Warning: Permanently added '[localhost]:34579' (ECDSA) to the list of known hosts. 2022/09/12 15:23:00 fuzzer started 2022/09/12 15:23:00 dialing manager at localhost:38027 syzkaller login: [ 45.224142] cgroup: Unknown subsys name 'net' [ 45.337988] cgroup: Unknown subsys name 'rlimit' 2022/09/12 15:23:15 syscalls: 2215 2022/09/12 15:23:15 code coverage: enabled 2022/09/12 15:23:15 comparison tracing: enabled 2022/09/12 15:23:15 extra coverage: enabled 2022/09/12 15:23:15 setuid sandbox: enabled 2022/09/12 15:23:15 namespace sandbox: enabled 2022/09/12 15:23:15 Android sandbox: enabled 2022/09/12 15:23:15 fault injection: enabled 2022/09/12 15:23:15 leak checking: enabled 2022/09/12 15:23:15 net packet injection: enabled 2022/09/12 15:23:15 net device setup: enabled 2022/09/12 15:23:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 15:23:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 15:23:15 USB emulation: enabled 2022/09/12 15:23:15 hci packet injection: enabled 2022/09/12 15:23:15 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 15:23:15 802.15.4 emulation: enabled 2022/09/12 15:23:15 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 15:23:15 fetching corpus: 50, signal 31205/34607 (executing program) 2022/09/12 15:23:15 fetching corpus: 100, signal 45080/49779 (executing program) 2022/09/12 15:23:15 fetching corpus: 150, signal 54555/60521 (executing program) 2022/09/12 15:23:15 fetching corpus: 200, signal 60890/68069 (executing program) 2022/09/12 15:23:16 fetching corpus: 250, signal 66989/75237 (executing program) 2022/09/12 15:23:16 fetching corpus: 300, signal 73737/82939 (executing program) 2022/09/12 15:23:16 fetching corpus: 350, signal 79365/89504 (executing program) 2022/09/12 15:23:16 fetching corpus: 400, signal 82752/93902 (executing program) 2022/09/12 15:23:16 fetching corpus: 450, signal 87306/99348 (executing program) 2022/09/12 15:23:16 fetching corpus: 500, signal 90827/103728 (executing program) 2022/09/12 15:23:17 fetching corpus: 550, signal 93915/107641 (executing program) 2022/09/12 15:23:17 fetching corpus: 600, signal 97856/112261 (executing program) 2022/09/12 15:23:17 fetching corpus: 650, signal 101603/116692 (executing program) 2022/09/12 15:23:17 fetching corpus: 700, signal 105177/120916 (executing program) 2022/09/12 15:23:17 fetching corpus: 750, signal 108201/124553 (executing program) 2022/09/12 15:23:17 fetching corpus: 800, signal 110504/127568 (executing program) 2022/09/12 15:23:17 fetching corpus: 850, signal 112961/130618 (executing program) 2022/09/12 15:23:18 fetching corpus: 900, signal 115187/133476 (executing program) 2022/09/12 15:23:18 fetching corpus: 950, signal 118371/137080 (executing program) 2022/09/12 15:23:18 fetching corpus: 1000, signal 120550/139772 (executing program) 2022/09/12 15:23:18 fetching corpus: 1050, signal 121923/141793 (executing program) 2022/09/12 15:23:18 fetching corpus: 1100, signal 125074/145207 (executing program) 2022/09/12 15:23:18 fetching corpus: 1150, signal 127127/147686 (executing program) 2022/09/12 15:23:18 fetching corpus: 1200, signal 129041/150022 (executing program) 2022/09/12 15:23:19 fetching corpus: 1250, signal 131360/152663 (executing program) 2022/09/12 15:23:19 fetching corpus: 1300, signal 132865/154589 (executing program) 2022/09/12 15:23:19 fetching corpus: 1350, signal 133834/156068 (executing program) 2022/09/12 15:23:19 fetching corpus: 1400, signal 135430/158012 (executing program) 2022/09/12 15:23:19 fetching corpus: 1450, signal 136449/159558 (executing program) 2022/09/12 15:23:19 fetching corpus: 1500, signal 138570/161860 (executing program) 2022/09/12 15:23:19 fetching corpus: 1550, signal 140711/164134 (executing program) 2022/09/12 15:23:19 fetching corpus: 1600, signal 142397/166051 (executing program) 2022/09/12 15:23:20 fetching corpus: 1650, signal 144260/168109 (executing program) 2022/09/12 15:23:20 fetching corpus: 1700, signal 145590/169764 (executing program) 2022/09/12 15:23:20 fetching corpus: 1750, signal 146686/171166 (executing program) 2022/09/12 15:23:20 fetching corpus: 1800, signal 148773/173243 (executing program) 2022/09/12 15:23:20 fetching corpus: 1850, signal 149881/174716 (executing program) 2022/09/12 15:23:20 fetching corpus: 1900, signal 151560/176548 (executing program) 2022/09/12 15:23:20 fetching corpus: 1950, signal 153150/178175 (executing program) 2022/09/12 15:23:21 fetching corpus: 2000, signal 154446/179629 (executing program) 2022/09/12 15:23:21 fetching corpus: 2050, signal 156146/181276 (executing program) 2022/09/12 15:23:21 fetching corpus: 2100, signal 157299/182618 (executing program) 2022/09/12 15:23:21 fetching corpus: 2150, signal 159280/184367 (executing program) 2022/09/12 15:23:21 fetching corpus: 2200, signal 160540/185710 (executing program) 2022/09/12 15:23:21 fetching corpus: 2250, signal 161591/186885 (executing program) 2022/09/12 15:23:21 fetching corpus: 2300, signal 163055/188333 (executing program) 2022/09/12 15:23:22 fetching corpus: 2350, signal 164064/189469 (executing program) 2022/09/12 15:23:22 fetching corpus: 2400, signal 165663/190880 (executing program) 2022/09/12 15:23:22 fetching corpus: 2450, signal 166878/192087 (executing program) 2022/09/12 15:23:22 fetching corpus: 2500, signal 168060/193291 (executing program) 2022/09/12 15:23:22 fetching corpus: 2550, signal 168740/194130 (executing program) 2022/09/12 15:23:22 fetching corpus: 2600, signal 169666/195109 (executing program) 2022/09/12 15:23:22 fetching corpus: 2650, signal 170580/196100 (executing program) 2022/09/12 15:23:22 fetching corpus: 2700, signal 171476/197004 (executing program) 2022/09/12 15:23:23 fetching corpus: 2750, signal 172587/198015 (executing program) 2022/09/12 15:23:23 fetching corpus: 2800, signal 173558/198921 (executing program) 2022/09/12 15:23:23 fetching corpus: 2850, signal 174951/200025 (executing program) 2022/09/12 15:23:23 fetching corpus: 2900, signal 176129/201011 (executing program) 2022/09/12 15:23:23 fetching corpus: 2950, signal 177276/202031 (executing program) 2022/09/12 15:23:23 fetching corpus: 3000, signal 178387/202957 (executing program) 2022/09/12 15:23:24 fetching corpus: 3050, signal 179096/203670 (executing program) 2022/09/12 15:23:24 fetching corpus: 3100, signal 179588/204258 (executing program) 2022/09/12 15:23:24 fetching corpus: 3150, signal 181002/205241 (executing program) 2022/09/12 15:23:24 fetching corpus: 3200, signal 182280/206145 (executing program) 2022/09/12 15:23:24 fetching corpus: 3250, signal 183157/206864 (executing program) 2022/09/12 15:23:24 fetching corpus: 3300, signal 184361/207685 (executing program) 2022/09/12 15:23:24 fetching corpus: 3350, signal 185173/208344 (executing program) 2022/09/12 15:23:24 fetching corpus: 3400, signal 185976/209009 (executing program) 2022/09/12 15:23:25 fetching corpus: 3450, signal 186889/209706 (executing program) 2022/09/12 15:23:25 fetching corpus: 3500, signal 187729/210347 (executing program) 2022/09/12 15:23:25 fetching corpus: 3550, signal 188429/210884 (executing program) 2022/09/12 15:23:25 fetching corpus: 3600, signal 189407/211556 (executing program) 2022/09/12 15:23:25 fetching corpus: 3650, signal 189881/212047 (executing program) 2022/09/12 15:23:25 fetching corpus: 3700, signal 190694/212644 (executing program) 2022/09/12 15:23:25 fetching corpus: 3750, signal 191798/213360 (executing program) 2022/09/12 15:23:26 fetching corpus: 3800, signal 192458/213857 (executing program) 2022/09/12 15:23:26 fetching corpus: 3850, signal 193418/214461 (executing program) 2022/09/12 15:23:26 fetching corpus: 3900, signal 194023/214903 (executing program) 2022/09/12 15:23:26 fetching corpus: 3950, signal 194916/215395 (executing program) 2022/09/12 15:23:26 fetching corpus: 4000, signal 195571/215820 (executing program) 2022/09/12 15:23:26 fetching corpus: 4050, signal 196354/216361 (executing program) 2022/09/12 15:23:26 fetching corpus: 4100, signal 196939/216736 (executing program) 2022/09/12 15:23:27 fetching corpus: 4150, signal 197935/217225 (executing program) 2022/09/12 15:23:27 fetching corpus: 4200, signal 198726/217793 (executing program) 2022/09/12 15:23:27 fetching corpus: 4250, signal 199627/218214 (executing program) 2022/09/12 15:23:27 fetching corpus: 4300, signal 200549/218638 (executing program) 2022/09/12 15:23:27 fetching corpus: 4350, signal 201120/219004 (executing program) 2022/09/12 15:23:27 fetching corpus: 4400, signal 201578/219295 (executing program) 2022/09/12 15:23:28 fetching corpus: 4450, signal 202920/219712 (executing program) 2022/09/12 15:23:28 fetching corpus: 4500, signal 203580/220067 (executing program) 2022/09/12 15:23:28 fetching corpus: 4550, signal 204248/220438 (executing program) 2022/09/12 15:23:28 fetching corpus: 4600, signal 205105/220778 (executing program) 2022/09/12 15:23:28 fetching corpus: 4650, signal 205748/221076 (executing program) 2022/09/12 15:23:28 fetching corpus: 4700, signal 206899/221430 (executing program) 2022/09/12 15:23:29 fetching corpus: 4750, signal 207413/221634 (executing program) 2022/09/12 15:23:29 fetching corpus: 4800, signal 207896/221825 (executing program) 2022/09/12 15:23:29 fetching corpus: 4850, signal 208659/222046 (executing program) 2022/09/12 15:23:29 fetching corpus: 4900, signal 209473/222286 (executing program) 2022/09/12 15:23:29 fetching corpus: 4950, signal 211039/222553 (executing program) 2022/09/12 15:23:29 fetching corpus: 5000, signal 211721/222756 (executing program) 2022/09/12 15:23:30 fetching corpus: 5050, signal 212101/222952 (executing program) 2022/09/12 15:23:30 fetching corpus: 5100, signal 212822/223120 (executing program) 2022/09/12 15:23:30 fetching corpus: 5150, signal 213393/223251 (executing program) 2022/09/12 15:23:30 fetching corpus: 5200, signal 213970/223398 (executing program) 2022/09/12 15:23:30 fetching corpus: 5250, signal 214754/223569 (executing program) 2022/09/12 15:23:30 fetching corpus: 5300, signal 215239/223672 (executing program) 2022/09/12 15:23:30 fetching corpus: 5304, signal 215252/223777 (executing program) 2022/09/12 15:23:31 fetching corpus: 5304, signal 215252/223819 (executing program) 2022/09/12 15:23:31 fetching corpus: 5304, signal 215252/223819 (executing program) 2022/09/12 15:23:33 starting 8 fuzzer processes 15:23:33 executing program 0: socket(0x2, 0x2, 0x1) 15:23:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5441, 0x0) [ 76.844762] audit: type=1400 audit(1662996213.695:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:23:33 executing program 2: lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 15:23:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffd}, {0x6}]}) syz_open_procfs(0x0, 0x0) 15:23:33 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 15:23:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x69}) open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x0) 15:23:33 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 15:23:33 executing program 7: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0105000000000000000076"], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) [ 78.096396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.100217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.101979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.118540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.120186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.121559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.128711] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.153167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.166149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.167257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.170583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.171719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.178670] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.180986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.189684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.191686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.193614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.195087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.197034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.200135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.201259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.205800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.214538] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.218825] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.225353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.229494] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.231132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.237054] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.288936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.294223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.304185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.332521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.342018] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.354035] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.371395] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.185063] Bluetooth: hci0: command 0x0409 tx timeout [ 80.248517] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 80.249343] Bluetooth: hci3: command 0x0409 tx timeout [ 80.249765] Bluetooth: hci1: command 0x0409 tx timeout [ 80.250168] Bluetooth: hci2: command 0x0409 tx timeout [ 80.313434] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 80.314398] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 80.440385] Bluetooth: hci5: command 0x0409 tx timeout [ 82.232421] Bluetooth: hci0: command 0x041b tx timeout [ 82.296467] Bluetooth: hci2: command 0x041b tx timeout [ 82.297223] Bluetooth: hci1: command 0x041b tx timeout [ 82.297993] Bluetooth: hci3: command 0x041b tx timeout [ 82.489342] Bluetooth: hci5: command 0x041b tx timeout [ 84.281349] Bluetooth: hci0: command 0x040f tx timeout [ 84.344429] Bluetooth: hci3: command 0x040f tx timeout [ 84.345921] Bluetooth: hci1: command 0x040f tx timeout [ 84.349323] Bluetooth: hci2: command 0x040f tx timeout [ 84.536469] Bluetooth: hci5: command 0x040f tx timeout [ 85.304518] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 85.880743] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 85.881419] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 86.328694] Bluetooth: hci0: command 0x0419 tx timeout [ 86.392498] Bluetooth: hci2: command 0x0419 tx timeout [ 86.393403] Bluetooth: hci1: command 0x0419 tx timeout [ 86.394169] Bluetooth: hci3: command 0x0419 tx timeout [ 86.584368] Bluetooth: hci5: command 0x0419 tx timeout [ 88.291953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.298880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.299758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.306964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.308122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.309051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.318456] Bluetooth: hci4: HCI_REQ-0x0c1a [ 88.837214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.839088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.844724] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.847166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.848549] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.849209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.851907] Bluetooth: hci6: HCI_REQ-0x0c1a [ 89.444930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.449604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.451045] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.452944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.454163] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.454848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.457410] Bluetooth: hci7: HCI_REQ-0x0c1a [ 90.360378] Bluetooth: hci4: command 0x0409 tx timeout [ 90.873423] Bluetooth: hci6: command 0x0409 tx timeout [ 91.513426] Bluetooth: hci7: command 0x0409 tx timeout [ 92.409440] Bluetooth: hci4: command 0x041b tx timeout [ 92.921328] Bluetooth: hci6: command 0x041b tx timeout [ 93.560344] Bluetooth: hci7: command 0x041b tx timeout [ 94.457325] Bluetooth: hci4: command 0x040f tx timeout [ 94.969688] Bluetooth: hci6: command 0x040f tx timeout [ 95.608339] Bluetooth: hci7: command 0x040f tx timeout [ 96.505385] Bluetooth: hci4: command 0x0419 tx timeout [ 97.016330] Bluetooth: hci6: command 0x0419 tx timeout [ 97.656330] Bluetooth: hci7: command 0x0419 tx timeout 15:24:24 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 15:24:24 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 15:24:24 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 15:24:24 executing program 4: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ftruncate(r0, 0xffffff7f) 15:24:24 executing program 4: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ftruncate(r0, 0xffffff7f) 15:24:24 executing program 4: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ftruncate(r0, 0xffffff7f) 15:24:25 executing program 4: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ftruncate(r0, 0xffffff7f) 15:24:25 executing program 4: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "be40d3", 0x64, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "845180deca57685812a86c30164d83a189cc122edfa1a29b6b52c980f508bfdd", "e60f6ee18c14bf4a9ebb74af48b831b7", {"11c040f8de3cd221c1ccf9473caff630", "89bcadbf8ee8ef4d0adb0c910e228591"}}}}}}}}, 0x0) [ 136.491988] audit: type=1326 audit(1662996273.342:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3940 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622ed0bb19 code=0x0 [ 137.326075] audit: type=1326 audit(1662996274.176:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3940 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622ed0bb19 code=0x0 15:24:35 executing program 0: socket(0x2, 0x2, 0x1) 15:24:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5441, 0x0) 15:24:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffd}, {0x6}]}) syz_open_procfs(0x0, 0x0) 15:24:35 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:35 executing program 7: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0105000000000000000076"], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 15:24:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x69}) open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x0) 15:24:35 executing program 4: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "be40d3", 0x64, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "845180deca57685812a86c30164d83a189cc122edfa1a29b6b52c980f508bfdd", "e60f6ee18c14bf4a9ebb74af48b831b7", {"11c040f8de3cd221c1ccf9473caff630", "89bcadbf8ee8ef4d0adb0c910e228591"}}}}}}}}, 0x0) [ 138.497135] audit: type=1326 audit(1662996275.347:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3982 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622ed0bb19 code=0x0 [ 138.516145] loop6: detected capacity change from 0 to 40 [ 138.525949] audit: type=1400 audit(1662996275.376:10): avc: denied { open } for pid=3985 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.527326] audit: type=1400 audit(1662996275.376:11): avc: denied { kernel } for pid=3985 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.532583] ------------[ cut here ]------------ [ 138.532604] [ 138.532607] ====================================================== [ 138.532611] WARNING: possible circular locking dependency detected [ 138.532615] 6.0.0-rc5-next-20220912 #1 Not tainted [ 138.532622] ------------------------------------------------------ [ 138.532625] syz-executor.2/3989 is trying to acquire lock: [ 138.532632] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 138.532671] [ 138.532671] but task is already holding lock: [ 138.532674] ffff888008d97020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 138.532703] [ 138.532703] which lock already depends on the new lock. [ 138.532703] [ 138.532706] [ 138.532706] the existing dependency chain (in reverse order) is: [ 138.532710] [ 138.532710] -> #3 (&ctx->lock){....