f tx timeout [ 84.881044] Bluetooth: hci4: command 0x040f tx timeout [ 84.881546] Bluetooth: hci2: command 0x040f tx timeout [ 86.225031] Bluetooth: hci3: command 0x0409 tx timeout [ 86.736059] Bluetooth: hci1: command 0x0419 tx timeout [ 86.800061] Bluetooth: hci0: command 0x0419 tx timeout [ 86.864225] Bluetooth: hci6: command 0x0419 tx timeout [ 86.865105] Bluetooth: hci5: command 0x0419 tx timeout [ 86.865892] Bluetooth: hci7: command 0x0419 tx timeout [ 86.928765] Bluetooth: hci2: command 0x0419 tx timeout [ 86.929672] Bluetooth: hci4: command 0x0419 tx timeout [ 88.272059] Bluetooth: hci3: command 0x041b tx timeout [ 90.320133] Bluetooth: hci3: command 0x040f tx timeout [ 92.368029] Bluetooth: hci3: command 0x0419 tx timeout 13:12:47 executing program 3: syz_mount_image$nfs4(&(0x7f0000000440), &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000840)=[{&(0x7f00000004c0)="e4", 0x1}, {&(0x7f00000005c0)='=', 0x1}], 0x0, &(0x7f00000008c0)={[{'{#!\'/*'}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) 13:12:47 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) 13:12:48 executing program 3: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000000600)) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x77359400}}, &(0x7f00000006c0)) [ 135.421285] audit: type=1400 audit(1663247569.918:7): avc: denied { open } for pid=3902 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.422846] audit: type=1400 audit(1663247569.918:8): avc: denied { kernel } for pid=3902 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.434001] ------------[ cut here ]------------ [ 135.434023] [ 135.434026] ====================================================== [ 135.434029] WARNING: possible circular locking dependency detected [ 135.434033] 6.0.0-rc5-next-20220915 #1 Not tainted [ 135.434040] ------------------------------------------------------ [ 135.434043] syz-executor.4/3903 is trying to acquire lock: [ 135.434049] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.434086] [ 135.434086] but task is already holding lock: [ 135.434088] ffff88800f149c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.434116] [ 135.434116] which lock already depends on the new lock. [ 135.434116] [ 135.434119] [ 135.434119] the existing dependency chain (in reverse order) is: [ 135.434122] [ 135.434122] -> #3 (&ctx->lock){....}-{2:2}: [ 135.434136] _raw_spin_lock+0x2a/0x40 [ 135.434153] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.434165] __schedule+0xedd/0x2470 [ 135.434175] schedule+0xda/0x1b0 [ 135.434185] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.434206] syscall_exit_to_user_mode+0x19/0x40 [ 135.434224] do_syscall_64+0x48/0x90 [ 135.434238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.434256] [ 135.434256] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.434270] _raw_spin_lock_nested+0x30/0x40 [ 135.434285] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.434298] task_fork_fair+0x63/0x4d0 [ 135.434315] sched_cgroup_fork+0x3d0/0x540 [ 135.434329] copy_process+0x4183/0x6e20 [ 135.434339] kernel_clone+0xe7/0x890 [ 135.434348] user_mode_thread+0xad/0xf0 [ 135.434358] rest_init+0x24/0x250 [ 135.434375] arch_call_rest_init+0xf/0x14 [ 135.434388] start_kernel+0x4c1/0x4e6 [ 135.434398] secondary_startup_64_no_verify+0xe0/0xeb [ 135.434412] [ 135.434412] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.434426] _raw_spin_lock_irqsave+0x39/0x60 [ 135.434441] try_to_wake_up+0xab/0x1920 [ 135.434454] up+0x75/0xb0 [ 135.434472] __up_console_sem+0x6e/0x80 [ 135.434488] console_unlock+0x46a/0x590 [ 135.434504] release_tty+0xce/0x890 [ 135.434516] tty_release_struct+0xb4/0xe0 [ 135.434528] tty_release+0xbfd/0xe90 [ 135.434539] __fput+0x263/0xa40 [ 135.434548] task_work_run+0x170/0x280 [ 135.434561] exit_to_user_mode_prepare+0x199/0x1a0 [ 135.434580] syscall_exit_to_user_mode+0x19/0x40 [ 135.434598] do_syscall_64+0x48/0x90 [ 135.434611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.434629] [ 135.434629] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.434642] __lock_acquire+0x2a02/0x5e70 [ 135.434659] lock_acquire+0x1a2/0x530 [ 135.434675] _raw_spin_lock_irqsave+0x39/0x60 [ 135.434690] down_trylock+0xe/0x70 [ 135.434703] __down_trylock_console_sem+0x3b/0xd0 [ 135.434719] vprintk_emit+0x16b/0x560 [ 135.434736] vprintk+0x84/0xa0 [ 135.434752] _printk+0xba/0xf1 [ 135.434771] report_bug.cold+0x72/0xab [ 135.434784] handle_bug+0x3c/0x70 [ 135.434797] exc_invalid_op+0x14/0x50 [ 135.434811] asm_exc_invalid_op+0x16/0x20 [ 135.434828] group_sched_out.part.0+0x2c7/0x460 [ 135.434838] ctx_sched_out+0x8f1/0xc10 [ 135.434848] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.434860] __schedule+0xedd/0x2470 [ 135.434870] schedule+0xda/0x1b0 [ 135.434880] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.434899] syscall_exit_to_user_mode+0x19/0x40 [ 135.434917] do_syscall_64+0x48/0x90 [ 135.434931] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.434948] [ 135.434948] other info that might help us debug this: [ 135.434948] [ 135.434951] Chain exists of: [ 135.434951] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.434951] [ 135.434965] Possible unsafe locking scenario: [ 135.434965] [ 135.434968] CPU0 CPU1 [ 135.434970] ---- ---- [ 135.434972] lock(&ctx->lock); [ 135.434978] lock(&rq->__lock); [ 135.434984] lock(&ctx->lock); [ 135.434990] lock((console_sem).lock); [ 135.434996] [ 135.434996] *** DEADLOCK *** [ 135.434996] [ 135.434998] 2 locks held by syz-executor.4/3903: [ 135.435005] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.435030] #1: ffff88800f149c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.435058] [ 135.435058] stack backtrace: [ 135.435061] CPU: 0 PID: 3903 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220915 #1 [ 135.435073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.435081] Call Trace: [ 135.435085] [ 135.435089] dump_stack_lvl+0x8b/0xb3 [ 135.435104] check_noncircular+0x263/0x2e0 [ 135.435121] ? format_decode+0x26c/0xb50 [ 135.435137] ? print_circular_bug+0x450/0x450 [ 135.435154] ? enable_ptr_key_workfn+0x20/0x20 [ 135.435170] ? format_decode+0x26c/0xb50 [ 135.435186] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 135.435203] __lock_acquire+0x2a02/0x5e70 [ 135.435226] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.435248] lock_acquire+0x1a2/0x530 [ 135.435266] ? down_trylock+0xe/0x70 [ 135.435280] ? rcu_read_unlock+0x40/0x40 [ 135.435301] ? vprintk+0x84/0xa0 [ 135.435320] _raw_spin_lock_irqsave+0x39/0x60 [ 135.435336] ? down_trylock+0xe/0x70 [ 135.435350] down_trylock+0xe/0x70 [ 135.435363] ? vprintk+0x84/0xa0 [ 135.435381] __down_trylock_console_sem+0x3b/0xd0 [ 135.435398] vprintk_emit+0x16b/0x560 [ 135.435418] vprintk+0x84/0xa0 [ 135.435436] _printk+0xba/0xf1 [ 135.435454] ? record_print_text.cold+0x16/0x16 [ 135.435477] ? report_bug.cold+0x66/0xab [ 135.435492] ? group_sched_out.part.0+0x2c7/0x460 [ 135.435503] report_bug.cold+0x72/0xab [ 135.435519] handle_bug+0x3c/0x70 [ 135.435533] exc_invalid_op+0x14/0x50 [ 135.435548] asm_exc_invalid_op+0x16/0x20 [ 135.435566] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.435579] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.435591] RSP: 0018:ffff888041dc7c48 EFLAGS: 00010006 [ 135.435600] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.435607] RDX: ffff88801d6b9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 135.435615] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 135.435622] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f149c00 [ 135.435630] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 135.435641] ? group_sched_out.part.0+0x2c7/0x460 [ 135.435654] ? group_sched_out.part.0+0x2c7/0x460 [ 135.435667] ctx_sched_out+0x8f1/0xc10 [ 135.435679] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.435695] ? lock_is_held_type+0xd7/0x130 [ 135.435714] ? __perf_cgroup_move+0x160/0x160 [ 135.435726] ? set_next_entity+0x304/0x550 [ 135.435744] ? update_curr+0x267/0x740 [ 135.435763] ? lock_is_held_type+0xd7/0x130 [ 135.435782] __schedule+0xedd/0x2470 [ 135.435796] ? io_schedule_timeout+0x150/0x150 [ 135.435809] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.435829] schedule+0xda/0x1b0 [ 135.435841] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.435862] syscall_exit_to_user_mode+0x19/0x40 [ 135.435881] do_syscall_64+0x48/0x90 [ 135.435895] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.435914] RIP: 0033:0x7fca0ff26b19 [ 135.435922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.435933] RSP: 002b:00007fca0d49c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.435943] RAX: 0000000000000001 RBX: 00007fca10039f68 RCX: 00007fca0ff26b19 [ 135.435951] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca10039f6c [ 135.435958] RBP: 00007fca10039f60 R08: 000000000000000e R09: 0000000000000000 [ 135.435966] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca10039f6c [ 135.435973] R13: 00007ffde3bb8d6f R14: 00007fca0d49c300 R15: 0000000000022000 [ 135.435986] [ 135.492692] WARNING: CPU: 0 PID: 3903 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.493401] Modules