Warning: Permanently added '[localhost]:5672' (ECDSA) to the list of known hosts. 2022/09/21 14:08:12 fuzzer started 2022/09/21 14:08:13 dialing manager at localhost:40289 syzkaller login: [ 38.904829] cgroup: Unknown subsys name 'net' [ 38.998670] cgroup: Unknown subsys name 'rlimit' 2022/09/21 14:08:26 syscalls: 2215 2022/09/21 14:08:26 code coverage: enabled 2022/09/21 14:08:26 comparison tracing: enabled 2022/09/21 14:08:26 extra coverage: enabled 2022/09/21 14:08:26 setuid sandbox: enabled 2022/09/21 14:08:26 namespace sandbox: enabled 2022/09/21 14:08:26 Android sandbox: enabled 2022/09/21 14:08:26 fault injection: enabled 2022/09/21 14:08:26 leak checking: enabled 2022/09/21 14:08:26 net packet injection: enabled 2022/09/21 14:08:26 net device setup: enabled 2022/09/21 14:08:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 14:08:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 14:08:26 USB emulation: enabled 2022/09/21 14:08:26 hci packet injection: enabled 2022/09/21 14:08:26 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 14:08:26 802.15.4 emulation: enabled 2022/09/21 14:08:26 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 14:08:26 fetching corpus: 50, signal 23816/27330 (executing program) 2022/09/21 14:08:26 fetching corpus: 100, signal 37912/42719 (executing program) 2022/09/21 14:08:26 fetching corpus: 150, signal 47240/53345 (executing program) 2022/09/21 14:08:26 fetching corpus: 200, signal 54294/61585 (executing program) 2022/09/21 14:08:26 fetching corpus: 250, signal 59994/68474 (executing program) 2022/09/21 14:08:26 fetching corpus: 300, signal 69858/79092 (executing program) 2022/09/21 14:08:26 fetching corpus: 350, signal 74970/85101 (executing program) 2022/09/21 14:08:27 fetching corpus: 400, signal 78411/89465 (executing program) 2022/09/21 14:08:27 fetching corpus: 450, signal 81003/93001 (executing program) 2022/09/21 14:08:27 fetching corpus: 500, signal 85361/98035 (executing program) 2022/09/21 14:08:27 fetching corpus: 550, signal 90087/103411 (executing program) 2022/09/21 14:08:27 fetching corpus: 600, signal 92809/106931 (executing program) 2022/09/21 14:08:27 fetching corpus: 650, signal 95015/109891 (executing program) 2022/09/21 14:08:27 fetching corpus: 700, signal 96952/112583 (executing program) 2022/09/21 14:08:27 fetching corpus: 750, signal 100305/116427 (executing program) 2022/09/21 14:08:27 fetching corpus: 800, signal 102226/119040 (executing program) 2022/09/21 14:08:28 fetching corpus: 850, signal 105265/122512 (executing program) 2022/09/21 14:08:28 fetching corpus: 900, signal 108440/126006 (executing program) 2022/09/21 14:08:28 fetching corpus: 950, signal 112266/130061 (executing program) 2022/09/21 14:08:28 fetching corpus: 1000, signal 113701/132063 (executing program) 2022/09/21 14:08:28 fetching corpus: 1050, signal 116330/134923 (executing program) 2022/09/21 14:08:28 fetching corpus: 1100, signal 118262/137263 (executing program) 2022/09/21 14:08:28 fetching corpus: 1150, signal 119951/139444 (executing program) 2022/09/21 14:08:29 fetching corpus: 1200, signal 122226/141898 (executing program) 2022/09/21 14:08:29 fetching corpus: 1250, signal 124769/144643 (executing program) 2022/09/21 14:08:29 fetching corpus: 1300, signal 126639/146721 (executing program) 2022/09/21 14:08:29 fetching corpus: 1350, signal 128662/148942 (executing program) 2022/09/21 14:08:29 fetching corpus: 1400, signal 130321/150806 (executing program) 2022/09/21 14:08:29 fetching corpus: 1450, signal 132146/152751 (executing program) 2022/09/21 14:08:29 fetching corpus: 1500, signal 134136/154773 (executing program) 2022/09/21 14:08:29 fetching corpus: 1550, signal 134907/155933 (executing program) 2022/09/21 14:08:30 fetching corpus: 1600, signal 136036/157333 (executing program) 2022/09/21 14:08:30 fetching corpus: 1650, signal 137192/158789 (executing program) 2022/09/21 14:08:30 fetching corpus: 1700, signal 138865/160499 (executing program) 2022/09/21 14:08:30 fetching corpus: 1750, signal 140365/162125 (executing program) 2022/09/21 14:08:30 fetching corpus: 1800, signal 141401/163407 (executing program) 2022/09/21 14:08:30 fetching corpus: 1850, signal 142517/164735 (executing program) 2022/09/21 