}-{2:2}: [ 138.532724] _raw_spin_lock+0x2a/0x40 [ 138.532741] __perf_event_task_sched_out+0x53b/0x18d0 [ 138.532753] __schedule+0xedd/0x2470 [ 138.532763] schedule+0xda/0x1b0 [ 138.532776] futex_wait_queue+0xf5/0x1e0 [ 138.532788] futex_wait+0x28e/0x690 [ 138.532798] do_futex+0x2ff/0x380 [ 138.532807] __x64_sys_futex+0x1c6/0x4d0 [ 138.532817] do_syscall_64+0x3b/0x90 [ 138.532831] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.532848] [ 138.532848] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 138.532862] _raw_spin_lock_nested+0x30/0x40 [ 138.532876] raw_spin_rq_lock_nested+0x1e/0x30 [ 138.532890] task_fork_fair+0x63/0x4d0 [ 138.532908] sched_cgroup_fork+0x3d0/0x540 [ 138.532922] copy_process+0x3f9e/0x6df0 [ 138.532933] kernel_clone+0xe7/0x890 [ 138.532942] user_mode_thread+0xad/0xf0 [ 138.532953] rest_init+0x24/0x250 [ 138.532970] arch_call_rest_init+0xf/0x14 [ 138.532989] start_kernel+0x4c1/0x4e6 [ 138.533006] secondary_startup_64_no_verify+0xe0/0xeb [ 138.533021] [ 138.533021] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 138.533034] _raw_spin_lock_irqsave+0x39/0x60 [ 138.533049] try_to_wake_up+0xab/0x1920 [ 138.533063] up+0x75/0xb0 [ 138.533074] __up_console_sem+0x6e/0x80 [ 138.533091] console_unlock+0x46a/0x590 [ 138.533107] vprintk_emit+0x1bd/0x560 [ 138.533124] vprintk+0x84/0xa0 [ 138.533140] _printk+0xba/0xf1 [ 138.533158] kauditd_hold_skb.cold+0x3f/0x4e [ 138.533172] kauditd_send_queue+0x233/0x290 [ 138.533188] kauditd_thread+0x5da/0x9a0 [ 138.533202] kthread+0x2ed/0x3a0 [ 138.533217] ret_from_fork+0x22/0x30 [ 138.533229] [ 138.533229] -> #0 ((console_sem).lock){....}-{2:2}: [ 138.533243] __lock_acquire+0x2a02/0x5e70 [ 138.533260] lock_acquire+0x1a2/0x530 [ 138.533276] _raw_spin_lock_irqsave+0x39/0x60 [ 138.533291] down_trylock+0xe/0x70 [ 138.533303] __down_trylock_console_sem+0x3b/0xd0 [ 138.533320] vprintk_emit+0x16b/0x560 [ 138.533336] vprintk+0x84/0xa0 [ 138.533353] _printk+0xba/0xf1 [ 138.533369] report_bug.cold+0x72/0xab [ 138.533381] handle_bug+0x3c/0x70 [ 138.533394] exc_invalid_op+0x14/0x50 [ 138.533407] asm_exc_invalid_op+0x16/0x20 [ 138.533423] group_sched_out.part.0+0x2c7/0x460 [ 138.533434] ctx_sched_out+0x8f1/0xc10 [ 138.533443] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.533455] __schedule+0xedd/0x2470 [ 138.533465] schedule+0xda/0x1b0 [ 138.533474] futex_wait_queue+0xf5/0x1e0 [ 138.533484] futex_wait+0x28e/0x690 [ 138.533494] do_futex+0x2ff/0x380 [ 138.533503] __x64_sys_futex+0x1c6/0x4d0 [ 138.533512] do_syscall_64+0x3b/0x90 [ 138.533525] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.533542] [ 138.533542] other info that might help us debug this: [ 138.533542] [ 138.533545] Chain exists of: [ 138.533545] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 138.533545] [ 138.533560] Possible unsafe locking scenario: [ 138.533560] [ 138.533562] CPU0 CPU1 [ 138.533565] ---- ---- [ 138.533567] lock(&ctx->lock); [ 138.533573] lock(&rq->__lock); [ 138.533579] lock(&ctx->lock); [ 138.533585] lock((console_sem).lock); [ 138.533591] [ 138.533591] *** DEADLOCK *** [ 138.533591] [ 138.533593] 2 locks held by syz-executor.2/3989: [ 138.533600] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 138.533625] #1: ffff888008d97020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 138.533656] [ 138.533656] stack backtrace: [ 138.533659] CPU: 1 PID: 3989 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1 [ 138.533674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.533682] Call Trace: [ 138.533686] [ 138.533689] dump_stack_lvl+0x8b/0xb3 [ 138.533704] check_noncircular+0x263/0x2e0 [ 138.533721] ? format_decode+0x26c/0xb50 [ 138.533736] ? print_circular_bug+0x450/0x450 [ 138.533754] ? enable_ptr_key_workfn+0x20/0x20 [ 138.533767] ? __lockdep_reset_lock+0x180/0x180 [ 138.533784] ? format_decode+0x26c/0xb50 [ 138.533800] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 138.533818] __lock_acquire+0x2a02/0x5e70 [ 138.533840] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.533863] lock_acquire+0x1a2/0x530 [ 138.533880] ? down_trylock+0xe/0x70 [ 138.533895] ? rcu_read_unlock+0x40/0x40 [ 138.533914] ? find_held_lock+0x2c/0x110 [ 138.533931] ? vprintk+0x84/0xa0 [ 138.533949] _raw_spin_lock_irqsave+0x39/0x60 [ 138.533965] ? down_trylock+0xe/0x70 [ 138.533978] down_trylock+0xe/0x70 [ 138.533992] ? vprintk+0x84/0xa0 [ 138.534009] __down_trylock_console_sem+0x3b/0xd0 [ 138.534027] vprintk_emit+0x16b/0x560 [ 138.534046] vprintk+0x84/0xa0 [ 138.534065] _printk+0xba/0xf1 [ 138.534082] ? record_print_text.cold+0x16/0x16 [ 138.534102] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 138.534116] ? lock_downgrade+0x6d0/0x6d0 [ 138.534134] ? report_bug.cold+0x66/0xab [ 138.534148] ? group_sched_out.part.0+0x2c7/0x460 [ 138.534160] report_bug.cold+0x72/0xab [ 138.534175] handle_bug+0x3c/0x70 [ 138.534188] exc_invalid_op+0x14/0x50 [ 138.534202] asm_exc_invalid_op+0x16/0x20 [ 138.534220] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 138.534234] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 138.534246] RSP: 0018:ffff8880417078f8 EFLAGS: 00010006 [ 138.534255] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 138.534263] RDX: ffff88801eebd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 138.534271] RBP: ffff888041670000 R08: 0000000000000005 R09: 0000000000000001 [ 138.534278] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008d97000 [ 138.534286] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 138.534297] ? group_sched_out.part.0+0x2c7/0x460 [ 138.534310] ? group_sched_out.part.0+0x2c7/0x460 [ 138.534323] ctx_sched_out+0x8f1/0xc10 [ 138.534335] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.534351] ? lock_is_held_type+0xd7/0x130 [ 138.534369] ? __perf_cgroup_move+0x160/0x160 [ 138.534381] ? set_next_entity+0x304/0x550 [ 138.534401] ? lock_is_held_type+0xd7/0x130 [ 138.534420] __schedule+0xedd/0x2470 [ 138.534433] ? io_schedule_timeout+0x150/0x150 [ 138.534444] ? futex_wait_setup+0x166/0x230 [ 138.534458] schedule+0xda/0x1b0 [ 