linked in: [ 135.493651] CPU: 0 PID: 3903 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220915 #1 [ 135.494264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.495107] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.495531] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.496887] RSP: 0018:ffff888041dc7c48 EFLAGS: 00010006 [ 135.497291] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.497835] RDX: ffff88801d6b9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 135.498379] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 135.498917] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f149c00 [ 135.499434] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 135.499974] FS: 00007fca0d49c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.500558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.500984] CR2: 00005604e95b4ae0 CR3: 000000000eb76000 CR4: 0000000000350ef0 [ 135.501515] Call Trace: [ 135.501714] [ 135.501897] ctx_sched_out+0x8f1/0xc10 [ 135.502196] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.502613] ? lock_is_held_type+0xd7/0x130 [ 135.502958] ? __perf_cgroup_move+0x160/0x160 [ 135.503298] ? set_next_entity+0x304/0x550 [ 135.503625] ? update_curr+0x267/0x740 [ 135.503935] ? lock_is_held_type+0xd7/0x130 [ 135.504270] __schedule+0xedd/0x2470 [ 135.504557] ? io_schedule_timeout+0x150/0x150 [ 135.504901] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.505287] schedule+0xda/0x1b0 [ 135.505554] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.505938] syscall_exit_to_user_mode+0x19/0x40 [ 135.506300] do_syscall_64+0x48/0x90 [ 135.506593] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.506995] RIP: 0033:0x7fca0ff26b19 [ 135.507273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.508598] RSP: 002b:00007fca0d49c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.509166] RAX: 0000000000000001 RBX: 00007fca10039f68 RCX: 00007fca0ff26b19 [ 135.509712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca10039f6c [ 135.510245] RBP: 00007fca10039f60 R08: 000000000000000e R09: 0000000000000000 [ 135.510780] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca10039f6c [ 135.511314] R13: 00007ffde3bb8d6f R14: 00007fca0d49c300 R15: 0000000000022000 [ 135.511847] [ 135.512026] irq event stamp: 2344 [ 135.512284] hardirqs last enabled at (2343): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 135.512986] hardirqs last disabled at (2344): [] __schedule+0x1225/0x2470 [ 135.513602] softirqs last enabled at (1378): [] __irq_exit_rcu+0x11b/0x180 [ 135.514249] softirqs last disabled at (1367): [] __irq_exit_rcu+0x11b/0x180 [ 135.514915] ---[ end trace 0000000000000000 ]--- 13:12:51 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000180)) 13:12:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 13:12:51 executing program 1: init_module(0x0, 0x0, 0x0) 13:12:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 13:12:51 executing program 3: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:12:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 13:12:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:12:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#! .o \n'], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 137.236124] process 'syz-executor.7' launched './file1' with NULL argv: empty string added 13:12:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 13:12:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:12:51 executing program 3: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:12:51 executing program 1: init_module(0x0, 0x0, 0x0) 13:12:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 13:12:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 13:12:51 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 13:12:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0}, {@in=@broadcast}, @in6=@private0}}}, 0xf8}}, 0x0) 13:12:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_alloc(0x0, 0x0) 13:12:51 executing program 1: init_module(0x0, 0x0, 0x0) 13:12:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 13:12:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:12:51 executing program 7: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, 0x0) 13:12:51 executing program 3: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:12:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 13:12:51 executing program 6: setgroups(0x0, 0x0) r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) 