Warning: Permanently added '[localhost]:1883' (ECDSA) to the list of known hosts. 2022/09/20 11:56:49 fuzzer started 2022/09/20 11:56:50 dialing manager at localhost:34957 syzkaller login: [ 44.204760] cgroup: Unknown subsys name 'net' [ 44.289776] cgroup: Unknown subsys name 'rlimit' 2022/09/20 11:57:03 syscalls: 2215 2022/09/20 11:57:03 code coverage: enabled 2022/09/20 11:57:03 comparison tracing: enabled 2022/09/20 11:57:03 extra coverage: enabled 2022/09/20 11:57:03 setuid sandbox: enabled 2022/09/20 11:57:03 namespace sandbox: enabled 2022/09/20 11:57:03 Android sandbox: enabled 2022/09/20 11:57:03 fault injection: enabled 2022/09/20 11:57:03 leak checking: enabled 2022/09/20 11:57:03 net packet injection: enabled 2022/09/20 11:57:03 net device setup: enabled 2022/09/20 11:57:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/20 11:57:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/20 11:57:03 USB emulation: enabled 2022/09/20 11:57:03 hci packet injection: enabled 2022/09/20 11:57:03 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220920) 2022/09/20 11:57:03 802.15.4 emulation: enabled 2022/09/20 11:57:03 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/20 11:57:03 fetching corpus: 50, signal 36519/39643 (executing program) 2022/09/20 11:57:03 fetching corpus: 100, signal 48114/52414 (executing program) 2022/09/20 11:57:03 fetching corpus: 150, signal 54395/59827 (executing program) 2022/09/20 11:57:03 fetching corpus: 200, signal 59314/65820 (executing program) 2022/09/20 11:57:03 fetching corpus: 250, signal 66513/73798 (executing program) 2022/09/20 11:57:04 fetching corpus: 300, signal 71536/79598 (executing program) 2022/09/20 11:57:04 fetching corpus: 350, signal 76561/85272 (executing program) 2022/09/20 11:57:04 fetching corpus: 400, signal 81391/90670 (executing program) 2022/09/20 11:57:04 fetching corpus: 450, signal 85813/95580 (executing program) 2022/09/20 11:57:04 fetching corpus: 500, signal 88806/99171 (executing program) 2022/09/20 11:57:04 fetching corpus: 550, signal 92208/103044 (executing program) 2022/09/20 11:57:04 fetching corpus: 600, signal 96746/107783 (executing program) 2022/09/20 11:57:04 fetching corpus: 650, signal 99756/111183 (executing program) 2022/09/20 11:57:05 fetching corpus: 700, signal 102688/114467 (executing program) 2022/09/20 11:57:05 fetching corpus: 750, signal 105422/117453 (executing program) 2022/09/20 11:57:05 fetching corpus: 800, signal 109189/121289 (executing program) 2022/09/20 11:57:05 fetching corpus: 850, signal 111652/123971 (executing program) 2022/09/20 11:57:05 fetching corpus: 900, signal 113282/125870 (executing program) 2022/09/20 11:57:05 fetching corpus: 950, signal 115521/128191 (executing program) 2022/09/20 11:57:06 fetching corpus: 1000, signal 117200/130065 (executing program) 2022/09/20 11:57:06 fetching corpus: 1050, signal 119270/132174 (executing program) 2022/09/20 11:57:06 fetching corpus: 1100, signal 120475/133626 (executing program) 2022/09/20 11:57:06 fetching corpus: 1150, signal 121616/135073 (executing program) 2022/09/20 11:57:06 fetching corpus: 1200, signal 123487/136888 (executing program) 2022/09/20 11:57:06 fetching corpus: 1250, signal 124524/138143 (executing program) 2022/09/20 11:57:06 fetching corpus: 1300, signal 126511/140051 (executing program) 2022/09/20 11:57:07 fetching corpus: 1350, signal 128032/141581 (executing program) 2022/09/20 11:57:07 fetching corpus: 1400, signal 129768/143172 (executing program) 2022/09/20 11:57:07 fetching corpus: 1450, signal 131343/144634 (executing program) 2022/09/20 11:57:07 fetching corpus: 1500, signal 132418/145761 (executing program) 2022/09/20 11:57:07 fetching corpus: 1550, signal 133925/147125 (executing program) 2022/09/20 11:57:07 fetching corpus: 1600, signal 135172/148319 (executing program) 2022/09/20 11:57:07 fetching corpus: 1650, signal 137322/150105 (executing program) 2022/09/20 11:57:07 fetching corpus: 1700, signal 138192/151001 (executing program) 2022/09/20 11:57:08 fetching corpus: 1750, signal 139526/152103 (executing program) 2022/09/20 11:57:08 fetching corpus: 1800, signal 141398/153555 (executing program) 2022/09/20 11:57:08 fetching corpus: 1850, signal 143283/154891 (executing program) 2022/09/20 11:57:08 fetching corpus: 1900, signal 144388/155793 (executing program) 2022/09/20 11:57:08 fetching corpus: 1950, signal 145170/156517 (executing program) 2022/09/20 11:57:08 fetching corpus: 2000, signal 146132/157334 (executing program) 2022/09/20 11:57:08 fetching corpus: 2050, signal 147171/158105 (executing program) 2022/09/20 11:57:09 fetching corpus: 2100, signal 148818/159170 (executing program) 2022/09/20 11:57:09 fetching corpus: 2150, signal 150419/160162 (executing program) 2022/09/20 11:57:09 fetching corpus: 2200, signal 151570/160966 (executing program) 2022/09/20 11:57:09 fetching corpus: 2250, signal 153028/161800 (executing program) 2022/09/20 11:57:09 fetching corpus: 2300, signal 153733/162282 (executing program) 2022/09/20 11:57:09 fetching corpus: 2350, signal 154985/163006 (executing program) 2022/09/20 11:57:09 fetching corpus: 2400, signal 155887/163547 (executing program) 2022/09/20 11:57:09 fetching corpus: 2450, signal 156743/164043 (executing program) 2022/09/20 11:57:10 fetching corpus: 2500, signal 157660/164545 (executing program) 2022/09/20 11:57:10 fetching corpus: 2550, signal 159122/165230 (executing program) 2022/09/20 11:57:10 fetching corpus: 2600, signal 160215/165749 (executing program) 2022/09/20 11:57:10 fetching corpus: 2650, signal 160921/166091 (executing program) 2022/09/20 11:57:10 fetching corpus: 2700, signal 161573/166378 (executing program) 2022/09/20 11:57:10 fetching corpus: 2750, signal 162638/166802 (executing program) 2022/09/20 11:57:10 fetching corpus: 2800, signal 164086/167448 (executing program) 2022/09/20 11:57:10 fetching corpus: 2807, signal 164174/167541 (executing program) 2022/09/20 11:57:10 fetching corpus: 2811, signal 164220/167650 (executing program) 2022/09/20 11:57:10 fetching corpus: 