14:08:30 fetching corpus: 1900, signal 144875/166874 (executing program) 2022/09/21 14:08:30 fetching corpus: 1950, signal 145780/167987 (executing program) 2022/09/21 14:08:31 fetching corpus: 2000, signal 147052/169250 (executing program) 2022/09/21 14:08:31 fetching corpus: 2050, signal 149038/170918 (executing program) 2022/09/21 14:08:31 fetching corpus: 2100, signal 150462/172291 (executing program) 2022/09/21 14:08:31 fetching corpus: 2150, signal 151056/173107 (executing program) 2022/09/21 14:08:31 fetching corpus: 2200, signal 152572/174414 (executing program) 2022/09/21 14:08:31 fetching corpus: 2250, signal 153306/175351 (executing program) 2022/09/21 14:08:31 fetching corpus: 2300, signal 154378/176367 (executing program) 2022/09/21 14:08:31 fetching corpus: 2350, signal 155853/177617 (executing program) 2022/09/21 14:08:32 fetching corpus: 2400, signal 156943/178640 (executing program) 2022/09/21 14:08:32 fetching corpus: 2450, signal 157898/179563 (executing program) 2022/09/21 14:08:32 fetching corpus: 2500, signal 158678/180365 (executing program) 2022/09/21 14:08:32 fetching corpus: 2550, signal 159667/181264 (executing program) 2022/09/21 14:08:32 fetching corpus: 2600, signal 161039/182300 (executing program) 2022/09/21 14:08:32 fetching corpus: 2650, signal 161843/183075 (executing program) 2022/09/21 14:08:32 fetching corpus: 2700, signal 162997/183966 (executing program) 2022/09/21 14:08:32 fetching corpus: 2750, signal 164058/184856 (executing program) 2022/09/21 14:08:33 fetching corpus: 2800, signal 165145/185650 (executing program) 2022/09/21 14:08:33 fetching corpus: 2850, signal 165538/186144 (executing program) 2022/09/21 14:08:33 fetching corpus: 2900, signal 167027/187124 (executing program) 2022/09/21 14:08:33 fetching corpus: 2950, signal 168040/187861 (executing program) 2022/09/21 14:08:33 fetching corpus: 3000, signal 169261/188604 (executing program) 2022/09/21 14:08:33 fetching corpus: 3050, signal 170007/189234 (executing program) 2022/09/21 14:08:33 fetching corpus: 3100, signal 170597/189725 (executing program) 2022/09/21 14:08:33 fetching corpus: 3150, signal 171612/190369 (executing program) 2022/09/21 14:08:33 fetching corpus: 3200, signal 172319/190899 (executing program) 2022/09/21 14:08:34 fetching corpus: 3250, signal 173156/191463 (executing program) 2022/09/21 14:08:34 fetching corpus: 3300, signal 174005/192060 (executing program) 2022/09/21 14:08:34 fetching corpus: 3350, signal 174691/192558 (executing program) 2022/09/21 14:08:34 fetching corpus: 3400, signal 176002/193445 (executing program) 2022/09/21 14:08:34 fetching corpus: 3450, signal 177026/193986 (executing program) 2022/09/21 14:08:34 fetching corpus: 3500, signal 177444/194326 (executing program) 2022/09/21 14:08:34 fetching corpus: 3550, signal 178402/194919 (executing program) 2022/09/21 14:08:34 fetching corpus: 3600, signal 179620/195438 (executing program) 2022/09/21 14:08:35 fetching corpus: 3650, signal 180794/195935 (executing program) 2022/09/21 14:08:35 fetching corpus: 3700, signal 181726/196415 (executing program) 2022/09/21 14:08:35 fetching corpus: 3750, signal 182219/196775 (executing program) 2022/09/21 14:08:35 fetching corpus: 3800, signal 183177/197176 (executing program) 2022/09/21 14:08:35 fetching corpus: 3850, signal 184461/197765 (executing program) 2022/09/21 14:08:35 fetching corpus: 3900, signal 185043/198058 (executing program) 2022/09/21 14:08:35 fetching corpus: 3950, signal 185887/198444 (executing program) 2022/09/21 14:08:36 fetching corpus: 4000, signal 187242/198834 (executing program) 2022/09/21 14:08:36 fetching corpus: 4050, signal 188119/199206 (executing program) 2022/09/21 14:08:36 fetching corpus: 4100, signal 189018/199566 (executing program) 2022/09/21 14:08:36 fetching corpus: 4150, signal 189672/199779 (executing program) 2022/09/21 14:08:36 fetching corpus: 4200, signal 190945/200029 (executing program) 2022/09/21 14:08:36 fetching corpus: 4250, signal 191618/200217 (executing program) 2022/09/21 14:08:36 fetching corpus: 4300, signal 192099/200411 (executing program) 2022/09/21 14:08:36 fetching corpus: 4350, signal 192460/200549 (executing program) 2022/09/21 14:08:37 fetching corpus: 