13:12:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0}, {@in=@broadcast}, @in6=@private0}}}, 0xf8}}, 0x0) 13:12:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 13:12:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) [ 137.575467] loop1: detected capacity change from 0 to 40 13:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x7fffffff, 0x5, &(0x7f0000000640)=[{&(0x7f00000003c0)="e8e20923959392793c584d6cf0e87faf48c659d4fc03aa5073cb8105eee3bd076d39bd07c153531634fb91fcc59c275a818944f602edeb93f135d3e6002e34625cb37bbd0f8c9af5529009cc1425757f1a29006a1af65d2145e0186d444d14d8799f89137b07479ff54bfa9bb976488e6a4d151f33ec34e05d52bd867931cb8b7f1283fb77a7f1214420fabd3cf988ee3825f5f81d7c9f9cc71fae3d4bdab7f62aef9360af6364f497847902604ba36316e8d73eb3223cad3a17b23b3795688311c21d859b3f6b2461184ec481028376e8ebf94367fd76d58bb5422ee799aac274aa1beb0d1820e7ef89126cde4778abba50fd9dc37c2db9fd", 0xf9, 0xd1f6}, {&(0x7f00000004c0)="083391b8138e64178107b9235c40bb0b23f2", 0x12, 0xffff}, {&(0x7f0000000500)="d783c7", 0x3, 0x2}, {&(0x7f0000000540)="9b678e29b1d97d3661b40ea6b0aa98a75cb05e335c354c904faa600c45e08f6fa84558b34051cb609a920c57e8cb920a56f6b461c9ec3ebe8a9c19b1a10c0a28c41f8efe4211fa289f2fbefb789464e18be8b8d216a1d45f4bb827f7dda0b1f9e17b72ffbde1940a3e006d8370180f7a89fc666a4526599b8a026f950e0a68f0906e6cc2512a6538e9d0c5756da7379758254d4006f5ecc117ffe0575b4a8f24dd335f4058302b30532959f086ead4", 0xaf, 0x5}, {&(0x7f0000000600)="d54d09b04b676cccc6d9e8b5a24d1d8a19450b303d8e", 0x16, 0x80000000}], 0x2000000, &(0x7f00000006c0)={[{'['}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100", @ANYRES32, @ANYRESDEC]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r0, 0xb8a2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f6669648c5dd11a6c653000"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:12:52 executing program 4: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 3: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:12:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0}, {@in=@broadcast}, @in6=@private0}}}, 0xf8}}, 0x0) 13:12:52 executing program 6: syz_open_dev$sg(&(0x7f0000000900), 0x4, 0x181680) 13:12:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) [ 137.669813] syz-executor.1: attempt to access beyond end of device [ 137.669813] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 137.670791] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 137.692686] syz-executor.1: attempt to access beyond end of device [ 137.692686] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 137.693714] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:12:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0}, {@in=@broadcast}, @in6=@private0}}}, 0xf8}}, 0x0) 13:12:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x7fffffff, 0x5, &(0x7f0000000640)=[{&(0x7f00000003c0)="e8e20923959392793c584d6cf0e87faf48c659d4fc03aa5073cb8105eee3bd076d39bd07c153531634fb91fcc59c275a818944f602edeb93f135d3e6002e34625cb37bbd0f8c9af5529009cc1425757f1a29006a1af65d2145e0186d444d14d8799f89137b07479ff54bfa9bb976488e6a4d151f33ec34e05d52bd867931cb8b7f1283fb77a7f1214420fabd3cf988ee3825f5f81d7c9f9cc71fae3d4bdab7f62aef9360af6364f497847902604ba36316e8d73eb3223cad3a17b23b3795688311c21d859b3f6b2461184ec481028376e8ebf94367fd76d58bb5422ee799aac274aa1beb0d1820e7ef89126cde4778abba50fd9dc37c2db9fd", 0xf9, 0xd1f6}, {&(0x7f00000004c0)="083391b8138e64178107b9235c40bb0b23f2", 0x12, 0xffff}, {&(0x7f0000000500)="d783c7", 0x3, 0x2}, {&(0x7f0000000540)="9b678e29b1d97d3661b40ea6b0aa98a75cb05e335c354c904faa600c45e08f6fa84558b34051cb609a920c57e8cb920a56f6b461c9ec3ebe8a9c19b1a10c0a28c41f8efe4211fa289f2fbefb789464e18be8b8d216a1d45f4bb827f7dda0b1f9e17b72ffbde1940a3e006d8370180f7a89fc666a4526599b8a026f950e0a68f0906e6cc2512a6538e9d0c5756da7379758254d4006f5ecc117ffe0575b4a8f24dd335f4058302b30532959f086ead4", 0xaf, 0x5}, {&(0x7f0000000600)="d54d09b04b676cccc6d9e8b5a24d1d8a19450b303d8e", 0x16, 0x80000000}], 0x2000000, &(0x7f00000006c0)={[{'['}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100", @ANYRES32, @ANYRESDEC]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r0, 0xb8a2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f6669648c5dd11a6c653000"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 137.778309] loop1: detected capacity change from 0 to 40 13:12:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) 13:12:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r2, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r3) [ 137.854703] syz-executor.1: attempt to access beyond end of device [ 