2811, signal 164220/167707 (executing program) 2022/09/20 11:57:10 fetching corpus: 2811, signal 164220/167765 (executing program) 2022/09/20 11:57:10 fetching corpus: 2812, signal 164226/167813 (executing program) 2022/09/20 11:57:10 fetching corpus: 2812, signal 164226/167889 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/167951 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168009 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168063 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168136 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168191 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168260 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168325 (executing program) 2022/09/20 11:57:11 fetching corpus: 2812, signal 164226/168386 (executing program) 2022/09/20 11:57:11 fetching corpus: 2813, signal 164277/168468 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168533 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168595 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168645 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168692 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168752 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168822 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168882 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/168957 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/169015 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/169076 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/169136 (executing program) 2022/09/20 11:57:11 fetching corpus: 2814, signal 164278/169136 (executing program) 2022/09/20 11:57:14 starting 8 fuzzer processes 11:57:14 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/102400) 11:57:14 executing program 1: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@rc, 0x80, 0x0}}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r3, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9}, 0x2) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 11:57:14 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:57:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x16, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) [ 68.240820] audit: type=1400 audit(1663675034.337:6): avc: denied { execmem } for pid=289 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:57:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:57:14 executing program 5: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$nfs(&(0x7f00000021c0), &(0x7f0000002200)='./file0\x00', 0x0, 0x1, &(0x7f00000026c0)=[{&(0x7f0000002240)="97", 0x1}], 0x0, &(0x7f00000027c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:57:14 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:57:14 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) [ 69.630995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.633072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.635358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.637636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.639199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.642327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.644810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.646846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.647887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.648377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.649589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.651331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.663413] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.667522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.672414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.677604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.685766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.690292] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.692351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.693986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.696162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.697325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.698736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.699928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.705546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.707283] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.712585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.714125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.720090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.721469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.731906] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.732118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.734593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.734685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.736953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.748077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.750475] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.751800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.753072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.754749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.758786] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.759938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.769639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.769744] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.776095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.777743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.780213] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.781639] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.783093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.783154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.784244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.787227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.792068] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.792089] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.804112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.810995] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.704254] Bluetooth: hci1: command 0x0409 tx timeout [ 71.705044] Bluetooth: hci0: command 0x0409 tx timeout [ 71.767983] Bluetooth: hci3: command 0x0409 tx timeout [ 71.768718] Bluetooth: hci7: command 0x0409 tx timeout [ 71.769309] Bluetooth: hci2: command 0x0409 tx timeout [ 71.832311] Bluetooth: hci4: command 0x0409 tx timeout [ 71.832992] Bluetooth: hci5: command 0x0409 tx timeout [ 71.833556] Bluetooth: hci6: command 0x0409 tx timeout [ 73.751995] Bluetooth: hci0: command 0x041b tx timeout [ 73.752918] Bluetooth: hci1: command 0x041b tx timeout [ 73.816191] Bluetooth: hci2: command 0x041b tx timeout [ 73.817058] Bluetooth: hci7: command 0x041b tx timeout [ 73.817829] Bluetooth: hci3: command 0x041b tx timeout [ 73.880005] Bluetooth: hci6: command 0x041b tx timeout [ 73.880845] Bluetooth: hci5: command 0x041b tx timeout [ 73.881645] Bluetooth: hci4: command 0x041b tx timeout [ 75.800972] Bluetooth: hci1: command 0x040f tx timeout [ 75.801435] Bluetooth: hci0: command 0x040f tx timeout [ 75.864373] Bluetooth: hci3: command 0x040f tx timeout [ 75.864831] Bluetooth: hci7: command 0x040f tx timeout [ 75.865246] Bluetooth: hci2: command 0x040f tx timeout [ 75.928286] Bluetooth: hci4: command 0x040f tx timeout [ 75.928742] Bluetooth: hci5: command 0x040f tx timeout [ 75.929157] Bluetooth: hci6: command 0x040f tx timeout [ 77.848011] Bluetooth: hci0: command 0x0419 tx timeout [ 77.848520] Bluetooth: hci1: command 0x0419 tx timeout [ 77.911938] Bluetooth: hci2: command 0x0419 tx timeout [ 77.912408] Bluetooth: hci7: command 0x0419 tx timeout [ 77.912829] Bluetooth: hci3: command 0x0419 tx timeout [ 77.975934] Bluetooth: hci6: command 0x0419 tx timeout [ 77.976438] Bluetooth: hci5: command 0x0419 tx timeout [ 77.976895] Bluetooth: hci4: command 0x0419 tx timeout 11:58:08 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) [ 123.008160] audit: type=1400 audit(1663675089.109:7): avc: denied { open } for pid=3906 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.011393] audit: type=1400 audit(1663675089.109:8): avc: denied { kernel } for pid=3906 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.023223] ------------[ cut here ]------------ [ 123.023247] [ 123.023252] ====================================================== [ 123.023255] WARNING: possible circular locking dependency detected [ 123.023260] 6.0.0-rc6-next-20220920 #1 Not tainted [ 123.023266] ------------------------------------------------------ [ 123.023270] syz-executor.1/3910 is trying to acquire lock: [ 123.023276] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 123.023316] [ 123.023316] but task is already holding lock: [ 123.023319] ffff88800c758420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.023348] [ 123.023348] which lock already depends on the new lock. [ 123.023348] [ 123.023351] [ 123.023351] the existing dependency chain (in reverse order) is: [ 123.023354] [ 123.023354] -> #3 (&ctx->lock){....}-{2:2}: [ 123.023368] _raw_spin_lock+0x2a/0x40 [ 123.023389] __perf_event_task_sched_out+0x53b/0x18d0 [ 123.023401] __schedule+0xedd/0x2470 [ 123.023414] preempt_schedule_common+0x45/0xc0 [ 123.023428] __cond_resched+0x17/0x30 [ 123.023440] __mutex_lock+0xa3/0x14d0 [ 123.023454] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.023467] do_syscall_64+0x3b/0x90 [ 123.023482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.023501] [ 123.023501] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 123.023515] _raw_spin_lock_nested+0x30/0x40 [ 123.023532] raw_spin_rq_lock_nested+0x1e/0x30 [ 123.023545] task_fork_fair+0x63/0x4d0 [ 123.023562] sched_cgroup_fork+0x3d0/0x540 [ 123.023576] copy_process+0x4183/0x6e20 [ 123.023586] kernel_clone+0xe7/0x890 [ 123.023596] user_mode_thread+0xad/0xf0 [ 123.023607] rest_init+0x24/0x250 [ 123.023617] arch_call_rest_init+0xf/0x14 [ 123.023632] start_kernel+0x4c1/0x4e6 [ 123.023644] secondary_startup_64_no_verify+0xe0/0xeb [ 123.023659] [ 123.023659] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 123.023672] _raw_spin_lock_irqsave+0x39/0x60 [ 123.023689] try_to_wake_up+0xab/0x1930 [ 123.023702] up+0x75/0xb0 [ 123.023714] __up_console_sem+0x6e/0x80 [ 123.023729] console_unlock+0x46a/0x590 [ 123.023745] do_con_write+0xc05/0x1d50 [ 123.023758] con_write+0x21/0x40 [ 123.023768] n_tty_write+0x4d4/0xfe0 [ 123.023784] file_tty_write.constprop.0+0x49c/0x8f0 [ 123.023797] vfs_write+0x9c3/0xd90 [ 123.023817] ksys_write+0x127/0x250 [ 123.023834] do_syscall_64+0x3b/0x90 [ 123.023849] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.023868] [ 123.023868] -> #0 ((console_sem).lock){....}-{2:2}: [ 123.023881] __lock_acquire+0x2a02/0x5e70 [ 123.023898] lock_acquire+0x1a2/0x530 [ 123.023913] _raw_spin_lock_irqsave+0x39/0x60 [ 123.023930] down_trylock+0xe/0x70 [ 123.023942] __down_trylock_console_sem+0x3b/0xd0 [ 123.023958] vprintk_emit+0x16b/0x560 [ 123.023974] vprintk+0x84/0xa0 [ 123.023990] _printk+0xba/0xf1 [ 123.024000] report_bug.cold+0x72/0xab [ 123.024016] handle_bug+0x3c/0x70 [ 123.024030] exc_invalid_op+0x14/0x50 [ 123.024046] asm_exc_invalid_op+0x16/0x20 [ 123.024056] group_sched_out.part.0+0x2c7/0x460 [ 123.024067] ctx_sched_out+0x8f1/0xc10 [ 123.024077] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.024089] __schedule+0xedd/0x2470 [ 123.024101] preempt_schedule_common+0x45/0xc0 [ 123.024115] __cond_resched+0x17/0x30 [ 123.024127] __mutex_lock+0xa3/0x14d0 [ 123.024140] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.024153] do_syscall_64+0x3b/0x90 [ 123.024168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.024187] [ 123.024187] other info that might help us debug this: [ 123.024187] [ 123.024190] Chain exists of: [ 123.024190] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 123.024190] [ 123.024204] Possible unsafe locking scenario: [ 123.024204] [ 123.024207] CPU0 CPU1 [ 123.024209] ---- ---- [ 123.024212] lock(&ctx->lock); [ 123.024217] lock(&rq->__lock); [ 123.024224] lock(&ctx->lock); [ 