4400, signal 193006/200726 (executing program) 2022/09/21 14:08:37 fetching corpus: 4450, signal 193705/200846 (executing program) 2022/09/21 14:08:37 fetching corpus: 4500, signal 194174/200942 (executing program) 2022/09/21 14:08:37 fetching corpus: 4550, signal 194704/201054 (executing program) 2022/09/21 14:08:37 fetching corpus: 4600, signal 195313/201146 (executing program) 2022/09/21 14:08:37 fetching corpus: 4650, signal 195986/201237 (executing program) 2022/09/21 14:08:37 fetching corpus: 4658, signal 196108/201294 (executing program) 2022/09/21 14:08:37 fetching corpus: 4658, signal 196108/201323 (executing program) 2022/09/21 14:08:37 fetching corpus: 4658, signal 196108/201323 (executing program) 2022/09/21 14:08:40 starting 8 fuzzer processes 14:08:40 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x5}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0xc0002100}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 14:08:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x8}) 14:08:40 executing program 2: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 14:08:40 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 65.652035] audit: type=1400 audit(1663769320.421:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:08:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) 14:08:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:08:40 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @private}, {0x0, @remote}, 0x8, {0x2, 0x0, @private}, 'nr0\x00'}) 14:08:40 executing program 7: mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 66.961047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.963965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.965415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.968231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.970162] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.971588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.978260] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.096628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.102888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.106374] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.108087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.109531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.111117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.112578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.114412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.118482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.121252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.122574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.125124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.126428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.127776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.129570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.130987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.141647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.144084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.152536] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.153405] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.167878] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.169055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.174538] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.178588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.188133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.190104] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.191443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.193041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.194722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.195876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.196858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.209765] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.251531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.251775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.259028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.259241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.264438] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.265713] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.276061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.277992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.285562] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.287507] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.048653] Bluetooth: hci0: command 0x0409 tx timeout [ 69.112397] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 69.176371] Bluetooth: hci6: command 0x0409 tx timeout [ 69.176415] Bluetooth: hci2: command 0x0409 tx timeout [ 69.177067] Bluetooth: hci4: command 0x0409 tx timeout [ 69.240643] Bluetooth: hci7: command 0x0409 tx timeout [ 69.305381] Bluetooth: hci5: command 0x0409 tx timeout [ 69.369418] Bluetooth: hci3: command 0x0409 tx timeout [ 71.097495] Bluetooth: hci0: command 0x041b tx timeout [ 71.224369] Bluetooth: hci4: command 0x041b tx timeout [ 71.224860] Bluetooth: hci2: command 0x041b tx timeout [ 71.225265] Bluetooth: hci6: command 0x041b tx timeout [ 71.288368] Bluetooth: hci7: command 0x041b tx timeout [ 71.352332] Bluetooth: hci5: command 0x041b tx timeout [ 71.416380] Bluetooth: hci3: command 0x041b tx timeout [ 73.144370] Bluetooth: hci0: command 0x040f tx timeout [ 73.272356] Bluetooth: hci6: command 0x040f tx timeout [ 73.272381] Bluetooth: hci2: command 0x040f tx timeout [ 73.272914] Bluetooth: hci4: command 0x040f tx timeout [ 73.336355] Bluetooth: hci7: command 0x040f tx timeout [ 73.400391] Bluetooth: hci5: command 0x040f tx timeout [ 73.464333] Bluetooth: hci3: command 0x040f tx timeout [ 73.848380] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 75.194299] Bluetooth: hci0: command 0x0419 tx timeout [ 75.320350] Bluetooth: hci2: command 0x0419 tx timeout [ 75.320860] Bluetooth: hci4: command 0x0419 tx timeout [ 75.321322] Bluetooth: hci6: command 0x0419 tx timeout [ 75.384370] Bluetooth: hci7: command 0x0419 tx timeout [ 75.448362] Bluetooth: hci5: command 0x0419 tx timeout [ 75.512375] Bluetooth: hci3: command 0x0419 tx timeout [ 78.456413] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 81.057827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.066569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.068031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.073426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.076499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.077605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.080666] Bluetooth: hci1: HCI_REQ-0x0c1a [ 83.128404] Bluetooth: hci1: command 0x0409 tx timeout [ 85.176349] Bluetooth: hci1: command 0x041b tx timeout [ 87.224341] Bluetooth: hci1: command 0x040f tx timeout [ 89.272415] Bluetooth: hci1: command 0x0419 tx timeout 14:09:36 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 14:09:36 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 14:09:36 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 14:09:37 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 14:09:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, @xdp, @nfc, @phonet}) 14:09:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, @xdp, @nfc, @phonet}) 14:09:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, @xdp, @nfc, @phonet}) 14:09:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, @xdp, @nfc, @phonet}) [ 124.730693] loop5: detected capacity change from 0 to 2048 [ 124.773688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 124.775683] ext4 filesystem being mounted at /syzkaller-testdir377082882/syzkaller.Lmj0qa/0/file0 supports timestamps until 2038 (0x7fffffff) [ 124.830215] EXT4-fs (loop5): unmounting filesystem. [ 125.547463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3863 comm=syz-executor.0 [ 125.555657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3865 comm=syz-executor.0 [ 129.772765] audit: type=1400 audit(1663769384.540:7): avc: denied { open } for pid=3974 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.775710] audit: type=1400 audit(1663769384.541:8): avc: denied { kernel } for pid=3974 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.787148] ------------[ cut here ]------------ [ 129.787183] [ 129.787189] ====================================================== [ 129.787196] WARNING: possible circular locking dependency detected [ 129.787204] 6.0.0-rc6-next-20220921 #1 Not tainted [ 129.787217] ------------------------------------------------------ [ 129.787224] syz-executor.3/3975 is trying to acquire lock: [ 129.787237] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.787315] [ 129.787315] but task is already holding lock: [ 129.787321] ffff88800ea63820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.787378] [ 129.787378] which lock already depends on the new lock. [ 129.787378] [ 129.787385] [ 129.787385] the existing dependency chain (in reverse order) is: [ 129.787391] [ 129.787391] -> #3 (&ctx->lock){....