138.534469] futex_wait_queue+0xf5/0x1e0 [ 138.534481] futex_wait+0x28e/0x690 [ 138.534493] ? futex_wait_setup+0x230/0x230 [ 138.534506] ? wake_up_q+0x8b/0xf0 [ 138.534521] ? futex_wake+0x158/0x490 [ 138.534535] ? lock_downgrade+0x6d0/0x6d0 [ 138.534553] ? lock_is_held_type+0xd7/0x130 [ 138.534572] do_futex+0x2ff/0x380 [ 138.534583] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 138.534595] ? ktime_get+0x153/0x1f0 [ 138.534612] __x64_sys_futex+0x1c6/0x4d0 [ 138.534623] ? hrtimer_interrupt+0x5b0/0x770 [ 138.534636] ? __x64_sys_futex_time32+0x480/0x480 [ 138.534649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 138.534667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 138.534687] do_syscall_64+0x3b/0x90 [ 138.534701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.534719] RIP: 0033:0x7f1326c4eb19 [ 138.534728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.534739] RSP: 002b:00007f13241c4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.534749] RAX: ffffffffffffffda RBX: 00007f1326d61f68 RCX: 00007f1326c4eb19 [ 138.534757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1326d61f68 [ 138.534765] RBP: 00007f1326d61f60 R08: 0000000000000000 R09: 0000000000000000 [ 138.534772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1326d61f6c [ 138.534780] R13: 00007fffa0dca71f R14: 00007f13241c4300 R15: 0000000000022000 [ 138.534792] [ 138.597640] WARNING: CPU: 1 PID: 3989 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 138.598327] Modules linked in: [ 138.598574] CPU: 1 PID: 3989 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1 [ 138.599173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.600012] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 138.600426] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 138.601765] RSP: 0018:ffff8880417078f8 EFLAGS: 00010006 [ 138.602170] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 138.602707] RDX: ffff88801eebd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 138.603251] RBP: ffff888041670000 R08: 0000000000000005 R09: 0000000000000001 [ 138.603785] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008d97000 [ 138.604325] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 138.604867] FS: 00007f13241c4700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 138.605475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.605916] CR2: 0000555555d69c58 CR3: 000000001b7d0000 CR4: 0000000000350ee0 [ 138.606456] Call Trace: [ 138.606658] [ 138.606835] ctx_sched_out+0x8f1/0xc10 [ 138.607137] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.607537] ? lock_is_held_type+0xd7/0x130 [ 138.607876] ? __perf_cgroup_move+0x160/0x160 [ 138.608213] ? set_next_entity+0x304/0x550 [ 138.608552] ? lock_is_held_type+0xd7/0x130 [ 138.608887] __schedule+0xedd/0x2470 [ 138.609178] ? io_schedule_timeout+0x150/0x150 [ 138.609523] ? futex_wait_setup+0x166/0x230 [ 138.609864] schedule+0xda/0x1b0 [ 138.610131] futex_wait_queue+0xf5/0x1e0 [ 138.610441] futex_wait+0x28e/0x690 [ 138.610723] ? futex_wait_setup+0x230/0x230 [ 138.611050] ? wake_up_q+0x8b/0xf0 [ 138.611330] ? futex_wake+0x158/0x490 [ 138.611627] ? lock_downgrade+0x6d0/0x6d0 [ 138.611948] ? lock_is_held_type+0xd7/0x130 [ 138.612293] do_futex+0x2ff/0x380 [ 138.612566] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 138.613013] ? ktime_get+0x153/0x1f0 [ 138.613309] __x64_sys_futex+0x1c6/0x4d0 [ 138.613617] ? hrtimer_interrupt+0x5b0/0x770 [ 138.613953] ? __x64_sys_futex_time32+0x480/0x480 [ 138.614369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 138.614770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 138.615180] do_syscall_64+0x3b/0x90 [ 138.615461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.615850] RIP: 0033:0x7f1326c4eb19 [ 138.616129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.617461] RSP: 002b:00007f13241c4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.618016] RAX: ffffffffffffffda RBX: 00007f1326d61f68 RCX: 00007f1326c4eb19 [ 138.618532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1326d61f68 [ 138.619059] RBP: 00007f1326d61f60 R08: 0000000000000000 R09: 0000000000000000 [ 138.619573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1326d61f6c [ 138.620087] R13: 00007fffa0dca71f R14: 00007f13241c4300 R15: 0000000000022000 [ 138.620638] [ 138.620809] irq event stamp: 480 [ 138.621057] hardirqs last enabled at (479): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.621763] hardirqs last disabled at (480): [] __schedule+0x1225/0x2470 [ 138.622345] softirqs last enabled at (0): [] copy_process+0x1dfe/0x6df0 [ 138.622929] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 138.623379] ---[ end trace 0000000000000000 ]--- 15:24:35 executing program 4: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "be40d3", 0x64, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "845180deca57685812a86c30164d83a189cc122edfa1a29b6b52c980f508bfdd", "e60f6ee18c14bf4a9ebb74af48b831b7", {"11c040f8de3cd221c1ccf9473caff630", "89bcadbf8ee8ef4d0adb0c910e228591"}}}}}}}}, 0x0) [ 138.705304] hrtimer: interrupt took 20388 ns 15:24:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x69}) open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x0) 15:24:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5441, 0x0) [ 139.682140] audit: type=1326 audit(1662996276.532:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4005 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622ed0bb19 code=0x0 15:24:36 executing program 4: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "be40d3", 0x64, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "845180deca57685812a86c30164d83a189cc122edfa1a29b6b52c980f508bfdd", "e60f6ee18c14bf4a9ebb74af48b831b7", {"11c040f8de3cd221c1ccf9473caff630", "89bcadbf8ee8ef4d0adb0c910e228591"}}}}}}}}, 0x0) 15:24:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffd}, {0x6}]}) syz_open_procfs(0x0, 0x0) 15:24:36 executing program 7: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0105000000000000000076"], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 15:24:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:36 executing program 0: socket(0x2, 0x2, 0x1) [ 139.714704] loop6: detected capacity change from 0 to 40 15:24:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x69}) open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x0) 15:24:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5441, 0x0) [ 139.883095] syz-executor.6: attempt to access beyond end of device [ 139.883095] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.884077] Buffer