123.024230] lock((console_sem).lock); [ 123.024236] [ 123.024236] *** DEADLOCK *** [ 123.024236] [ 123.024238] 2 locks held by syz-executor.1/3910: [ 123.024245] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 123.024272] #1: ffff88800c758420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.024300] [ 123.024300] stack backtrace: [ 123.024303] CPU: 0 PID: 3910 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1 [ 123.024315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.024324] Call Trace: [ 123.024327] [ 123.024332] dump_stack_lvl+0x8b/0xb3 [ 123.024348] check_noncircular+0x263/0x2e0 [ 123.024365] ? format_decode+0x26c/0xb50 [ 123.024381] ? print_circular_bug+0x450/0x450 [ 123.024398] ? enable_ptr_key_workfn+0x20/0x20 [ 123.024412] ? lock_release+0x547/0x750 [ 123.024429] ? format_decode+0x26c/0xb50 [ 123.024445] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 123.024462] __lock_acquire+0x2a02/0x5e70 [ 123.024484] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 123.024506] lock_acquire+0x1a2/0x530 [ 123.024522] ? down_trylock+0xe/0x70 [ 123.024537] ? lock_release+0x750/0x750 [ 123.024557] ? vprintk+0x84/0xa0 [ 123.024574] _raw_spin_lock_irqsave+0x39/0x60 [ 123.024592] ? down_trylock+0xe/0x70 [ 123.024605] down_trylock+0xe/0x70 [ 123.024619] ? vprintk+0x84/0xa0 [ 123.024635] __down_trylock_console_sem+0x3b/0xd0 [ 123.024652] vprintk_emit+0x16b/0x560 [ 123.024671] vprintk+0x84/0xa0 [ 123.024688] _printk+0xba/0xf1 [ 123.024698] ? record_print_text.cold+0x16/0x16 [ 123.024713] ? report_bug.cold+0x66/0xab [ 123.024729] ? group_sched_out.part.0+0x2c7/0x460 [ 123.024741] report_bug.cold+0x72/0xab [ 123.024758] handle_bug+0x3c/0x70 [ 123.024774] exc_invalid_op+0x14/0x50 [ 123.024790] asm_exc_invalid_op+0x16/0x20 [ 123.024801] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.024815] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.024827] RSP: 0018:ffff88801f2cf978 EFLAGS: 00010006 [ 123.024836] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.024843] RDX: ffff88801aed9ac0 RSI: ffffffff815662c7 RDI: 0000000000000005 [ 123.024851] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 123.024859] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88800c758400 [ 123.024867] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002 [ 123.024878] ? group_sched_out.part.0+0x2c7/0x460 [ 123.024891] ? group_sched_out.part.0+0x2c7/0x460 [ 123.024904] ctx_sched_out+0x8f1/0xc10 [ 123.024917] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.024933] ? lock_is_held_type+0xd7/0x130 [ 123.024945] ? __perf_cgroup_move+0x160/0x160 [ 123.024957] ? set_next_entity+0x304/0x550 [ 123.024974] ? update_curr+0x267/0x740 [ 123.024992] ? lock_is_held_type+0xd7/0x130 [ 123.025005] __schedule+0xedd/0x2470 [ 123.025020] ? io_schedule_timeout+0x150/0x150 [ 123.025034] ? find_held_lock+0x2c/0x110 [ 123.025050] ? lock_is_held_type+0xd7/0x130 [ 123.025061] ? __cond_resched+0x17/0x30 [ 123.025075] preempt_schedule_common+0x45/0xc0 [ 123.025090] __cond_resched+0x17/0x30 [ 123.025103] __mutex_lock+0xa3/0x14d0 [ 123.025118] ? lock_is_held_type+0xd7/0x130 [ 123.025129] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.025145] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.025159] ? lock_release+0x3b2/0x750 [ 123.025177] ? __up_read+0x192/0x730 [ 123.025191] ? up_write+0x480/0x480 [ 123.025206] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 123.025226] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.025243] ? perf_compat_ioctl+0x130/0x130 [ 123.025256] ? xfd_validate_state+0x59/0x180 [ 123.025279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.025291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.025305] do_syscall_64+0x3b/0x90 [ 123.025321] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.025341] RIP: 0033:0x7f69664e6b19 [ 123.025349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.025361] RSP: 002b:00007f6963a5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.025371] RAX: ffffffffffffffda RBX: 00007f69665f9f60 RCX: 00007f69664e6b19 [ 123.025380] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 123.025387] RBP: 00007f6966540f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.025394] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.025402] R13: 00007fffda5d571f R14: 00007f6963a5c300 R15: 0000000000022000 [ 123.025415] [ 123.081420] WARNING: CPU: 0 PID: 3910 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 123.082018] Modules linked in: [ 123.082236] CPU: 0 PID: 3910 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1 [ 123.082757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.083491] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.083847] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.085026] RSP: 0018:ffff88801f2cf978 EFLAGS: 00010006 [ 123.085374] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.085843] RDX: ffff88801aed9ac0 RSI: ffffffff815662c7 RDI: 0000000000000005 [ 123.086306] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 123.086769] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88800c758400 [ 123.087248] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002 [ 123.087718] FS: 00007f6963a5c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 123.088243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.088623] CR2: 00007f7d2a2db260 CR3: 000000001afe6000 CR4: 0000000000350ef0 [ 123.089086] Call Trace: [ 123.089260] [ 123.089416] ctx_sched_out+0x8f1/0xc10 [ 123.089680] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.090025] ? lock_is_held_type+0xd7/0x130 [ 123.090313] ? __perf_cgroup_move+0x160/0x160 [ 123.090613] ? set_next_entity+0x304/0x550 [ 123.090902] ? update_curr+0x267/0x740 [ 123.091174] ? lock_is_held_type+0xd7/0x130 [ 123.091463] __schedule+0xedd/0x2470 [ 123.091718] ? io_schedule_timeout+0x150/0x150 [ 123.092023] ? find_held_lock+0x2c/0x110 [ 123.092298] ? lock_is_held_type+0xd7/0x130 [ 123.092582] ? __cond_resched+0x17/0x30 [ 123.092849] preempt_schedule_common+0x45/0xc0 [ 123.093156] __cond_resched+0x17/0x30 [ 