137.854703] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 137.855762] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 137.955407] loop1: detected capacity change from 0 to 40 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x7fffffff, 0x5, &(0x7f0000000640)=[{&(0x7f00000003c0)="e8e20923959392793c584d6cf0e87faf48c659d4fc03aa5073cb8105eee3bd076d39bd07c153531634fb91fcc59c275a818944f602edeb93f135d3e6002e34625cb37bbd0f8c9af5529009cc1425757f1a29006a1af65d2145e0186d444d14d8799f89137b07479ff54bfa9bb976488e6a4d151f33ec34e05d52bd867931cb8b7f1283fb77a7f1214420fabd3cf988ee3825f5f81d7c9f9cc71fae3d4bdab7f62aef9360af6364f497847902604ba36316e8d73eb3223cad3a17b23b3795688311c21d859b3f6b2461184ec481028376e8ebf94367fd76d58bb5422ee799aac274aa1beb0d1820e7ef89126cde4778abba50fd9dc37c2db9fd", 0xf9, 0xd1f6}, {&(0x7f00000004c0)="083391b8138e64178107b9235c40bb0b23f2", 0x12, 0xffff}, {&(0x7f0000000500)="d783c7", 0x3, 0x2}, {&(0x7f0000000540)="9b678e29b1d97d3661b40ea6b0aa98a75cb05e335c354c904faa600c45e08f6fa84558b34051cb609a920c57e8cb920a56f6b461c9ec3ebe8a9c19b1a10c0a28c41f8efe4211fa289f2fbefb789464e18be8b8d216a1d45f4bb827f7dda0b1f9e17b72ffbde1940a3e006d8370180f7a89fc666a4526599b8a026f950e0a68f0906e6cc2512a6538e9d0c5756da7379758254d4006f5ecc117ffe0575b4a8f24dd335f4058302b30532959f086ead4", 0xaf, 0x5}, {&(0x7f0000000600)="d54d09b04b676cccc6d9e8b5a24d1d8a19450b303d8e", 0x16, 0x80000000}], 0x2000000, &(0x7f00000006c0)={[{'['}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100", @ANYRES32, @ANYRESDEC]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r0, 0xb8a2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f6669648c5dd11a6c653000"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:12:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) [ 138.023420] syz-executor.1: attempt to access beyond end of device [ 138.023420] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.024486] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x7fffffff, 0x5, &(0x7f0000000640)=[{&(0x7f00000003c0)="e8e20923959392793c584d6cf0e87faf48c659d4fc03aa5073cb8105eee3bd076d39bd07c153531634fb91fcc59c275a818944f602edeb93f135d3e6002e34625cb37bbd0f8c9af5529009cc1425757f1a29006a1af65d2145e0186d444d14d8799f89137b07479ff54bfa9bb976488e6a4d151f33ec34e05d52bd867931cb8b7f1283fb77a7f1214420fabd3cf988ee3825f5f81d7c9f9cc71fae3d4bdab7f62aef9360af6364f497847902604ba36316e8d73eb3223cad3a17b23b3795688311c21d859b3f6b2461184ec481028376e8ebf94367fd76d58bb5422ee799aac274aa1beb0d1820e7ef89126cde4778abba50fd9dc37c2db9fd", 0xf9, 0xd1f6}, {&(0x7f00000004c0)="083391b8138e64178107b9235c40bb0b23f2", 0x12, 0xffff}, {&(0x7f0000000500)="d783c7", 0x3, 0x2}, {&(0x7f0000000540)="9b678e29b1d97d3661b40ea6b0aa98a75cb05e335c354c904faa600c45e08f6fa84558b34051cb609a920c57e8cb920a56f6b461c9ec3ebe8a9c19b1a10c0a28c41f8efe4211fa289f2fbefb789464e18be8b8d216a1d45f4bb827f7dda0b1f9e17b72ffbde1940a3e006d8370180f7a89fc666a4526599b8a026f950e0a68f0906e6cc2512a6538e9d0c5756da7379758254d4006f5ecc117ffe0575b4a8f24dd335f4058302b30532959f086ead4", 0xaf, 0x5}, {&(0x7f0000000600)="d54d09b04b676cccc6d9e8b5a24d1d8a19450b303d8e", 0x16, 0x80000000}], 0x2000000, &(0x7f00000006c0)={[{'['}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100", @ANYRES32, @ANYRESDEC]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r0, 0xb8a2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f6669648c5dd11a6c653000"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 138.067761] loop1: detected capacity change from 0 to 40 13:12:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 13:12:52 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x0, 0x2c, 0x0, @private0, @mcast2}}}}, 0x0) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 13:12:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000028c0)={[{@gid}]}) 13:12:52 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x0, 0x2c, 0x0, @private0, @mcast2}}}}, 0x0) 13:12:52 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 138.135813] syz-executor.1: attempt to access beyond end of device [ 138.135813] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.137193] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:12:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$binfmt_aout(r0, 0x0, 0x0) [ 138.159936] random: crng reseeded on system resumption [ 138.185805] random: crng reseeded on system resumption [ 138.190469] syz-executor.1 (4105) used greatest stack depth: 24472 bytes left 13:12:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000028c0)={[{@gid}]}) [ 138.247594] random: crng reseeded on system resumption 