}-{2:2}: [ 129.787420] _raw_spin_lock+0x2a/0x40 [ 129.787460] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.787486] __schedule+0xedd/0x2470 [ 129.787514] schedule+0xda/0x1b0 [ 129.787540] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.787563] syscall_exit_to_user_mode+0x19/0x40 [ 129.787588] do_syscall_64+0x48/0x90 [ 129.787623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.787647] [ 129.787647] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.787675] _raw_spin_lock_nested+0x30/0x40 [ 129.787714] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.787741] task_fork_fair+0x63/0x4d0 [ 129.787778] sched_cgroup_fork+0x3d0/0x540 [ 129.787808] copy_process+0x4183/0x6e20 [ 129.787830] kernel_clone+0xe7/0x890 [ 129.787849] user_mode_thread+0xad/0xf0 [ 129.787871] rest_init+0x24/0x250 [ 129.787893] arch_call_rest_init+0xf/0x14 [ 129.787926] start_kernel+0x4c1/0x4e6 [ 129.787955] secondary_startup_64_no_verify+0xe0/0xeb [ 129.787984] [ 129.787984] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.788012] _raw_spin_lock_irqsave+0x39/0x60 [ 129.788052] try_to_wake_up+0xab/0x1930 [ 129.788107] up+0x75/0xb0 [ 129.788136] __up_console_sem+0x6e/0x80 [ 129.788170] console_unlock+0x46a/0x590 [ 129.788205] vt_ioctl+0x2822/0x2ca0 [ 129.788232] tty_ioctl+0x7c4/0x1700 [ 129.788256] __x64_sys_ioctl+0x19a/0x210 [ 129.788289] do_syscall_64+0x3b/0x90 [ 129.788323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.788347] [ 129.788347] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.788376] __lock_acquire+0x2a02/0x5e70 [ 129.788413] lock_acquire+0x1a2/0x530 [ 129.788448] _raw_spin_lock_irqsave+0x39/0x60 [ 129.788488] down_trylock+0xe/0x70 [ 129.788518] __down_trylock_console_sem+0x3b/0xd0 [ 129.788553] vprintk_emit+0x16b/0x560 [ 129.788589] vprintk+0x84/0xa0 [ 129.788624] _printk+0xba/0xf1 [ 129.788645] report_bug.cold+0x72/0xab [ 129.788679] handle_bug+0x3c/0x70 [ 129.788713] exc_invalid_op+0x14/0x50 [ 129.788749] asm_exc_invalid_op+0x16/0x20 [ 129.788771] group_sched_out.part.0+0x2c7/0x460 [ 129.788794] ctx_sched_out+0x8f1/0xc10 [ 129.788815] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.788841] __schedule+0xedd/0x2470 [ 129.788869] schedule+0xda/0x1b0 [ 129.788895] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.788917] syscall_exit_to_user_mode+0x19/0x40 [ 129.788941] do_syscall_64+0x48/0x90 [ 129.788976] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.789000] [ 129.789000] other info that might help us debug this: [ 129.789000] [ 129.789005] Chain exists of: [ 129.789005] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.789005] [ 129.789037] Possible unsafe locking scenario: [ 129.789037] [ 129.789042] CPU0 CPU1 [ 129.789047] ---- ---- [ 129.789052] lock(&ctx->lock); [ 129.789063] lock(&rq->__lock); [ 129.789077] lock(&ctx->lock); [ 129.789090] lock((console_sem).lock); [ 129.789103] [ 129.789103] *** DEADLOCK *** [ 129.789103] [ 129.789107] 2 locks held by syz-executor.3/3975: [ 129.789121] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.789182] #1: ffff88800ea63820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.789241] [ 129.789241] stack backtrace: [ 129.789247] CPU: 1 PID: 3975 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 129.789273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.789289] Call Trace: [ 129.789295] [ 129.789303] dump_stack_lvl+0x8b/0xb3 [ 129.789340] check_noncircular+0x263/0x2e0 [ 129.789377] ? format_decode+0x26c/0xb50 [ 129.789410] ? print_circular_bug+0x450/0x450 [ 129.789447] ? enable_ptr_key_workfn+0x20/0x20 [ 129.789481] ? format_decode+0x26c/0xb50 [ 