123.093413] __mutex_lock+0xa3/0x14d0 [ 123.093672] ? lock_is_held_type+0xd7/0x130 [ 123.093958] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.094300] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.094622] ? lock_release+0x3b2/0x750 [ 123.094893] ? __up_read+0x192/0x730 [ 123.095159] ? up_write+0x480/0x480 [ 123.095408] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 123.095752] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.096088] ? perf_compat_ioctl+0x130/0x130 [ 123.096386] ? xfd_validate_state+0x59/0x180 [ 123.096696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.097041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.097388] do_syscall_64+0x3b/0x90 [ 123.097646] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.097998] RIP: 0033:0x7f69664e6b19 [ 123.098251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.099431] RSP: 002b:00007f6963a5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.099928] RAX: ffffffffffffffda RBX: 00007f69665f9f60 RCX: 00007f69664e6b19 [ 123.100395] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 123.100856] RBP: 00007f6966540f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.101317] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.101776] R13: 00007fffda5d571f R14: 00007f6963a5c300 R15: 0000000000022000 [ 123.102243] [ 123.102401] irq event stamp: 2436 [ 123.102629] hardirqs last enabled at (2435): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 123.103248] hardirqs last disabled at (2436): [] __schedule+0x1225/0x2470 [ 123.103783] softirqs last enabled at (2360): [] __irq_exit_rcu+0x11b/0x180 [ 123.104336] softirqs last disabled at (2275): [] __irq_exit_rcu+0x11b/0x180 [ 123.104888] ---[ end trace 0000000000000000 ]--- 11:58:09 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x16, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) 11:58:09 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 5: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$nfs(&(0x7f00000021c0), &(0x7f0000002200)='./file0\x00', 0x0, 0x1, &(0x7f00000026c0)=[{&(0x7f0000002240)="97", 0x1}], 0x0, &(0x7f00000027c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:58:09 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:58:09 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/102400) 11:58:09 executing program 1: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@rc, 0x80, 0x0}}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r3, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9}, 0x2) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x16, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) [ 123.781868] hrtimer: interrupt took 16892 ns 11:58:10 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:58:10 executing program 5: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$nfs(&(0x7f00000021c0), &(0x7f0000002200)='./file0\x00', 0x0, 0x1, &(0x7f00000026c0)=[{&(0x7f0000002240)="97", 0x1}], 0x0, &(0x7f00000027c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:58:10 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/102400) 11:58:10 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x16, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) 11:58:10 executing program 1: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@rc, 0x80, 0x0}}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r3, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9}, 0x2) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/102400) 11:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:58:10 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:10 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 5: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$nfs(&(0x7f00000021c0), &(0x7f0000002200)='./file0\x00', 0x0, 0x1, &(0x7f00000026c0)=[{&(0x7f0000002240)="97", 0x1}], 0x0, &(0x7f00000027c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:58:10 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 1: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@rc, 0x80, 0x0}}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r3, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9}, 0x2) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:10 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:58:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001900000004000180"], 0x18}}, 0x0) 11:58:10 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:10 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 7: r0 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, 0x0, 0xfffffeed) 11:58:10 executing program 1: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 124.468340] loop5: detected capacity change from 0 to 256 11:58:10 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 11:58:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001900000004000180"], 0x18}}, 0x0) 11:58:10 executing program 7: r0 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, 0x0, 0xfffffeed) 11:58:10 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) [ 124.580374] loop5: detected capacity change from 0 to 256 11:58:10 executing program 1: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:10 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./file0\x00', 0x30000200) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = inotify_init() syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) stat(&(0x7f0000000240)='./file0\x00', 0x0) r10 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000480)) openat2(r11, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) renameat2(r10, &(0x7f00000006c0)='./file0\x00', r11, &(0x7f0000000740)='./file1\x00', 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/4096) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:58:10 executing program 7: r0 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, 0x0, 0xfffffeed) 11:58:10 executing program 4: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001900000004000180"], 0x18}}, 0x0) 11:58:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:10 executing program 7: r0 