13:12:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r0, 0x0) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x5, 0x7f, 0xbd, 0x8, 0x0, 0x70, 0x4064, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x46e}, 0x8040, 0xa, 0x2, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9a1, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001700)={r2, 0x0, "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", "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"}) pipe(&(0x7f0000000140)) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) 13:12:52 executing program 5: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x40}}}}, 0x9) 13:12:52 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 13:12:52 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x0, 0x2c, 0x0, @private0, @mcast2}}}}, 0x0) 13:12:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = getpid() clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, 0x0, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) fcntl$getown(0xffffffffffffffff, 0x9) fstatfs(0xffffffffffffffff, &(0x7f0000001640)=""/233) 13:12:52 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 13:12:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000028c0)={[{@gid}]}) 13:12:52 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x0, 0x2c, 0x0, @private0, @mcast2}}}}, 0x0) 13:12:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r0, 0x0) 13:12:52 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x5, 0x7f, 0xbd, 0x8, 0x0, 0x70, 0x4064, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x46e}, 0x8040, 0xa, 0x2, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9a1, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001700)={r2, 0x0, "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", "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"}) pipe(&(0x7f0000000140)) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) 13:12:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r0, 0x0) 13:12:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000028c0)={[{@gid}]}) [ 138.428777] random: crng reseeded on system resumption [ 138.518001] hrtimer: interrupt took 28053 ns [ 138.527343] random: crng reseeded on system resumption [ 138.557339] random: crng reseeded on system resumption 13:12:52 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 13:12:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x5, 0x7f, 0xbd, 0x8, 0x0, 0x70, 0x4064, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x46e}, 0x8040, 0xa, 0x2, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9a1, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001700)={r2, 0x0, "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", "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"}) pipe(&(0x7f0000000140)) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) 13:12:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x5, 0x7f, 0xbd, 0x8, 0x0, 0x70, 0x4064, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x46e}, 0x8040, 0xa, 0x2, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9a1, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001700)={r2, 0x0, "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", "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"}) pipe(&(0x7f0000000140)) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) 13:12:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r0, 0x0) 13:12:53 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 13:12:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, VM DIAGNOSIS: 13:12:50 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888041dc7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fca0d49c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005604e95b4ae0 CR3=000000000eb76000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fca1000d7c0 00007fca1000d7c8 YMM02=0000000000000000 0000000000000000 00007fca1000d7e0 00007fca1000d7c0 YMM03=0000000000000000 0000000000000000 00007fca1000d7c8 00007fca1000d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0100000000010200 RBX=ffff888038194400 RCX=ffff888038194400 RDX=ffffea000100e388 RSI=ffff888038194400 RDI=ffff888007c75000 RBP=0000000000000000 RSP=ffff888041d9f668 R8 =ffff888038194400 R9 =ffffffff8178920f R10=ffffea0000e06500 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888041d9f6b8 R14=ffff888007c75000 R15=ffff888038194400 RIP=ffffffff8178516a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f12168018e0 CR3=000000000ddd4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000