Warning: Permanently added '[localhost]:24963' (ECDSA) to the list of known hosts. 2022/09/21 13:08:33 fuzzer started 2022/09/21 13:08:33 dialing manager at localhost:40289 syzkaller login: [ 35.936608] cgroup: Unknown subsys name 'net' [ 36.057381] cgroup: Unknown subsys name 'rlimit' 2022/09/21 13:08:48 syscalls: 2215 2022/09/21 13:08:48 code coverage: enabled 2022/09/21 13:08:48 comparison tracing: enabled 2022/09/21 13:08:48 extra coverage: enabled 2022/09/21 13:08:48 setuid sandbox: enabled 2022/09/21 13:08:48 namespace sandbox: enabled 2022/09/21 13:08:48 Android sandbox: enabled 2022/09/21 13:08:48 fault injection: enabled 2022/09/21 13:08:48 leak checking: enabled 2022/09/21 13:08:48 net packet injection: enabled 2022/09/21 13:08:48 net device setup: enabled 2022/09/21 13:08:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 13:08:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 13:08:48 USB emulation: enabled 2022/09/21 13:08:48 hci packet injection: enabled 2022/09/21 13:08:48 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 13:08:48 802.15.4 emulation: enabled 2022/09/21 13:08:48 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 13:08:49 fetching corpus: 50, signal 25123/28415 (executing program) 2022/09/21 13:08:49 fetching corpus: 100, signal 39970/44253 (executing program) 2022/09/21 13:08:49 fetching corpus: 150, signal 54372/59278 (executing program) 2022/09/21 13:08:49 fetching corpus: 200, signal 57934/63838 (executing program) 2022/09/21 13:08:49 fetching corpus: 250, signal 63060/69717 (executing program) 2022/09/21 13:08:49 fetching corpus: 300, signal 66490/73893 (executing program) 2022/09/21 13:08:50 fetching corpus: 350, signal 72238/80150 (executing program) 2022/09/21 13:08:50 fetching corpus: 400, signal 78111/86260 (executing program) 2022/09/21 13:08:50 fetching corpus: 450, signal 81525/90185 (executing program) 2022/09/21 13:08:50 fetching corpus: 500, signal 86947/95692 (executing program) 2022/09/21 13:08:50 fetching corpus: 550, signal 89246/98387 (executing program) 2022/09/21 13:08:50 fetching corpus: 600, signal 91313/100850 (executing program) 2022/09/21 13:08:50 fetching corpus: 650, signal 93360/103220 (executing program) 2022/09/21 13:08:50 fetching corpus: 700, signal 96957/106849 (executing program) 2022/09/21 13:08:51 fetching corpus: 750, signal 98668/108794 (executing program) 2022/09/21 13:08:51 fetching corpus: 800, signal 100889/111182 (executing program) 2022/09/21 13:08:51 fetching corpus: 850, signal 103977/114079 (executing program) 2022/09/21 13:08:51 fetching corpus: 900, signal 106509/116500 (executing program) 2022/09/21 13:08:51 fetching corpus: 950, signal 108624/118664 (executing program) 2022/09/21 13:08:51 fetching corpus: 1000, signal 110644/120586 (executing program) 2022/09/21 13:08:51 fetching corpus: 1050, signal 112445/122264 (executing program) 2022/09/21 13:08:52 fetching corpus: 1100, signal 114727/124292 (executing program) 2022/09/21 13:08:52 fetching corpus: 1150, signal 116942/126259 (executing program) 2022/09/21 13:08:52 fetching corpus: 1200, signal 119219/128167 (executing program) 2022/09/21 13:08:52 fetching corpus: 1250, signal 120978/129748 (executing program) 2022/09/21 13:08:52 fetching corpus: 1300, signal 123375/131595 (executing program) 2022/09/21 13:08:52 fetching corpus: 1350, signal 124765/132819 (executing program) 2022/09/21 13:08:52 fetching corpus: 1400, signal 126330/134174 (executing program) 2022/09/21 13:08:52 fetching corpus: 1450, signal 127201/134955 (executing program) 2022/09/21 13:08:53 fetching corpus: 1500, signal 128736/136077 (executing program) 2022/09/21 13:08:53 fetching corpus: 1550, signal 129866/136950 (executing program) 2022/09/21 13:08:53 fetching corpus: 1600, signal 132594/138824 (executing program) 2022/09/21 13:08:53 fetching corpus: 1650, signal 133560/139511 (executing program) 2022/09/21 13:08:53 fetching corpus: 1700, signal 135581/140773 (executing program) 2022/09/21 13:08:53 fetching corpus: 1750, signal 137855/142201 (executing program) 2022/09/21 13:08:53 fetching corpus: 1800, signal 139808/143428 (executing program) 2022/09/21 13:08:54 fetching corpus: 1850, signal 140899/144026 (executing program) 2022/09/21 13:08:54 fetching corpus: 1900, signal 141819/144622 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145101 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145161 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145217 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145279 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145336 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145389 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145450 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145508 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145559 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145616 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145680 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145735 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145782 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145843 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145905 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/145975 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146026 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146088 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146148 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146209 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146281 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146323 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146374 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146437 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146492 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146551 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146602 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146655 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146714 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146765 (executing program) 2022/09/21 13:08:54 fetching corpus: 1942, signal 142766/146765 (executing program) 2022/09/21 13:08:57 starting 8 fuzzer processes 13:08:57 executing program 0: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 13:08:57 executing program 1: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 13:08:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) 13:08:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, r4, 0x3) [ 59.410561] audit: type=1400 audit(1663765737.404:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:08:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r0, &(0x7f00000012c0), &(0x7f0000001300)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 13:08:57 executing program 5: socket$netlink(0x10, 0x3, 0x0) 13:08:57 executing program 6: r0 = io_uring_setup(0x11fb, &(0x7f0000000000)={0x0, 0x37bd, 0x8}) io_uring_setup(0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x200000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9827c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40602, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xfffffffffffffffb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x2, 