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, 0x0, 0xfffffeed) 11:58:10 executing program 1: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:10 executing program 4: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:10 executing program 3: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 124.850536] loop5: detected capacity change from 0 to 256 [ 124.859713] loop0: detected capacity change from 0 to 256 [ 124.865699] loop6: detected capacity change from 0 to 256 11:58:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 11:58:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001900000004000180"], 0x18}}, 0x0) 11:58:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:11 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) [ 124.990351] loop0: detected capacity change from 0 to 256 11:58:11 executing program 1: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 125.030383] loop5: detected capacity change from 0 to 256 [ 125.108259] loop6: detected capacity change from 0 to 256 11:58:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 11:58:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:11 executing program 3: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:11 executing program 4: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:11 executing program 2: setresgid(0x0, 0x0, 0xffffffffffffffff) 11:58:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 11:58:11 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x1000, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x5, 0x200, 0x0, 0x9e, 0x1000000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6395, 0x0, 0x0, 0x0, 0x5000004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast1, @mcast1, @remote, 0x8, 0x2, 0x400, 0x100, 0x3, 0x100000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2100c, 0x0) 11:58:11 executing program 2: setresgid(0x0, 0x0, 0xffffffffffffffff) [ 125.286988] loop0: detected capacity change from 0 to 256 11:58:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 11:58:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 11:58:11 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) syz_io_uring_setup(0x2888, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 11:58:11 executing program 3: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:58:11 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) [ 125.382603] loop6: detected capacity change from 0 to 256 11:58:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 11:58:11 executing program 2: setresgid(0x0, 0x0, 0xffffffffffffffff) 11:58:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000380)=""/98) [ 125.693305] loop5: detected capacity change from 0 to 256 [ 126.393048] Bluetooth: MGMT ver 1.22 11:58:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 11:58:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 11:58:12 executing program 2: setresgid(0x0, 0x0, 0xffffffffffffffff) 11:58:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000380)=""/98) 11:58:12 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f00000059c0)=[{{&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}}, {{&(0x7f0000002640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0) 11:58:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x190) 11:58:12 executing program 5: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 11:58:12 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:12 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f00000059c0)=[{{&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}}, {{&(0x7f0000002640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0) 11:58:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x190) 11:58:12 executing program 5: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 11:58:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000380)=""/98) 11:58:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:12 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:12 executing program 1: r0 = io_uring_setup(0x7edc, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x12, 0x0, 0x0) 11:58:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x190) 11:58:12 executing program 5: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 11:58:12 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f00000059c0)=[{{&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}}, {{&(0x7f0000002640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0) 11:58:12 executing program 1: r0 = io_uring_setup(0x7edc, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x12, 0x0, 0x0) 11:58:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000380)=""/98) 11:58:12 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:12 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x190) 11:58:13 executing program 1: r0 = io_uring_setup(0x7edc, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x12, 0x0, 0x0) 11:58:13 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f00000059c0)=[{{&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x80, 0x0}}, {{&(0x7f0000002640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0) 11:58:13 executing program 5: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 11:58:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 11:58:13 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 11:58:13 executing program 1: r0 = io_uring_setup(0x7edc, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x12, 0x0, 0x0) 11:58:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 11:58:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 11:58:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5452, 0x0) 11:58:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 11:58:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577fe3607e3840c7cac843d5a0e99eb97b428290a4e3bb3b6d9c2018062f333819d5f3d54a0978dcb2aa85224aed9e1b007a06237a005d1521f2f51b80629227dd675fc15c02e75b0e7247ba103c2b0f2ace2ef18f60b3c2658280c903a7865517c587d3527", 0xf2, 