I/O error on dev loop6, logical block 10, lost async page write 15:24:37 executing program 0: socket(0x2, 0x2, 0x1) 15:24:37 executing program 7: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0105000000000000000076"], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 15:24:37 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00000000000000000600000000000000070000000000000002000000000000000600000000000000ffffffffffffffff050000000000000000000000000000000008000000000000010000000000000003000000000000006b80c27b000000001f000000b26b6e0000000201000000002b0700000000000028001a00ffffffff000000000000000000000000ff0100000000000000000000000000010a00040639011400736861312d617678320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068070000400000002cf820ef71cffe3e803872b1e8ce05d9a822df976b8fb9a01e4fe1b485a15464009e655cde0a511d39a2ea34b7ae513370c4c6484b0d44de62a5e742124434f126cda626dbba6bc79b648a7b7d62a818faa7d806d985228c5d2d6fb540ce48ddb84529a3aa19eeda81d4146215982a60d4500bf7c2d0ee8be81e8b51b483a320e543cb66ad4ac3b0ee6e7ae9db56265e07507e46aba558c49ee9b83a05a76be6e304a749aded186f3dde186f0b4a0cb2807ac431e1e57c798f8889c6e983f9c6c89231e1310090468483093e34776902eaa7fc4c977974737aeb72765c5b02e74d2ec440740f4eb54b1fb27afa00000010000a002abd700025bd7000050000001c0017000000000025bd70002bbd70002abd700029bd70000800000034011100ac141424000000000000000000000000ff010000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c0100000735000002000200ff020000000000000000000000000001fc020000000000000000000000000000fe800000000000000000000000000040000000000000000000000000000000006c020000003500000a0002007f000001000000000000000000000000fe880000000000000000000000000101fc020000000000000001000000a4005d8a0000000000000000003c0100000335000002000a00ac1414160000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000010000000000000000000000000000000133040000000000000a000a0005001900330000001b29a3a5697014dc5918fe0ba23a0c856261b9399c75dd0a61b88d19045f448097d0118abe5466ffd3a5ebf2a6aba5dcc385f4963f8ea3883cf0be718f7da7026fdb7cdfa73818685951de69d42d2af8f5c85ab690a3bf3e156b330836d340a8a1caf1ce43aa4dd63f6c45d86d43af7777cbff50bddb5163b1ba5e1ba3ec0f5b5091dc1e271b4e848bf10795442fd9310e3f436f29d5a990f669a8b5686b5fec9dfc96cf4ed6af25bf07e90a108cfe092b0a726452dcd62b62870f48a5a6ad76ed3d786f87547f5cf9e0fff0c1b4beeb80fa5f82709726e114b7524b8f5b0c824832bddb6f"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:37 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:37 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00000000000000000600000000000000070000000000000002000000000000000600000000000000ffffffffffffffff050000000000000000000000000000000008000000000000010000000000000003000000000000006b80c27b000000001f000000b26b6e0000000201000000002b0700000000000028001a00ffffffff000000000000000000000000ff0100000000000000000000000000010a00040639011400736861312d617678320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068070000400000002cf820ef71cffe3e803872b1e8ce05d9a822df976b8fb9a01e4fe1b485a15464009e655cde0a511d39a2ea34b7ae513370c4c6484b0d44de62a5e742124434f126cda626dbba6bc79b648a7b7d62a818faa7d806d985228c5d2d6fb540ce48ddb84529a3aa19eeda81d4146215982a60d4500bf7c2d0ee8be81e8b51b483a320e543cb66ad4ac3b0ee6e7ae9db56265e07507e46aba558c49ee9b83a05a76be6e304a749aded186f3dde186f0b4a0cb2807ac431e1e57c798f8889c6e983f9c6c89231e1310090468483093e34776902eaa7fc4c977974737aeb72765c5b02e74d2ec440740f4eb54b1fb27afa00000010000a002abd700025bd7000050000001c0017000000000025bd70002bbd70002abd700029bd70000800000034011100ac141424000000000000000000000000ff010000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c0100000735000002000200ff020000000000000000000000000001fc020000000000000000000000000000fe800000000000000000000000000040000000000000000000000000000000006c020000003500000a0002007f000001000000000000000000000000fe880000000000000000000000000101fc020000000000000001000000a4005d8a0000000000000000003c0100000335000002000a00ac1414160000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000010000000000000000000000000000000133040000000000000a000a0005001900330000001b29a3a5697014dc5918fe0ba23a0c856261b9399c75dd0a61b88d19045f448097d0118abe5466ffd3a5ebf2a6aba5dcc385f4963f8ea3883cf0be718f7da7026fdb7cdfa73818685951de69d42d2af8f5c85ab690a3bf3e156b330836d340a8a1caf1ce43aa4dd63f6c45d86d43af7777cbff50bddb5163b1ba5e1ba3ec0f5b5091dc1e271b4e848bf10795442fd9310e3f436f29d5a990f669a8b5686b5fec9dfc96cf4ed6af25bf07e90a108cfe092b0a726452dcd62b62870f48a5a6ad76ed3d786f87547f5cf9e0fff0c1b4beeb80fa5f82709726e114b7524b8f5b0c824832bddb6f"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0xfffffffd}, {0x6}]}) syz_open_procfs(0x0, 0x0) 15:24:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 140.572240] loop6: detected capacity change from 0 to 40 [ 140.614354] loop1: detected capacity change from 0 to 40 [ 140.650505] audit: type=1326 audit(1662996277.500:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4040 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622ed0bb19 code=0x0 15:24:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:24:37 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:24:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:37 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:24:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:38 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:24:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) [ 141.567729] loop1: detected capacity change from 0 to 40 [ 141.569625] loop6: detected capacity change from 0 to 40 15:24:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:38 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:38 executing program 7: msgctl$IPC_SET(0x0, 0x1, 0x0) [ 141.792076] syz-executor.1: attempt to access beyond end of device [ 141.792076] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 141.793417] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 142.278450] syz-executor.6: attempt to access beyond end of device [ 142.278450] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 142.280360] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 142.375225] syz-executor.0 (4099) used greatest stack depth: 24240 bytes left [ 142.897681] loop1: detected capacity change from 0 to 40 15:24:39 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs\x00', 0x0, 0x0) 15:24:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b37, 0x0) 15:24:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:39 