129.789516] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.789555] __lock_acquire+0x2a02/0x5e70 [ 129.789602] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.789651] lock_acquire+0x1a2/0x530 [ 129.789687] ? down_trylock+0xe/0x70 [ 129.789722] ? lock_release+0x750/0x750 [ 129.789767] ? vprintk+0x84/0xa0 [ 129.789806] _raw_spin_lock_irqsave+0x39/0x60 [ 129.789847] ? down_trylock+0xe/0x70 [ 129.789880] down_trylock+0xe/0x70 [ 129.789912] ? vprintk+0x84/0xa0 [ 129.789949] __down_trylock_console_sem+0x3b/0xd0 [ 129.789987] vprintk_emit+0x16b/0x560 [ 129.790028] vprintk+0x84/0xa0 [ 129.790067] _printk+0xba/0xf1 [ 129.790089] ? record_print_text.cold+0x16/0x16 [ 129.790121] ? report_bug.cold+0x66/0xab [ 129.790158] ? group_sched_out.part.0+0x2c7/0x460 [ 129.790182] report_bug.cold+0x72/0xab [ 129.790221] handle_bug+0x3c/0x70 [ 129.790257] exc_invalid_op+0x14/0x50 [ 129.790295] asm_exc_invalid_op+0x16/0x20 [ 129.790319] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.790347] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.790370] RSP: 0018:ffff88803e77fc48 EFLAGS: 00010006 [ 129.790389] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.790405] RDX: ffff888008a95040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 129.790422] RBP: ffff888015440000 R08: 0000000000000005 R09: 0000000000000001 [ 129.790437] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800ea63800 [ 129.790453] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 129.790476] ? group_sched_out.part.0+0x2c7/0x460 [ 129.790504] ? group_sched_out.part.0+0x2c7/0x460 [ 129.790531] ctx_sched_out+0x8f1/0xc10 [ 129.790558] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.790591] ? lock_is_held_type+0xd7/0x130 [ 129.790617] ? __perf_cgroup_move+0x160/0x160 [ 129.790643] ? set_next_entity+0x304/0x550 [ 129.790682] ? update_curr+0x267/0x740 [ 129.790722] ? lock_is_held_type+0xd7/0x130 [ 129.790749] __schedule+0xedd/0x2470 [ 129.790783] ? io_schedule_timeout+0x150/0x150 [ 129.790817] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.790860] schedule+0xda/0x1b0 [ 129.790890] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.790916] syscall_exit_to_user_mode+0x19/0x40 [ 129.790942] do_syscall_64+0x48/0x90 [ 129.790979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.791004] RIP: 0033:0x7f716ff3fb19 [ 129.791021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.791044] RSP: 002b:00007f716d4b5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.791067] RAX: 0000000000000001 RBX: 00007f7170052f68 RCX: 00007f716ff3fb19 [ 129.791083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7170052f6c [ 129.791098] RBP: 00007f7170052f60 R08: 000000000000000e R09: 0000000000000000 [ 129.791113] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7170052f6c [ 129.791129] R13: 00007ffc3eb7c84f R14: 00007f716d4b5300 R15: 0000000000022000 [ 129.791155] [ 129.897761] WARNING: CPU: 1 PID: 3975 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.899093] Modules linked in: [ 129.899560] CPU: 1 PID: 3975 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 129.900731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.902345] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.903132] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.905709] RSP: 0018:ffff88803e77fc48 EFLAGS: 00010006 [ 129.906470] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.907477] RDX: ffff888008a95040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 129.908499] RBP: ffff888015440000 R08: 0000000000000005 R09: 0000000000000001 [ 129.909522] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800ea63800 [ 129.910536] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 129.911558] FS: 00007f716d4b5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 129.912719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.913555] CR2: 00007fda88036148 CR3: 000000003111c000 CR4: 0000000000350ee0 [ 129.914581] Call Trace: [ 129.914960] [ 129.915296] ctx_sched_out+0x8f1/0xc10 [ 129.915872] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.916650] ? lock_is_held_type+0xd7/0x130 [ 129.917288] ? __perf_cgroup_move+0x160/0x160 [ 129.917948] ? set_next_entity+0x304/0x550 [ 129.918578] ? update_curr+0x267/0x740 [ 