0x7f6a}, {&(0x7f0000000640)="1955c462869e1e706f32bc4034c45cf8e9861d14bdfcd3eef6c2fb1230c83a13b4c82445581173e5ce9586451187c911d68ef5e91cebd640eca4e2937321d8a5f824610a49a7991fab01ecf9e7610e0c21f4b310a461ed8154d3a377290552f5cde6fa8f02bab4f719679a70a924c87843b8fc9473a97bc19de8554b536b9bf99e5ab4b2f32d39c7dc0ff0fa6580611419106c4dc2dc66d31eb55b05c756aee3b0ff378fa3d4e1f440aeb65718b1e7ed70cb6174abe0", 0xb6, 0x3f}], 0x40, &(0x7f0000000780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock}, {@map_off}, {@check_relaxed}, {@map_off}, {@check_strict}, {@check_relaxed}], [{@fsname}, {@dont_appraise}, {@uid_eq}, {@appraise}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'check=strict'}}, {@smackfshat={'smackfshat', 0x3d, 'sbsector'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfstransmute'}}]}) r1 = syz_io_uring_setup(0x791f, &(0x7f00000009c0)={0x0, 0x9a4, 0x0, 0x3, 0x3c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f0000000ac0)={0x0, 0xb5ac, 0x0, 0x2, 0x4b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x280, 0x0) 11:58:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5452, 0x0) 11:58:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) [ 127.520262] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.526946] loop6: detected capacity change from 0 to 16256 [ 127.527447] ======================================================= [ 127.527447] WARNING: The mand mount option has been deprecated and [ 127.527447] and is ignored by this kernel. Remove the mand [ 127.527447] option from the mount to silence this warning. [ 127.527447] ======================================================= 11:58:13 executing program 2: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) [ 127.575340] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 11:58:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 11:58:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) [ 127.595496] loop6: detected capacity change from 0 to 16256 11:58:13 executing program 2: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 11:58:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5452, 0x0) 11:58:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) 11:58:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)='I', 0x1}, {&(0x7f00000003c0)="b6", 0x1}], 0x2}}], 0x1, 0x8000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11", 0x2}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) 11:58:13 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577fe3607e3840c7cac843d5a0e99eb97b428290a4e3bb3b6d9c2018062f333819d5f3d54a0978dcb2aa85224aed9e1b007a06237a005d1521f2f51b80629227dd675fc15c02e75b0e7247ba103c2b0f2ace2ef18f60b3c2658280c903a7865517c587d3527", 0xf2, 0x7f6a}, {&(0x7f0000000640)="1955c462869e1e706f32bc4034c45cf8e9861d14bdfcd3eef6c2fb1230c83a13b4c82445581173e5ce9586451187c911d68ef5e91cebd640eca4e2937321d8a5f824610a49a7991fab01ecf9e7610e0c21f4b310a461ed8154d3a377290552f5cde6fa8f02bab4f719679a70a924c87843b8fc9473a97bc19de8554b536b9bf99e5ab4b2f32d39c7dc0ff0fa6580611419106c4dc2dc66d31eb55b05c756aee3b0ff378fa3d4e1f440aeb65718b1e7ed70cb6174abe0", 0xb6, 0x3f}], 0x40, &(0x7f0000000780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock}, {@map_off}, {@check_relaxed}, {@map_off}, {@check_strict}, {@check_relaxed}], [{@fsname}, {@dont_appraise}, {@uid_eq}, {@appraise}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'check=strict'}}, {@smackfshat={'smackfshat', 0x3d, 'sbsector'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfstransmute'}}]}) r1 = syz_io_uring_setup(0x791f, &(0x7f00000009c0)={0x0, 0x9a4, 0x0, 0x3, 0x3c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f0000000ac0)={0x0, 0xb5ac, 0x0, 0x2, 0x4b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x280, 0x0) 11:58:13 executing program 2: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 11:58:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) [ 127.723524] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.748538] loop6: detected capacity change from 0 to 16256 11:58:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5452, 0x0) 11:58:13 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)) 11:58:13 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577fe3607e3840c7cac843d5a0e99eb97b428290a4e3bb3b6d9c2018062f333819d5f3d54a0978dcb2aa85224aed9e1b007a06237a005d1521f2f51b80629227dd675fc15c02e75b0e7247ba103c2b0f2ace2ef18f60b3c2658280c903a7865517c587d3527", 0xf2, 0x7f6a}, {&(0x7f0000000640)="1955c462869e1e706f32bc4034c45cf8e9861d14bdfcd3eef6c2fb1230c83a13b4c82445581173e5ce9586451187c911d68ef5e91cebd640eca4e2937321d8a5f824610a49a7991fab01ecf9e7610e0c21f4b310a461ed8154d3a377290552f5cde6fa8f02bab4f719679a70a924c87843b8fc9473a97bc19de8554b536b9bf99e5ab4b2f32d39c7dc0ff0fa6580611419106c4dc2dc66d31eb55b05c756aee3b0ff378fa3d4e1f440aeb65718b1e7ed70cb6174abe0", 0xb6, 0x3f}], 0x40, &(0x7f0000000780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock}, {@map_off}, {@check_relaxed}, {@map_off}, {@check_strict}, {@check_relaxed}], [{@fsname}, {@dont_appraise}, {@uid_eq}, {@appraise}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'check=strict'}}, {@smackfshat={'smackfshat', 0x3d, 'sbsector'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfstransmute'}}]}) r1 = syz_io_uring_setup(0x791f, &(0x7f00000009c0)={0x0, 0x9a4, 0x0, 0x3, 0x3c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f0000000ac0)={0x0, 0xb5ac, 0x0, 0x2, 0x4b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x280, 0x0) [ 127.809350] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.816481] loop7: detected capacity change from 0 to 16256 11:58:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) 11:58:13 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577fe3607e3840c7cac843d5a0e99eb97b428290a4e3bb3b6d9c2018062f333819d5f3d54a0978dcb2aa85224aed9e1b007a06237a005d1521f2f51b80629227dd675fc15c02e75b0e7247ba103c2b0f2ace2ef18f60b3c2658280c903a7865517c587d3527", 0xf2, 0x7f6a}, {&(0x7f0000000640)="1955c462869e1e706f32bc4034c45cf8e9861d14bdfcd3eef6c2fb1230c83a13b4c82445581173e5ce9586451187c911d68ef5e91cebd640eca4e2937321d8a5f824610a49a7991fab01ecf9e7610e0c21f4b310a461ed8154d3a377290552f5cde6fa8f02bab4f719679a70a924c87843b8fc9473a97bc19de8554b536b9bf99e5ab4b2f32d39c7dc0ff0fa6580611419106c4dc2dc66d31eb55b05c756aee3b0ff378fa3d4e1f440aeb65718b1e7ed70cb6174abe0", 