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r3}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c0300001b00000105000000ffdbdf257f0000010000000000000000000000009bf071d60a5827000000000000000000000000000000014e23fb004e2000020a0020a091000000a8222ae4869aff81c070edf35a5a409ff7c8147cd22f8004004a91d9eba99c494ef457549c000cc1a73fc5a9680174755dc34adecebe99ff51d6db1e237b406067fddfdd2c420f529243c6ef82735a9a72c13367472344eb5a6c9180334e72bc0f939d92a78da2b39501567aae2ecb2384cd78af567c041c01b5e774bae916527e7a6c735e95bac9fb62d47f87811b125428b0f09537608f32636d9553fc4200"/240, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0xcd299bb299142830}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) fork() 15:24:39 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) [ 142.933002] loop2: detected capacity change from 0 to 40 15:24:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b37, 0x0) 15:24:39 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) [ 143.094064] syz-executor.2: attempt to access beyond end of device [ 143.094064] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 143.095594] Buffer I/O error on dev loop2, logical block 10, lost async page write 15:24:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b37, 0x0) [ 143.445211] syz-executor.1: attempt to access beyond end of device [ 143.445211] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 143.446887] Buffer I/O error on dev loop1, logical block 10, lost async page write 15:24:40 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:40 executing program 5: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) 15:24:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 15:24:40 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 15:24:40 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:40 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b37, 0x0) 15:24:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10) 15:24:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 143.665046] device syz_tun entered promiscuous mode [ 143.666067] device syz_tun left promiscuous mode [ 143.671251] loop2: detected capacity change from 0 to 40 [ 143.674217] device syz_tun entered promiscuous mode [ 143.675017] device syz_tun left promiscuous mode [ 143.685539] audit: type=1400 audit(1662996280.536:14): avc: denied { block_suspend } for pid=4151 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 15:24:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 15:24:40 executing program 7: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) [ 143.783885] syz-executor.2: attempt to access beyond end of device [ 143.783885] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 143.785105] Buffer I/O error on dev loop2, logical block 10, lost async page write 15:24:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10) 15:24:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x200, r0, 0x0, 0xffffffffffffffff, 0x0) 15:24:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) [ 143.811785] device syz_tun entered promiscuous mode [ 143.816117] device syz_tun left promiscuous mode 15:24:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x200, r0, 0x0, 0xffffffffffffffff, 0x0) 15:24:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10) [ 143.895572] loop2: detected capacity change from 0 to 40 [ 144.001818] device syz_tun entered promiscuous mode [ 144.003963] device syz_tun left promiscuous mode [ 144.051756] syz-executor.2: attempt to access beyond end of device [ 144.051756] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.052815] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 144.318991] loop2: detected capacity change from 0 to 40 15:24:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 15:24:41 executing program 7: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 15:24:41 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 15:24:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 15:24:41 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:41 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 15:24:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10) 15:24:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x200, r0, 0x0, 0xffffffffffffffff, 0x0) [ 144.345519] device syz_tun entered promiscuous mode [ 144.346149] device syz_tun left promiscuous mode 15:24:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x200, r0, 0x0, 0xffffffffffffffff, 0x0) 15:24:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) read(r0, &(0x7f0000000000)=""/78, 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xc902, 0x6) [ 144.441024] syz-executor.2: attempt to access beyond end of device [ 144.441024] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.441944] Buffer I/O error on dev loop2, logical block 10, lost async page write 15:24:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000340)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 15:24:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000340)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 15:24:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 15:24:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) read(r0, &(0x7f0000000000)=""/78, 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xc902, 0x6) 15:24:41 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 15:24:41 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c93112d5"}]}, 0x1c}], 0x1}, 0x0) 15:24:41 executing program 7: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x80, 0x4, 0x6}, 0x6}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x0, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 15:24:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000340)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 15:24:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c93112d5"}]}, 0x1c}], 0x1}, 0x0) 15:24:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 15:24:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 15:24:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) read(r0, &(0x7f0000000000)=""/78, 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xc902, 0x6) 15:24:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:41 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000340)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 15:24:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 15:24:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c93112d5"}]}, 0x1c}], 0x1}, 0x0) 15:24:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) read(r0, &(0x7f0000000000)=""/78, 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xc902, 0x6) 15:24:42 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c93112d5"}]}, 0x1c}], 