0x2, 0x40, 0xd156, 0x6, 0x2, 0x4, 0x3f, 0x8000, 0x731, 0x2, 0x3, 0x401, 0x7}, 0x8, [0x0]}) write$nbd(0xffffffffffffffff, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x2, 0x2, "bda22c9572293a30f46ee37c0061fed974ca7726dff726fe66e7b67fb4da090f8dca908628af690189f8df418e4271713571b5e6db4887bc6e21ed7483630ef3ca96ae20fdfd60a3496b65bb388a713bb54146eadf8c46e336f0a1cbac3f147c29e9c0a72f011d22c60e7d5dd15da62c5e9c606f102a4fadf05174d0646ca437f8c826d61af6ff5f2e5b4c65d37da9f87cb3f76fada35053d88acc27a9eb534db41d05c527"}, 0xb5) syz_io_uring_setup(0x353b, &(0x7f00000002c0)={0x0, 0x1124, 0x8, 0x2, 0x363}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r3 = socket(0x10, 0xb, 0x3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x2003}, 0x4) accept(r0, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000004c0)=0x80) 13:08:57 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 60.783702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.785943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.787924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.791101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.794736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.796117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.801301] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.831911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.835204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.836830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.842442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.845017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.847279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.862226] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.864717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.866456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.878329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.878837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.881890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.883300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.883614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.885856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.888956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.892171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.893415] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.895316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.896798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.898759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.902584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.904479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.906198] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.909998] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.926634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.926705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.929832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.937222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.938787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.940899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.943760] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.945288] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.946265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.955959] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.981263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.989102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.990856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.991983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.994407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.995637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.000046] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.003690] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.004947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.007672] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.008982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.014089] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.031939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.067247] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.855482] Bluetooth: hci0: command 0x0409 tx timeout [ 62.920258] Bluetooth: hci5: command 0x0409 tx timeout [ 62.920270] Bluetooth: hci1: command 0x0409 tx timeout [ 62.983255] Bluetooth: hci4: command 0x0409 tx timeout [ 62.983513] Bluetooth: hci3: command 0x0409 tx timeout [ 62.984310] Bluetooth: hci2: command 0x0409 tx timeout [ 63.047362] Bluetooth: hci7: command 0x0409 tx timeout [ 63.111267] Bluetooth: hci6: command 0x0409 tx timeout [ 64.903668] Bluetooth: hci0: command 0x041b tx timeout [ 64.967807] Bluetooth: hci5: command 0x041b tx timeout [ 64.967972] Bluetooth: hci1: command 0x041b tx timeout [ 65.031263] Bluetooth: hci2: command 0x041b tx timeout [ 65.032096] Bluetooth: hci3: command 0x041b tx timeout [ 65.032933] Bluetooth: hci4: command 0x041b tx timeout [ 65.095275] Bluetooth: hci7: command 0x041b tx timeout [ 65.159197] Bluetooth: hci6: command 0x041b tx timeout [ 66.951292] Bluetooth: hci0: command 0x040f tx timeout [ 67.015206] Bluetooth: hci5: command 0x040f tx timeout [ 67.015762] Bluetooth: hci1: command 0x040f tx timeout [ 67.079225] Bluetooth: hci4: command 0x040f tx timeout [ 67.079819] Bluetooth: hci3: command 0x040f tx timeout [ 67.080356] Bluetooth: hci2: command 0x040f tx timeout [ 67.143213] Bluetooth: hci7: command 0x040f tx timeout [ 67.207226] Bluetooth: hci6: command 0x040f tx timeout [ 68.999205] Bluetooth: hci0: command 0x0419 tx timeout [ 69.064193] Bluetooth: hci1: command 0x0419 tx timeout [ 69.064649] Bluetooth: hci5: command 0x0419 tx timeout [ 69.127459] Bluetooth: hci2: command 0x0419 tx timeout [ 69.127921] Bluetooth: hci3: command 0x0419 tx timeout [ 69.128342] Bluetooth: hci4: command 0x0419 tx timeout [ 69.191173] Bluetooth: hci7: command 0x0419 tx timeout [ 69.255179] Bluetooth: hci6: command 0x0419 tx timeout 13:09:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r0, &(0x7f00000012c0), &(0x7f0000001300)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 13:09:51 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:09:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r0, &(0x7f00000012c0), &(0x7f0000001300)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 13:09:51 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:09:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r0, &(0x7f00000012c0), &(0x7f0000001300)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 13:09:51 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:09:51 executing program 4: syz_io_uring_setup(0x2143, &(0x7f0000001bc0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) [ 113.925940] audit: type=1400 audit(1663765791.920:7): avc: denied { open } for pid=3914 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.928759] audit: type=1400 audit(1663765791.920:8): avc: denied { kernel } for pid=3914 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.940818] ------------[ cut here ]------------ [ 113.940840] [ 113.940843] ====================================================== [ 113.940847] WARNING: possible circular locking dependency detected [ 113.940852] 6.0.0-rc6-next-20220921 #1 Not tainted [ 113.940858] ------------------------------------------------------ [ 113.940862] syz-executor.3/3918 is trying to acquire lock: [ 113.940868] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 113.940908] [ 113.940908] but task is already holding lock: [ 113.940911] ffff888008b16020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.940941] [ 113.940941] which lock already depends on the new lock. [ 113.940941] [ 113.940944] [ 113.940944] the existing dependency chain (in reverse order) is: [ 113.940947] [ 113.940947] -> #3 (&ctx->lock){....