0xb6, 0x3f}], 0x40, &(0x7f0000000780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock}, {@map_off}, {@check_relaxed}, {@map_off}, {@check_strict}, {@check_relaxed}], [{@fsname}, {@dont_appraise}, {@uid_eq}, {@appraise}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'check=strict'}}, {@smackfshat={'smackfshat', 0x3d, 'sbsector'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfstransmute'}}]}) r1 = syz_io_uring_setup(0x791f, &(0x7f00000009c0)={0x0, 0x9a4, 0x0, 0x3, 0x3c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f0000000ac0)={0x0, 0xb5ac, 0x0, 0x2, 0x4b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x280, 0x0) 11:58:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000c80)) 11:58:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:58:13 executing program 2: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 11:58:13 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)) [ 127.897220] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.907499] loop7: detected capacity change from 0 to 16256 11:58:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38323637333130333000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020d4f4655fd4f4655fd4f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000d4f4655fd4f4655fd4f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffd4f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) 11:58:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:58:14 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)) [ 127.997476] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 11:58:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) 11:58:14 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577fe3607e3840c7cac843d5a0e99eb97b428290a4e3bb3b6d9c2018062f333819d5f3d54a0978dcb2aa85224aed9e1b007a06237a005d1521f2f51b80629227dd675fc15c02e75b0e7247ba103c2b0f2ace2ef18f60b3c2658280c903a7865517c587d3527", 0xf2, 0x7f6a}, {&(0x7f0000000640)="1955c462869e1e706f32bc4034c45cf8e9861d14bdfcd3eef6c2fb1230c83a13b4c82445581173e5ce9586451187c911d68ef5e91cebd640eca4e2937321d8a5f824610a49a7991fab01ecf9e7610e0c21f4b310a461ed8154d3a377290552f5cde6fa8f02bab4f719679a70a924c87843b8fc9473a97bc19de8554b536b9bf99e5ab4b2f32d39c7dc0ff0fa6580611419106c4dc2dc66d31eb55b05c756aee3b0ff378fa3d4e1f440aeb65718b1e7ed70cb6174abe0", 0xb6, 0x3f}], 0x40, &(0x7f0000000780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock}, {@map_off}, {@check_relaxed}, {@map_off}, {@check_strict}, {@check_relaxed}], [{@fsname}, {@dont_appraise}, {@uid_eq}, {@appraise}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'check=strict'}}, {@smackfshat={'smackfshat', 0x3d, 'sbsector'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfstransmute'}}]}) r1 = syz_io_uring_setup(0x791f, &(0x7f00000009c0)={0x0, 0x9a4, 0x0, 0x3, 0x3c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f0000000ac0)={0x0, 0xb5ac, 0x0, 0x2, 0x4b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x280, 0x0) 11:58:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000180), 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 11:58:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000c80)) 11:58:14 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="d87ea9df3befd0ebae72", 0xa}], 0x8400, &(0x7f0000000180)={[{@sbsector={'sbsector', 0x3d, 0x4092}}, {@check_strict}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}]}) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x10, 0x400) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x5d, 0x5, &(0x7f0000000700)=[{&(0x7f0000000300)="9fb9bf12abcac1a63f06dd37b39773c1c87bcd9c1d413a90289edd38becf759c38ee4232c510fab31896e0fde2bd89cb1a21cf859c3c82b14ee9baf61bec20d70fcc3216e18f15094245994002022e973c84cbcf387a77ee920cc5253221c4fa0f11578fb50aee116392bcca1db64f66366df51dcedb504db5799871cc4fdd96acb1a8658912823241dcedcb0c8cc6b58fc481e02fad89eba44d59d458e0", 0x9e, 0xffffffffffff8000}, {&(0x7f00000003c0)="22feb0e19f30e422156231cac82094e4b1e5bfd86e1e7c546bd467f46d9064b69aef0d39040f344910455e16b4085b52221f3c2c4c9b7254566cd54a19551806e7754635f8c1dec6849b21", 0x4b, 0x7}, {&(0x7f0000000440)="5442ac806cd192072da37f103ec757b131c003f94752c75849de432f47cd299976e0e970058ef22cdf24ae151f896b9cc233d873078237023e87680b8738599cf15de7c4023219bda34e01d816384aa0920445e55b68fea3c34925e21ab17ba6b871ef476f256fc9e6afa852fd7a56c2ecdd63308c28e448df660482ee4ca30e9aeffb7240ecc966fa78a678bc6480bd9aeca12a7195c01c9f0d4934125afe4dc8287abae7290e12778c2873a49340ac1ffd6a56a9f4d293c7cb87ebb12d72ab9331d5156b96cd9223d091a2637d72ca5a094a75e389cfffc769d64af44acbcbd50bb24a3146f5f3866ccbd8be39444a178e883a", 0xf4, 0x100}, {&(0x7f0000000540)="bf4bf24ec5ded8fdce966f4a93333f9373519b77b01931d93c20d5a346293e4e2cde9c3cdd6f98822dc3c2f0efc80ee82a6a6dd20f8e98a27a8bc4f2ccdcac292f1ab88892f4ddf28de4548660820e670e66724a99fbc8dda1f724f83279353dc178babda4a10283fa21bdb56e13e6885ab758dd6c09620838a13d6603f1e3e2261933faaaadd9cdc417277ba577 VM DIAGNOSIS: 11:58:09 Registers: info registers vcpu 0 RAX=000000000000007d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1551 RDI=ffffffff87643ba0 RBP=ffffffff87643b60 RSP=ffff88801f2cf3c8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000007d R11=0000000000000001 R12=000000000000007d R13=ffffffff87643b60 R14=0000000000000010 R15=ffffffff822b1540 RIP=ffffffff822b15a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6963a5c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d2a2db260 CR3=000000001afe6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000100 RCX=0000000000000cc0 RDX=0000000000000001 RSI=0000000000092cc0 RDI=0000000000092cc0 RBP=ffff888010475400 RSP=ffff88801053f710 R8 =0000000000000000 R9 =ffff888010475400 R10=ffff88806c6fa548 R11=0000000000000001 R12=ffff888007c4f780 R13=ffffffff817bd37d R14=0000000000092cc0 R15=0000000000092cc0 RIP=ffffffff817827b6 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4367ec1f0 CR3=000000003e9de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000