0x1}, 0x0) 15:24:42 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 6: syz_io_uring_setup(0x9d8, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 15:24:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) 15:24:42 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:42 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:42 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 15:24:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) 15:24:42 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:42 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:42 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:42 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:42 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:42 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) 15:24:42 executing program 7: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:42 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) 15:24:42 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:43 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:43 executing program 0: accept$packet(0xffffffffffffffff, 0x0, 0x0) 15:24:43 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:43 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:43 executing program 7: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:43 executing program 3: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 15:24:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) 15:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) 15:24:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x4) 15:24:43 executing program 7: timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:24:43 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 15:24:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) 15:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) 15:24:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 7: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1b}, 0x0) 15:24:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) 15:24:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x4) 15:24:43 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x0, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r1, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r3 = inotify_init1(0x0) dup2(r3, r2) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="2b31049319399af4b2e6a1ddc3b2da4bc0618555dc3e4a7f4b9173adb2ec0c4011f2ea9d67e7a012427e5bf451f3304f19620e148e7f3e2e9035396d3e5d7ee6e8df192bb58a8f1decc0103ef37111a081fce6e951", 0x55}], 0x1, 0x5, 0x3d7b, 0x8) 15:24:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xee00], 0x38}}], 0x2, 0x0) 15:24:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) [ 146.659448] loop4: detected capacity change from 0 to 264192 15:24:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fallocate(r0, 0x0, 0x0, 0x3ff) openat(r0, &(0x7f0000000080)='./file1/file0/file0\x00', 0x448000, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0/file1\x00', 0x206c03, 0x100) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1/file0/file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x200400, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@aname={'aname', 0x3d, '('}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, '^'}}, {@dont_appraise}, {@euid_lt={'euid<', 0xee01}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f0000000c40)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) 15:24:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) 15:24:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 15:24:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x4) 15:24:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="e9", 0x1}], 0x1}}], 0x1, 0x80d1) sendto$inet6(r0, &(0x7f0000000080)="b3", 0x1, 0x4040881, 0x0, 0x0) 15:24:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f00000003c0)={@multicast1, @local}, 0xc) 15:24:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 15:24:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) 15:24:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xee00], 0x38}}], 0x2, 0x0) 15:24:43 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) fork() 15:24:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x4) 15:24:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) 15:24:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xee00], 0x38}}], 0x2, 0x0) 15:24:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f00000003c0)={@multicast1, @local}, 0xc) 15:24:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 15:24:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fallocate(r0, 0x0, 0x0, 0x3ff) openat(r0, &(0x7f0000000080)='./file1/file0/file0\x00', 0x448000, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0/file1\x00', 0x206c03, 0x100) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1/file0/file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x200400, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@aname={'aname', 0x3d, '('}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, '^'}}, {@dont_appraise}, {@euid_lt={'euid<', 0xee01}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f0000000c40)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) 15:24:43 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x VM DIAGNOSIS: 15:24:35 Registers: info registers vcpu 0 RAX=fffffbfff0cb63d9 RBX=fffffbfff0cb63da RCX=ffffffff812430b8 RDX=fffffbfff0cb63da RSI=0000000000000004 RDI=ffffffff865b1ec8 RBP=fffffbfff0cb63d9 RSP=ffff88806ce09d28 R8 =0000000000000000 R9 =ffffffff865b1ecb R10=fffffbfff0cb63d9 R11=0000000000000001 R12=ffff88806ce38738 R13=00000000fffd8772 R14=dffffc0000000000 R15=ffff88806ce37cc0 RIP=ffffffff81787f05 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555570a8400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1326d576dc CR3=000000001b7d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f1326d357c0 00007f1326d357c8 YMM02=0000000000000000 0000000000000000 00007f1326d357e0 00007f1326d357c0 YMM03=0000000000000000 0000000000000000 00007f1326d357c8 00007f1326d357c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888041707348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f13241c4700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555d69c58 CR3=000000001b7d0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f1326d357c0 00007f1326d357c8 YMM02=0000000000000000 0000000000000000 00007f1326d357e0 00007f1326d357c0 YMM03=0000000000000000 0000000000000000 00007f1326d357c8 00007f1326d357c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000