}-{2:2}: [ 113.940962] _raw_spin_lock+0x2a/0x40 [ 113.940982] __perf_event_task_sched_out+0x53b/0x18d0 [ 113.940995] __schedule+0xedd/0x2470 [ 113.941008] schedule+0xda/0x1b0 [ 113.941022] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.941034] syscall_exit_to_user_mode+0x19/0x40 [ 113.941046] do_syscall_64+0x48/0x90 [ 113.941063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.941076] [ 113.941076] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 113.941090] _raw_spin_lock_nested+0x30/0x40 [ 113.941110] raw_spin_rq_lock_nested+0x1e/0x30 [ 113.941127] task_fork_fair+0x63/0x4d0 [ 113.941145] sched_cgroup_fork+0x3d0/0x540 [ 113.941160] copy_process+0x4183/0x6e20 [ 113.941171] kernel_clone+0xe7/0x890 [ 113.941181] user_mode_thread+0xad/0xf0 [ 113.941191] rest_init+0x24/0x250 [ 113.941203] arch_call_rest_init+0xf/0x14 [ 113.941220] start_kernel+0x4c1/0x4e6 [ 113.941234] secondary_startup_64_no_verify+0xe0/0xeb [ 113.941250] [ 113.941250] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 113.941264] _raw_spin_lock_irqsave+0x39/0x60 [ 113.941284] try_to_wake_up+0xab/0x1930 [ 113.941298] up+0x75/0xb0 [ 113.941312] __up_console_sem+0x6e/0x80 [ 113.941330] console_unlock+0x46a/0x590 [ 113.941347] vt_ioctl+0x2822/0x2ca0 [ 113.941361] tty_ioctl+0x7c4/0x1700 [ 113.941374] __x64_sys_ioctl+0x19a/0x210 [ 113.941390] do_syscall_64+0x3b/0x90 [ 113.941408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.941419] [ 113.941419] -> #0 ((console_sem).lock){....}-{2:2}: [ 113.941434] __lock_acquire+0x2a02/0x5e70 [ 113.941452] lock_acquire+0x1a2/0x530 [ 113.941470] _raw_spin_lock_irqsave+0x39/0x60 [ 113.941489] down_trylock+0xe/0x70 [ 113.941504] __down_trylock_console_sem+0x3b/0xd0 [ 113.941522] vprintk_emit+0x16b/0x560 [ 113.941540] vprintk+0x84/0xa0 [ 113.941557] _printk+0xba/0xf1 [ 113.941568] report_bug.cold+0x72/0xab [ 113.941585] handle_bug+0x3c/0x70 [ 113.941602] exc_invalid_op+0x14/0x50 [ 113.941620] asm_exc_invalid_op+0x16/0x20 [ 113.941631] group_sched_out.part.0+0x2c7/0x460 [ 113.941642] ctx_sched_out+0x8f1/0xc10 [ 113.941653] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.941666] __schedule+0xedd/0x2470 [ 113.941679] schedule+0xda/0x1b0 [ 113.941692] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.941703] syscall_exit_to_user_mode+0x19/0x40 [ 113.941715] do_syscall_64+0x48/0x90 [ 113.941733] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.941744] [ 113.941744] other info that might help us debug this: [ 113.941744] [ 113.941747] Chain exists of: [ 113.941747] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 113.941747] [ 113.941763] Possible unsafe locking scenario: [ 113.941763] [ 113.941766] CPU0 CPU1 [ 113.941768] ---- ---- [ 113.941771] lock(&ctx->lock); [ 113.941776] lock(&rq->__lock); [ 113.941783] lock(&ctx->lock); [ 113.941790] lock((console_sem).lock); [ 113.941796] [ 113.941796] *** DEADLOCK *** [ 113.941796] [ 113.941798] 2 locks held by syz-executor.3/3918: [ 113.941805] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 113.941835] #1: ffff888008b16020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.941865] [ 113.941865] stack backtrace: [ 113.941868] CPU: 0 PID: 3918 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 113.941881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 113.941889] Call Trace: [ 113.941893] [ 113.941897] dump_stack_lvl+0x8b/0xb3 [ 113.941916] check_noncircular+0x263/0x2e0 [ 113.941934] ? format_decode+0x26c/0xb50 [ 113.941951] ? print_circular_bug+0x450/0x450 [ 113.941970] ? enable_ptr_key_workfn+0x20/0x20 [ 113.941987] ? format_decode+0x26c/0xb50 [ 113.942004] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 113.942023] __lock_acquire+0x2a02/0x5e70 [ 113.942047] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 113.942071] lock_acquire+0x1a2/0x530 [ 113.942089] ? down_trylock+0xe/0x70 [ 113.942107] ? lock_release+0x750/0x750 [ 113.942129] ? vprintk+0x84/0xa0 [ 113.942149] _raw_spin_lock_irqsave+0x39/0x60 [ 113.942169] ? down_trylock+0xe/0x70 [ 113.942186] down_trylock+0xe/0x70 [ 113.942202] ? vprintk+0x84/0xa0 [ 113.942221] __down_trylock_console_sem+0x3b/0xd0 [ 113.942239] vprintk_emit+0x16b/0x560 [ 113.942260] vprintk+0x84/0xa0 [ 113.942279] _printk+0xba/0xf1 [ 113.942290] ? record_print_text.cold+0x16/0x16 [ 113.942306] ? report_bug.cold+0x66/0xab [ 113.942325] ? group_sched_out.part.0+0x2c7/0x460 [ 113.942337] report_bug.cold+0x72/0xab [ 113.942356] handle_bug+0x3c/0x70 [ 113.942374] exc_invalid_op+0x14/0x50 [ 113.942393] asm_exc_invalid_op+0x16/0x20 [ 113.942405] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.942420] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.942432] RSP: 0018:ffff88803fcffc48 EFLAGS: 00010006 [ 113.942441] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.942449] RDX: ffff88800ff7d040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 113.942458] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 113.942465] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888008b16000 [ 113.942473] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 113.942485] ? group_sched_out.part.0+0x2c7/0x460 [ 113.942498] ? group_sched_out.part.0+0x2c7/0x460 [ 113.942512] ctx_sched_out+0x8f1/0xc10 [ 113.942525] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.942542] ? lock_is_held_type+0xd7/0x130 [ 113.942555] ? __perf_cgroup_move+0x160/0x160 [ 113.942568] ? set_next_entity+0x304/0x550 [ 113.942587] ? update_curr+0x267/0x740 [ 113.942607] ? lock_is_held_type+0xd7/0x130 [ 113.942621] __schedule+0xedd/0x2470 [ 113.942641] ? io_schedule_timeout+0x150/0x150 [ 113.942660] ? rcu_read_lock_sched_held+0x3e/0x80 [ 113.942682] schedule+0xda/0x1b0 [ 113.942697] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.942709] syscall_exit_to_user_mode+0x19/0x40 [ 113.942722] do_syscall_64+0x48/0x90 [ 113.942741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.942753] RIP: 0033:0x7fb4e5258b19 [ 113.942762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.942773] RSP: 002b:00007fb4e27ce218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.942785] RAX: 0000000000000001 RBX: 00007fb4e536bf68 RCX: 00007fb4e5258b19 [ 113.942793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e536bf6c [ 113.942801] RBP: 00007fb4e536bf60 R08: 000000000000000e R09: 0000000000000000 [ 113.942808] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fb4e536bf6c [ 113.942816] R13: 00007ffdc805e28f R14: 00007fb4e27ce300 R15: 0000000000022000 [ 113.942829] [ 113.997877] WARNING: CPU: 0 PID: 3918 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 113.998553] Modules linked in: [ 113.998801] CPU: 0 PID: 3918 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 113.999393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 114.000195] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 114.000599] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 114.001924] RSP: 0018:ffff88803fcffc48 EFLAGS: 00010006 [ 114.002313] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 114.002828] RDX: ffff88800ff7d040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 114.003358] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 114.003874] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888008b16000 [ 114.004393] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 114.004905] FS: 00007fb4e27ce700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 114.005486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.005908] CR2: 00007fce7b047040 CR3: 000000001db70000 CR4: 0000000000350ef0 [ 114.006425] Call Trace: [ 114.006620] [ 114.006792] ctx_sched_out+0x8f1/0xc10 [ 114.007084] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.007476] ? lock_is_held_type+0xd7/0x130 [ 114.007797] ? __perf_cgroup_move+0x160/0x160 [ 114.008132] ? set_next_entity+0x304/0x550 [ 114.008458] ? update_curr+0x267/0x740 [ 114.008763] ? lock_is_held_type+0xd7/0x130 [ 114.009081] __schedule+0xedd/0x2470 [ 114.009364] ? io_schedule_timeout+0x150/0x150 [ 114.009711] ? rcu_read_lock_sched_held+0x3e/0x80 [ 114.010070] schedule+0xda/0x1b0 [ 114.010335] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.010697] syscall_exit_to_user_mode+0x19/0x40 [ 114.011053] do_syscall_64+0x48/0x90 [ 114.011344] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.011728] RIP: 0033:0x7fb4e5258b19 [ 114.012003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.013321] RSP: 002b:00007fb4e27ce218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.013876] RAX: 0000000000000001 RBX: 00007fb4e536bf68 RCX: 00007fb4e5258b19 [ 114.014388] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e536bf6c [ 114.014910] RBP: 00007fb4e536bf60 R08: 000000000000000e R09: 0000000000000000 [ 114.015444] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fb4e536bf6c [ 114.015959] R13: 00007ffdc805e28f R14: 00007fb4e27ce300 R15: 0000000000022000 [ 114.016491] [ 114.016671] irq event stamp: 2558 [ 114.016924] hardirqs last enabled at (2557): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 114.017606] hardirqs last disabled at (2558): [] __schedule+0x1225/0x2470 [ 114.018205] softirqs last enabled at (2272): [] __irq_exit_rcu+0x11b/0x180 [ 114.018833] softirqs last disabled at (2267): [] __irq_exit_rcu+0x11b/0x180 [ 114.019474] ---[ end trace 0000000000000000 ]--- [ 114.393489] syz-executor.3 (3918) used greatest stack depth: 24408 bytes left [ 114.598207] rfkill: input handler disabled [ 114.602059] rfkill: input handler enabled [ 114.607200] rfkill: input handler disabled [ 114.614433] rfkill: input handler enabled 13:09:52 executing program 0: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 13:09:52 executing program 4: syz_io_uring_setup(0x2143, &(0x7f0000001bc0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) 13:09:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:09:52 executing program 1: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 13:09:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, r4, 0x3) 13:09:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) 13:09:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f8010020004000000000000000000080002943a05df153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e880325132510000e880325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010003ae970325132510000e970325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020003ae970325132510000e970325107000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020003ae970325132510000e970325108002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20003ae970325132510000e97032511a0064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010003ae970325132510000e97032510300000000002e2e20202020202020202010003ae970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020003ae970325132510000e970325104001a040000", 0x80, 0x1600}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1800}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4400}], 0x0, &(0x7f0000010d00)) 13:09:52 executing program 6: r0 = io_uring_setup(0x11fb, &(0x7f0000000000)={0x0, 0x37bd, 0x8}) io_uring_setup(0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x200000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9827c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40602, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xfffffffffffffffb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x2, 0x2, 0x40, 0xd156, 0x6, 0x2, 0x4, 0x3f, 0x8000, 0x731, 0x2, 0x3, 0x401, 0x7}, 0x8, [0x0]}) write$nbd(0xffffffffffffffff, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x2, 0x2, "bda22c9572293a30f46ee37c0061fed974ca7726dff726fe66e7b67fb4da090f8dca908628af690189f8df418e4271713571b5e6db4887bc6e21ed7483630ef3ca96ae20fdfd60a3496b65bb388a713bb54146eadf8c46e336f0a1cbac3f147c29e9c0a72f011d22c60e7d5dd15da62c5e9c606f102a4fadf05174d0646ca437f8c826d61af6ff5f2e5b4c65d37da9f87cb3f76fada35053d88acc27a9eb534db41d05c527"}, 0xb5) syz_io_uring_setup(0x353b, &(0x7f00000002c0)={0x0, 0x1124, 0x8, 0x2, 0x363}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r3 = socket(0x10, 0xb, 0x3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x2003}, 0x4) accept(r0, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000004c0)=0x80) [ 114.734861] loop5: detected capacity change from 0 to 128 [ 114.745870] rfkill: input handler disabled [ 114.746632] rfkill: input handler enabled 13:09:52 executing program 0: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 13:09:52 executing program 6: r0 = io_uring_setup(0x11fb, &(0x7f0000000000)={0x0, 0x37bd, 0x8}) io_uring_setup(0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x200000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9827c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40602, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xfffffffffffffffb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x2, 0x2, 0x40, 0xd156, 0x6, 0x2, 0x4, 0x3f, 0x8000, 0x731, 0x2, 0x3, 0x401, 0x7}, 0x8, [0x0]}) write$nbd(0xffffffffffffffff, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x2, 0x2, "bda22c9572293a30f46ee37c0061fed974ca7726dff726fe66e7b67fb4da090f8dca908628af690189f8df418e4271713571b5e6db4887bc6e21ed7483630ef3ca96ae20fdfd60a3496b65bb388a713bb54146eadf8c46e336f0a1cbac3f147c29e9c0a72f011d22c60e7d5dd15da62c5e9c606f102a4fadf05174d0646ca437f8c826d61af6ff5f2e5b4c65d37da9f87cb3f76fada35053d88acc27a9eb534db41d05c527"}, 0xb5) syz_io_uring_setup(0x353b, &(0x7f00000002c0)={0x0, 0x1124, 0x8, 0x2, 0x363}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r3 = socket(0x10, 0xb, 0x3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x2003}, 0x4) accept(r0, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000004c0)=0x80) [ 114.826906] rfkill: input handler disabled [ 114.831313] rfkill: input handler enabled [ 114.889430] syz-executor.3 (3978) used greatest stack depth: 24344 bytes left 13:09:52 executing program 4: syz_io_uring_setup(0x2143, &(0x7f0000001bc0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) 13:09:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) 13:09:52 executing program 1: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 13:09:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 13:09:52 executing program 6: r0 = io_uring_setup(0x11fb, &(0x7f0000000000)={0x0, 0x37bd, 0x8}) io_uring_setup(0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x200000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9827c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40602, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xfffffffffffffffb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x2, 0x2, 0x40, 0xd156, 0x6, 0x2, 0x4, 0x3f, 0x8000, 0x731, 0x2, 0x3, 0x401, 0x7}, 0x8, [0x0]}) write$nbd(0xffffffffffffffff, &(0x7f0000000200)={0x67446698, 0x1, 0x1, 0x2, 0x2, "bda22c9572293a30f46ee37c0061fed974ca7726dff726fe66e7b67fb4da090f8dca908628af690189f8df418e4271713571b5e6db4887bc6e21ed7483630ef3ca96ae20fdfd60a3496b65bb388a713bb54146eadf8c46e336f0a1cbac3f147c29e9c0a72f011d22c60e7d5dd15da62c5e9c606f102a4fadf05174d0646ca437f8c826d61af6ff5f2e5b4c65d37da9f87cb3f76fada35053d88acc27a9eb534db41d05c527"}, 0xb5) syz_io_uring_setup(0x353b, &(0x7f00000002c0)={0x0, 0x1124, 0x8, 0x2, 0x363}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r3 = socket(0x10, 0xb, 0x3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x2003}, 0x4) accept(r0, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000004c0)=0x80) 13:09:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:09:52 executing program 0: futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 13:09:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, r4, 0x3) [ 114.949037] rfkill: input handler disabled [ 114.951336] rfkill: input handler enabled 13:09:52 executing program 1: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 13:09:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 13:09:52 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0) 13:09:52 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:52 executing program 4: syz_io_uring_setup(0x2143, &(0x7f0000001bc0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) 13:09:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) [ 115.026396] loop0: detected capacity change from 0 to 40 13:09:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 13:09:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0) [ 115.105852] syz-executor.0: attempt to access beyond end of device [ 115.105852] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.107091] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:09:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), 0xffffffffffffffff) [ 115.153146] hrtimer: interrupt took 19998 ns 13:09:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 13:09:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.227836] loop0: detected capacity change from 0 to 40 [ 115.264489] syz-executor.0: attempt to access beyond end of device [ 115.264489] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.265579] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:09:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.300499] loop5: detected capacity change from 0 to 40 13:09:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, r4, 0x3) [ 115.315714] loop7: detected capacity change from 0 to 40 13:09:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 115.324452] loop4: detected capacity change from 0 to 40 [ 115.353674] loop0: detected capacity change from 0 to 40 13:09:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 115.395040] syz-executor.5: attempt to access beyond end of device [ 115.395040] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.396110] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 115.410836] syz-executor.0: attempt to access beyond end of device [ 115.410836] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.411844] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:09:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:09:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 115.440732] syz-executor.4: attempt to access beyond end of device [ 115.440732] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.441820] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 115.452823] syz-executor.7: attempt to access beyond end of device [ 115.452823] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.454310] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:09:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.537758] loop5: detected capacity change from 0 to 40 13:09:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.573944] loop4: detected capacity change from 0 to 40 [ 115.606285] syz-executor.5: attempt to access beyond end of device [ 115.606285] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.607431] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 115.622002] syz-executor.4: attempt to access beyond end of device [ 115.622002] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.623034] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 115.669429] loop0: detected capacity change from 0 to 40 13:09:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.680958] loop6: detected capacity change from 0 to 40 [ 115.689113] loop7: detected capacity change from 0 to 40 [ 115.695491] loop5: detected capacity change from 0 to 40 13:09:53 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.699704] loop4: detected capacity change from 0 to 40 [ 115.714670] loop1: detected capacity change from 0 to 40 [ 115.720640] loop2: detected capacity change from 0 to 40 [ 115.764065] syz-executor.0: attempt to access beyond end of device [ 115.764065] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.765156] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 115.771715] syz-executor.6: attempt to access beyond end of device [ 115.771715] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 115.772715] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 115.879861] loop5: detected capacity change from 0 to 40 13:09:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 3: r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0) 13:09:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 115.942845] loop2: detected capacity change from 0 to 40 [ 115.962069] loop7: detected capacity change from 0 to 40 13:09:53 executing program 3: r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0) 13:09:53 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 116.026233] loop6: detected capacity change from 0 to 40 13:09:54 executing program 3: r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0) 13:09:54 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 116.156625] loop5: detected capacity change from 0 to 40 [ 116.164294] loop2: detected capacity change from 0 to 40 13:09:54 executing program 3: r0 = syz_io_uring_setup(0x677c, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000545cb90"], 0x0) 13:09:54 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000780)) sendto$unix(0xffffffffffffffff, &(0x7f00000007c0)="7f932140a376e1cf2fcf1b334978eb5445892bebd89cad19b0fd1f7fd1e8183b45565d396bd414b1e1251d683802d62b34feb569c780897d300dbcb2a0cf3e7f82cfe111f2cc64b637b2f61a2aba842bf4a4fd5192128da6e84aa9c108fbc4cd1988a6b7d4c76fe9344d8181f0946e7d3dcd46e9697698a28efc5419f1fbab550ef52015eda018c6ccf3c9015f818799a8d7dc42ae7319656f636685cfaeffaa7cdf60e556bd661eaee61bb634a2019e7ec5c57f2c0ebaf69f09e6dd7951c11ecebd127d8911d24c0ca71951c24c31e0bcb25310bd0862290acf5741dbae9ad846b409cd28a10e561b5b1d2674679eb4abe124fb0ab016d4b5afa8331998660e38eeefe5bacbf68e0144c167c504fb5ea4a3eac6d31ed935cd8c86746452e2e235dba5f7fe18aacfa43fdcc57ad60ac6a06b90e495e7ec8b95776779c4ff573a41f0de1d57444f301cc8dd39c771bb1ba919827495477c8c1c3333e22e17374cbb23f8ff746b606de2aaa800c346627cae04b04b877193c46a8d0a511e79a309dffedeefe265bc35e0c9c1e570cacf9e2d2d3af4802f93bb48ab0c5d482ccce296ec4c6a462d40fc886991211a503bec1ad23da4118dcda513dd5c23850cbc646559a5f26a8138430b45c4ec57babad9bb54555898e0c9fe715bfd8bd4d01b090b79dc4bc131a7d9cace3c2189ab2bc9cba54e02a085c80ec9ba5563bdc78d6a475c7bfea08fafcab0cca6c9d08b1ac08a227303eb390e4b74abafd0bc4b1e322f856de6a64702a4f9285934bc3da8c55abe80c7a05f6fcafe76187f7b24f4051b04c47cd647586bb48c5bc7ec8a036051366c4bcfa53ab2e9b17db005fd073baecb5925eb7616ab5c38677d5b1a6c7cd5e70fd19b2185106b012979e9db82a7d20c3e1b209c2275e988f64253f5a5d8089468a5706be2ec429d7c61b5af49516d0f3e2dc0e5e5cb6d3fc53617cd58c186933dde7dd3d32947312a991cdf1e5475c089116c817601f3955f4cb8f489f932ab420e690223c63f5f5eb5e7030fc8cfdb6a43f8b0a796f23a5c5d0d5c69c3e0e7bc8bbeda97173c31530bd08955a8a92b8aa5c006a377f4e4708905bf650c300ddca80c5a864fd397a91f1a92a9e87e9ca0fc15bd851bf38efd711ced2bdbe582952bef09710d74516a34e35715ef79648ca968aeb68a261c9d8de619d8a0e74000cf2dec1c0d1a5cc0755f52993c4f411c2717c5333cf7ab1942b4005babde99912c44c5ace338e2accccf3dfca1587bde0ee945f1295047c7a350f3a1231263f1d4030d28b8ec5101bb42ab2fe6c8e6b2bfeabf9cffb420d744d370caf36aef84d4743d7102fea122f44d4f1a14e57f93b24add41b6d3ef32ede07e5bcd59260c11830045e18ffde67ec55bfd69f8109b2574253704900045cf7fb7a13df509cfea738c6cf041fe98a589da3e00af2d5102b9ffd72080cd526e5c0b75707ae6d09b328dacb7555108f696c123ca65d6ff4629459d9294978401d9d46b643dd4f438dddfbcf776f119d14137f73655c2ce575c96e23cdbb173f4df0e20e194c8672d2e31bd80447b7f5b5474841ffc633fa05fdcb6ccd9c12690007a13235fc24507602511a8e8a67bd68ed3338b314c803873466aa60c9217690978035760d8427e6d5910f0a068c742c845f9bd28d7dfc71b5c78dc444818ee46460c811c35328164257285b132d0dc41daac78bec4156f4b8ae9cd3a651f7d0ebaccf0fbf4502fd4cfeeacb7fd691bc962262dda97422dada6752e6985403a736b3405fe60b50c9156117aa10d62fa7ec9080e4c343690cf5858d92f0634b073e19bc594ed0ccfd68c281e52aa676e4d7a5feb3104f83d1da98f9f4cb49dc0ea20bb5576a8e468494c0cddf1f34d6c04e99c3b3fa818ede88575ae31d34e262eabfbd71e114d8d31f4ae1f6d2ebc437d35b6c90c1e6d2834d1a8b264b505841aba81b52dd80b4bfbe62c896483e04022a96392c0ffbf5ac5e6400536e51798c3b9af190dc6776f42e553dff777c6fac01e677dbced82aa2d24e3360c3ef6ae5ca1e5e1fd29a70cb3376a933905bd7841df835cc2395c4a4798626930cb7485dd9d868b1250f05934f76e22b0e631efbb0b5c246bda023a75c6f93ef47fa0ba0f6a863990cb6b453ad55f627f6b4082e6a351fdecb01fa0cb2d56c69b7851356b48bd73fed108aace415b567b51fa82ff8ef6814527a056ad1843fc0e849847eda848b8113e167c3d628b1e9d3332631ce789b36612cd588d80509cdd36c2cd23a52691440f938b7a5475b6acca79d8006dacab057014068c09152eedbf9c184ff3a631b0ddbaa0b6e089fd036cab9c463e85e68b2c1f34919978c121e884ba158e0da067b5379c3a81deb7f750b759d0baf004dbdc1ed40624212e906a6ba609e0fffb45231ab0dbeaa428b28b994b22e1c1e1453cc906e96a0443555f95bef25403e21f0740bd7059404a0faca103591128b7d79289649f9f9d7bb4c74f3a67bf62bdfdad59709385b699a7bbc269ff0928af10709287a1b3b2a4aa985987c9f2246e321f3283c53db207f86b55930f17c17c3813405335b70f95bc9bcf093dcb7ef176955775269bc5fbf977a061aa13d52250536bc422b391f5a4de6da5ce50ed88131b1e5eaf9ffbf2a9403141972cb473c57ba063e4d22ea5bde17aecba9c334099113fea93b52767d9552ee993aeded736a81bd74a4580d5b2a02d95bc0294fc8f709468819d7669b46e5489a3b1c94d497fa22022af300f8a4576e605cb920e16296950c9b4448e5d4daee8dcc0a90c1ab34c4f82849d09deb710b406a397eeba5088c4ec16f468c7359fb86755e7c3e1de6205a4b15f7730264464bd082b367e4f01cb49f27e95f27bc21059ce3c1faa7f58879577bcc2d79e691f0ae4eb26d8b77d46bf0b47eba968109a664c4fe6a78e697a1c27a6e3d26df1333095a2d3cc286c754ba4d9bf7ced8a8b1499f0e9cc79cfcc3b1fdab97a9a31b0cc304c66edbb98a69a81161160e5615349204dda3933bce98c0665966afb759c8a54a0b244ce266ea43f29aaf6b8637a7ab01d78673968ec03d6b136ec719c1c92dc67ef164c25583ad5631e08e404497d46b6fa0e5cc921e9d13a54a0773c782fca430e5cdc0a1d759766ddda031e7653b177977e2a2ff559dee3324efa65fddc82f15aead45402300b81a0768a5357f38b8a221ada85195d64d715514cf0b54675f64e78197b9c87826856c7e880141fad0d06129c2408f06a210eff5d21cbf059c98243c530347239a06e4e71e98c01cbc63062a1be66b1c34f9c4a3e2603ef692e6eeee84cd9d45c72b58f73704b44594c7a65558c0c14e91f8e87cc28f14a7757ee9725ea6352f1b881753d0330b9f4df5dd780433a594c25c1aaba6c2a466d8f80f96bb681273f0d5d02c08f85b34bd0d8c684215c26b3d4e545c6c1a046f9a2930dbeae8e87c8d1aaad8cd3472f68feb8438211480cccca08fc768ad2996bceca162dbb79c1e5c4e394d2b9d3a4e33d0989fd3feef0a43c24be55f0d81286f110a9be15c3aa8145bc877de3f9abba5a280205ac9e47b1e03440a320105a88871993ae4306b7d4ce8c84a6d6946610c33fce1b399d4cb792f29c3dce85e0b1bc23307becedbc34f97e5bae46fe8b9a66e4368f15b2b90f437e265f26f02f98b98181eb66aa7da52c17d2eaf68e58d72d104c50eef08a33d4a2dcd4d82d54708fcbca6720d6ff927e11094adc82c08696016df0ad7fda0eb4901fde5c0d15a41ab81454c70246a038cf29ba55d2769554370e63e5d2a8cd22e0caf4f3bf1b561f9c0133fa6c00ff7351d3d051d63a36e26e0cdd8be9ad62814c44df3ca0777bceec73dc28acc922de2bed5ecad3f3e74507fdd217477f267b2edf0a6e4327449682d7b06be42d194f33dc21cf6b8830fe594a11ab189a5cb7322d249976d613aa7175275ee774abcfe91844ec9d56108396765cd02cd8f1286f04c11e055eaa1f201cd839af35b3946cf6bab4213657493b4e5f7145cb9f674878c1ab22807df451b88a9145bd3bafb9097ab61a7bbabbd35b0605c40f54bb7d63c29f3d044f26a629c8ed7572f38a9b8a5de9f7db6276a267ee6f104020a17e6e2b15ccdc8909d9c79e251fb97b7d0202096a5dd8dbd47d59d2bb78c5963c830d50bd443ca503421f5a3db92f1a83b2543b3f381968d185f28d3f0e551f8efb1dfcc19b4d91247a94f641dddb66e3f6894710f69557d8a66db61682f9efe388e55988104182673f73b4543e868c847def6e90228ef81d5c06f90c919802ff94f99ec215642bc40c18f89f33e06c0664bf016bc8ded4cbedf3866f6ab43eb3cc60a317860925db9ac332d591119cd5bd41bd94c2e89bb4a81d5bc6295372d753c1e793c7a82867f2fa63231cc6115ceec55cbb56dcdba5f7566529d9f69e6ff05c298b11a203d34e829e0dbc98dde03f233956064ec78ef4c26366392d05e626d958e2c9a99785a61d53db2c453a9ffd2cb529a067436e3f68dc50de2efcfaa46228f99af6925c5569c07d381df2ad0f6e04de161c6ab550920e4bc8ed04bd60872c6893a8a9339bec13643fa1d4309745f97e8122e393926b41761bec8ff703d5e655259aaf0fedfa34b95d2331be0d433a2cfea695ba76a35987fd0ca96c4e72e32eab79ae941e8f01660c910b53d2654b74fc4c4799d1eaa3e24d9562b84b44fca1e244adc13fc91c32398d926aa12a2a770b6e4f2dd86dda7a54b78dcbb4c7b000bc077e1d8c58883ff443a2a5b47591531cf8a781b104a57cbd787e438a125fd2916a864c1a1fb54c9d84c587883549c6e22125994aaa52cbe6aec14de400423eb5b16de7aaccfb129bedc272dde18e7a1920f3d3d4068f99a7cbac8218bed7d7aa1e5b9426c9fa220d1adeb6031f18427554b166b75c6f848c8cd86f11d10d42e2654210de197f83bebb78a048bd702443f51f4b9a895b24a56043529fc25bc65b0b2bbd5b3091602f976a92f90d40432e006f2d69c0b5ac7ff360b4cc5d007f69a3aad7dad1e013b718905cc189b11b47144a3387accf10bc2b1f0770cf26e6c28e71c22dc72b81bdb47859429254f2363a1d532ef6df9e2b29701a4ffbb33bb88ed68ea18dc11901e13b0bbb2358d38fb425da2485651ad7f642379f5337a7b847bcb499aaa4d85d297fe3028b7d27b166367440a18f1f00dc3892e72c4cd0d007fdbf5d7c80e4dd83837e8fa295052750651604069325660dc51533c47456234188e6cd382aab5fb8279b47757a2eb485c353eb8cf2d318ab89ce122caa2ae57828ffe8566a2c1d6a6d18934b281490aaf436d3417fb9b1c3a19e7aa0a039cedb7bc669ee658769dfff407f55ecfc2e9e796b2637816f8f2c910ef42207da3ac05dc5972a3deec971a06f23d13c179bd459fb6ae81ca801bbd5f0e3edf244c4f047e51f9a100eb1915cb74d6a4ea809a521042d6f3e476d4dab7c2e28e7798de64a0a4d62af3dc25de87e5d8a27b2e14d484c32fa14be25aa4e8a7d9e51044c3d49436a26ec71ace34a159ceac834f300e08d9e3c8df16dc0e2ca27fe2d606c5e28753d5cd3c9ac9346d9bd12a3583e1f35d52c38f6d49c6a4f38463fa2510ca56ef16f8d46886908b37a8bc518904ecac23aea72b4e724ddfcb2ada6480b983bd2dd72a0d99058de3312035cf38c4b0a1272aa3b2150dadeb75219d58addc5fe919f02cf531ba674357f80081bb95ac1ae50cdf8870c53166118ff572d961a8a32a03420598e8a6de2942e0d647c2feb261521", 0x1000, 0x2000008c, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x500, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000380)=0x1000) chdir(&(0x7f0000000100)='./file0/file0\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0xc7, 0x1, 0x5, 0x0, 0x1, 0x48080, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1fb, 0x1, @perf_config_ext={0x7, 0x3f52c1e0}, 0x10080, 0x8, 0x8, 0x6, 0x3, 0x6, 0xbda, 0x0, 0x2, 0x0, 0x6}, r4, 0xa, r2, 0x9) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) 13:09:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000300)) [ 116.623193] loop5: detected capacity change from 0 to 40 [ 116.642732] loop2: detected capacity change from 0 to 256 [ 116.647154] loop1: detected capacity change from 0 to 40 13:09:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:09:54 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 13:09:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 116.663106] loop6: detected capacity change from 0 to 40 [ 116.676465] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 116.717282] audit: type=1400 audit(1663765794.705:9): avc: denied { write } for pid=4104 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:09:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:09:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 13:09:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 13:09:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000300)) 13:09:54 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$inet6(0xa, 0x1, 0x0) fchown(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:09:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000780)) sendto$unix(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0x2000008c, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x500, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000380)=0x1000) chdir(&(0x7f0000000100)='./file0/file0\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0xc7, 0x1, 0x5, 0x0, 0x1, 0x48080, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1fb, 0x1, @perf_config_ext={0x7, 0x3f52c1e0}, 0x10080, 0x8, 0x8, 0x6, 0x3, 0x6, 0xbda, 0x0, 0x2, 0x0, 0x6}, r4, 0xa, r2, 0x9) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) 13:09:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000300)) 13:09:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 116.859334] loop1: detected capacity change from 0 to 40 [ 116.873034] loop2: detected capacity change from 0 to 256 [ 116.888695] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:09:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000300)) 13:09:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 13:09:55 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000780)) sendto$unix(0xffffffffffffffff, &(0x7f00000007c0)="7f932140a376e1cf2fcf1b334978eb5445892bebd89cad19b0fd1f7fd1e8183b45565d396bd414b1e1251d683802d62b34feb569c780897d300dbcb2a0cf3e7f82cfe111f2cc64b637b2f61a2aba842bf4a4fd5192128da6e84aa9c108fbc4cd1988a6b7d4c76fe9344d8181f0946e7d3dcd46e9697698a28efc5419f1fbab550ef52015eda018c6ccf3c9015f818799a8d7dc42ae7319656f636685cfaeffaa7cdf60e556bd661eaee61bb634a2019e7ec5c57f2c0ebaf69f09e6dd7951c11ecebd127d8911d24c0ca71951c24c31e0bcb25310bd0862290acf5741dbae9ad846b409cd28a10e561b5b1d2674679eb4abe124fb0ab016d4b5afa8331998660e38eeefe5bacbf68e0144c167c504fb5ea4a3eac6d31ed935cd8c86746452e2e235dba5f7fe18aacfa43fdcc57ad60ac6a06b90e495e7ec8b95776779c4ff573a41f0de1d57444f301cc8dd39c771bb1ba919827495477c8c1c3333e22e17374cbb23f8ff746b606de2aaa800c346627cae04b04b877193c46a8d0a511e79a309dffedeefe265bc35e0c9c1e570cacf9e2d2d3af4802f93bb48ab0c5d482ccce296ec4c6a462d40fc886991211a503bec1ad23da4118dcda513dd5c23850cbc646559a5f26a8138430b45c4ec57babad9bb54555898e0c9fe715bfd8bd4d01b090b79dc4bc131a7d9cace3c2189ab2bc9cba54e02a085c80ec9ba5563bdc78d6a475c7bfea08fafcab0cca6c9d08b1ac08a227303eb390e4b74abafd0bc4b1e322f856de6a64702a4f9285934bc3da8c55abe80c7a05f6fcafe76187f7b24f4051b04c47cd647586bb48c5bc7ec8a036051366c4bcfa53ab2e9b17db005fd073baecb5925eb7616ab5c38677d5b1a6c7cd5e70fd19b2185106b012979e9db82a7d20c3e1b209c2275e988f64253f5a5d8089468a5706be2ec429d7c61b5af49516d0f3e2dc0e5e5cb6d3fc53617cd58c186933dde7dd3d32947312a991cdf1e5475c089116c817601f3955f4cb8f489f932ab420e690223c63f5f5eb5e7030fc8cfdb6a43f8b0a796f23a5c5d0d5c69c3e0e7bc8bbeda97173c31530bd08955a8a92b8aa5c006a377f4e4708905bf650c300ddca80c5a864fd397a91f1a92a9e87e9ca0fc15bd851bf38efd711ced2bdbe582952bef09710d74516a34e35715ef79648ca968aeb68a261c9d8de619d8a0e74000cf2dec1c0d1a5cc0755f52993c4f411c2717c5333cf7ab1942b4005babde99912c44c5ace338e2accccf3dfca1587bde0ee945f1295047c7a350f3a1231263f1d4030d28b8ec5101bb42ab2fe6c8e6b2bfeabf9cffb420d744d370caf36aef84d4743d7102fea122f44d4f1a14e57f93b24add41b6d3ef32ede07e5bcd59260c11830045e18ffde67ec55bfd69f8109b2574253704900045cf7fb7a13df509cfea738c6cf041fe98a589da3e00af2d5102b9ffd72080cd526e5c0b75707ae6d09b328dacb7555108f696c123ca65d6ff4629459d9294978401d9d46b643dd4f438dddfbcf776f119d14137f73655c2ce575c96e23cdbb173f4df0e20e194c8672d2e31bd80447b7f5b5474841ffc633fa05fdcb6ccd9c12690007a13235fc24507602511a8e8a67bd68ed3338b314c803873466aa60c9217690978035760d8427e6d5910f0a068c742c845f9bd28d7dfc71b5c78dc444818ee46460c811c35328164257285b132d0dc41daac78bec4156f4b8ae9cd3a651f7d0ebaccf0fbf4502fd4cfeeacb7fd691bc962262dda97422dada6752e6985403a736b3405fe60b50c9156117aa10d62fa7ec9080e4c343690cf5858d92f0634b073e19bc594ed0ccfd68c281e52aa676e4d7a5feb3104f83d1da98f9f4cb49dc0ea20bb5576a8e468494c0cddf1f34d6c04e99c3b3fa818ede88575ae31d34e262eabfbd71e114d8d31f4ae1f6d2ebc437d35b6c90c1e6d2834d1a8b264b505841aba81b52dd80b4bfbe62c896483e04022a96392c0ffbf5ac5e6400536e51798c3b9af190dc6776f42e553dff777c6fac01e677dbced82aa2d24e3360c3ef6ae5ca1e5e1fd29a70cb3376a933905bd7841df835cc2395c4a4798626930cb7485dd9d868b1250f05934f76e22b0e631efbb0b5c246bda023a75c6f93ef47fa0ba0f6a863990cb6b453ad55f627f6b4082e6a351fdecb01fa0cb2d56c69b7851356b48bd73fed108aace415b567b51fa82ff8ef6814527a056ad1843fc0e849847eda848b8113e167c3d628b1e9d3332631ce789b36612cd588d80509cdd36c2cd23a52691440f938b7a5475b6acca79d8006dacab057014068c09152eedbf9c184ff3a631b0ddbaa0b6e089fd036cab9c463e85e68b2c1f34919978c121e884ba158e0da067b5379c3a81deb7f750b759d0baf004dbdc1ed40624212e906a6ba609e0fffb45231ab0dbeaa428b28b994b22e1c1e1453cc906e96a0443555f95bef25403e21f0740bd7059404a0faca103591128b7d79289649f9f9d7bb4c74f3a67bf62bdfdad59709385b699a7bbc269ff0928af10709287a1b3b2a4aa985987c9f2246e321f3283c53db207f86b55930f17c17c3813405335b70f95bc9bcf093dcb7ef176955775269bc5fbf977a061aa13d52250536bc422b391f5a4de6da5ce50ed88131b1e5eaf9ffbf2a9403141972cb473c57ba063e4d22ea5bde17aecba9c334099113fea93b52767d9552ee993aeded736a81bd74a4580d5b2a02d95bc0294fc8f709468819d7669b46e5489a3b1c94d497fa22022af300f8a4576e605cb920e16296950c9b4448e5d4daee8dcc0a90c1ab34c4f82849d09deb710b406a397eeba5088c4ec16f468c7359fb86755e7c3e1de6205a4b15f7730264464bd082b367e4f01cb49f27e95f27bc21059ce3c1faa7f58879577bcc2d79e691f0ae4eb26d8b77d46bf0b47eba968109a664c4fe6a78e697a1c27a6e3d26df1333095a2d3cc286c754ba4d9bf7ced8a8b1499f0e9cc79cfcc3b1fdab97a9a31b0cc304c66edbb98a69a81161160e5615349204dda3933bce98c0665966afb759c8a54a0b244ce266ea43f29aaf6b8637a7ab01d78673968ec03d6b136ec719c1c92dc67ef164c25583ad5631e08e404497d46b6fa0e5cc921e9d13a54a0773c782fca430e5cdc0a1d759766ddda031e7653b177977e2a2ff559dee3324efa65fddc82f15aead45402300b81a0768a5357f38b8a221ada85195d64d715514cf0b54675f64e78197b9c87826856c7e880141fad0d06129c2408f06a210eff5d21cbf059c98243c530347239a06e4e71e98c01cbc63062a1be66b1c34f9c4a3e2603ef692e6eeee84cd9d45c72b58f73704b44594c7a65558c0c14e91f8e87cc28f14a7757ee9725ea6352f1b881753d0330b9f4df5dd780433a594c25c1aaba6c2a466d8f80f96bb681273f0d5d02c08f85b34bd0d8c684215c26b3d4e545c6c1a046f9a2930dbeae8e87c8d1aaad8cd3472f68feb8438211480cccca08fc768ad2996bceca162dbb79c1e5c4e394d2b9d3a4e33d0989fd3feef0a43c24be55f0d81286f110a9be15c3aa8145bc877de3f9abba5a280205ac9e47b1e03440a320105a88871993ae4306b7d4ce8c84a6d6946610c33fce1b399d4cb792f29c3dce85e0b1bc23307becedbc34f97e5bae46fe8b9a66e4368f15b2b90f437e265f26f02f98b98181eb66aa7da52c17d2eaf68e58d72d104c50eef08a33d4a2dcd4d82d54708fcbca6720d6ff927e11094adc82c08696016df0ad7fda0eb4901fde5c0d15a41ab81454c70246a038cf29ba55d2769554370e63e5d2a8cd22e0caf4f3bf1b561f9c0133fa6c00ff7351d3d051d63a36e26e0cdd8be9ad62814c44df3ca0777bceec73dc28acc922de2bed5ecad3f3e74507fdd217477f267b2edf0a6e4327449682d7b06be42d194f33dc21cf6b8830fe594a11ab189a5cb7322d249976d613aa7175275ee774abcfe91844ec9d56108396765cd02cd8f1286f04c11e055eaa1f201cd839af35b3946cf6bab4213657493b4e5f7145cb9f674878c1ab22807df451b88a9145bd3bafb9097ab61a7bbabbd35b0605c40f54bb7d63c29f3d044f26a629c8ed7572f38a9b8a5de9f7db6276a267ee6f104020a17e6e2b15ccdc8909d9c79e251fb97b7d0202096a5dd8dbd47d59d2bb78c5963c830d50bd443ca503421f5a3db92f1a83b2543b3f381968d185f28d3f0e551f8efb1dfcc19b4d91247a94f641dddb66e3f6894710f69557d8a66db61682f9efe388e55988104182673f73b4543e868c847def6e90228ef81d5c06f90c919802ff94f99ec215642bc40c18f89f33e06c0664bf016bc8ded4cbedf3866f6ab43eb3cc60a317860925db9ac332d591119cd5bd41bd94c2e89bb4a81d5bc6295372d753c1e793c7a82867f2fa63231cc6115ceec55cbb56dcdba5f7566529d9f69e6ff05c298b11a203d34e829e0dbc98dde03f233956064ec78ef4c26366392d05e626d958e2c9a99785a61d53db2c453a9ffd2cb529a067436e3f68dc50de2efcfaa46228f99af6925c5569c07d381df2ad0f6e04de161c6ab550920e4bc8ed04bd60872c6893a8a9339bec13643fa1d4309745f97e8122e393926b41761bec8ff703d5e655259aaf0fedfa34b95d2331be0d433a2cfea695ba76a35987fd0ca96c4e72e32eab79ae941e8f01660c910b53d2654b74fc4c4799d1eaa3e24d9562b84b44fca1e244adc13fc91c32398d926aa12a2a770b6e4f2dd86dda7a54b78dcbb4c7b000bc077e1d8c58883ff443a2a5b47591531cf8a781b104a57cbd787e438a125fd2916a864c1a1fb54c9d84c587883549c6e22125994aaa52cbe6aec14de400423eb5b16de7aaccfb129bedc272dde18e7a1920f3d3d4068f99a7cbac8218bed7d7aa1e5b9426c9fa220d1adeb6031f18427554b166b75c6f848c8cd86f11d10d42e2654210de197f83bebb78a048bd702443f51f4b9a895b24a56043529fc25bc65b0b2bbd5b3091602f976a92f90d40432e006f2d69c0b5ac7ff360b4cc5d007f69a3aad7dad1e013b718905cc189b11b47144a3387accf10bc2b1f0770cf26e6c28e71c22dc72b81bdb47859429254f2363a1d532ef6df9e2b29701a4ffbb33bb88ed68ea18dc11901e13b0bbb2358d38fb425da2485651ad7f642379f5337a7b847bcb499aaa4d85d297fe3028b7d27b166367440a18f1f00dc3892e72c4cd0d007fdbf5d7c80e4dd83837e8fa295052750651604069325660dc51533c47456234188e6cd382aab5fb8279b47757a2eb485c353eb8cf2d318ab89ce122caa2ae57828ffe8566a2c1d6a6d18934b281490aaf436d3417fb9b1c3a19e7aa0a039cedb7bc669ee658769dfff407f55ecfc2e9e796b2637816f8f2c910ef42207da3ac05dc5972a3deec971a06f23d13c179bd459fb6ae81ca801bbd5f0e3edf244c4f047e51f9a100eb1915cb74d6a4ea809a521042d6f3e476d4dab7c2e28e7798de64a0a4d62af3dc25de87e5d8a27b2e14d484c32fa14be25aa4e8a7d9e51044c3d49436a26ec71ace34a159ceac834f300e08d9e3c8df16dc0e2ca27fe2d606c5e28753d5cd3c9ac9346d9bd12a3583e1f35d52c38f6d49c6a4f38463fa2510ca56ef16f8d46886908b37a8bc518904ecac23aea72b4e724ddfcb2ada6480b983bd2dd72a0d99058de3312035cf38c4b0a1272aa3b2150dadeb75219d58addc5fe919f02cf531ba674357f80081bb95ac1ae50cdf8870c53166118ff572d961a8a32a03420598e8a6de2942e0d647c2feb261521", 0x1000, 0x2000008c, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x500, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000380)=0x1000) chdir(&(0x7f0000000100)='./file0/file0\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0xc7, 0x1, 0x5, 0x0, 0x1, 0x48080, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1fb, 0x1, @perf_config_ext={0x7, 0x3f52c1e0}, 0x10080, 0x8, 0x8, 0x6, 0x3, 0x6, 0xbda, 0x0, 0x2, 0x0, 0x6}, r4, 0xa, r2, 0x9) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) 13:09:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000780)) sendto$unix(0xffffffffffffffff, &(0x7f00000007c0)="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 VM DIAGNOSIS: 13:09:52 Registers: info registers vcpu 0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803fcff698 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb4e27ce700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce7b047040 CR3=000000001db70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fb4e533f7c0 00007fb4e533f7c8 YMM02=0000000000000000 0000000000000000 00007fb4e533f7e0 00007fb4e533f7c0 YMM03=0000000000000000 0000000000000000 00007fb4e533f7c8 00007fb4e533f7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88803fca7a20 RDI=ffff88803fca79e8 RBP=ffff88803fca79d8 RSP=ffff88803fca78b0 R8 =ffffffff85e3072c R9 =ffffffff85e30730 R10=ffffed1007f94f3d R11=ffff88803fca79c0 R12=ffff88803fca79c1 R13=ffff88803fca79e0 R14=ffff88803fca7980 R15=0000000000000001 RIP=ffffffff8111bd03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7ed385368 CR3=0000000017458000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000