129.919169] ? lock_is_held_type+0xd7/0x130 [ 129.919799] __schedule+0xedd/0x2470 [ 129.920365] ? io_schedule_timeout+0x150/0x150 [ 129.921039] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.921756] schedule+0xda/0x1b0 [ 129.922268] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.922978] syscall_exit_to_user_mode+0x19/0x40 [ 129.923676] do_syscall_64+0x48/0x90 [ 129.924262] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.925008] RIP: 0033:0x7f716ff3fb19 [ 129.925552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.928135] RSP: 002b:00007f716d4b5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.929233] RAX: 0000000000000001 RBX: 00007f7170052f68 RCX: 00007f716ff3fb19 [ 129.930248] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7170052f6c [ 129.931261] RBP: 00007f7170052f60 R08: 000000000000000e R09: 0000000000000000 [ 129.932297] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7170052f6c [ 129.933311] R13: 00007ffc3eb7c84f R14: 00007f716d4b5300 R15: 0000000000022000 [ 129.934338] [ 129.934684] irq event stamp: 796 [ 129.935173] hardirqs last enabled at (795): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.936510] hardirqs last disabled at (796): [] __schedule+0x1225/0x2470 [ 129.937696] softirqs last enabled at (638): [] __irq_exit_rcu+0x11b/0x180 [ 129.938926] softirqs last disabled at (579): [] __irq_exit_rcu+0x11b/0x180 [ 129.940164] ---[ end trace 0000000000000000 ]--- [ 129.959291] hrtimer: interrupt took 16010 ns 14:09:44 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x5}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0xc0002100}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 14:09:44 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) 14:09:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:44 executing program 2: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 14:09:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) 14:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x8}) 14:09:44 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 130.141515] loop5: detected capacity change from 0 to 2048 [ 130.216650] audit: type=1400 audit(1663769384.967:9): avc: denied { write } for pid=3989 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.224933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3992 comm=syz-executor.0 [ 130.233782] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.235221] ext4 filesystem being mounted at /syzkaller-testdir377082882/syzkaller.Lmj0qa/1/file0 supports timestamps until 2038 (0x7fffffff) 14:09:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x8}) 14:09:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) 14:09:45 executing program 2: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 14:09:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) [ 130.626779] EXT4-fs (loop5): unmounting filesystem. 14:09:45 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x5}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0xc0002100}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 14:09:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) 14:09:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x8}) 14:09:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:45 executing program 2: syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)={[], [{@dont_hash}, {@dont_measure}]}) 14:09:45 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 14:09:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) [ 130.736980] loop5: detected capacity change from 0 to 2048 [ 130.762577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.763940] ext4 filesystem being mounted at /syzkaller-testdir377082882/syzkaller.Lmj0qa/2/file0 supports timestamps until 2038 (0x7fffffff) [ 130.829541] EXT4-fs (loop5): unmounting filesystem. [ 130.832651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4021 comm=syz-executor.0 14:09:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) 14:09:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) [ 130.939574] loop5: detected capacity change from 0 to 2048 [ 130.965025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.967488] ext4 filesystem being mounted at /syzkaller-testdir377082882/syzkaller.Lmj0qa/3/file0 supports timestamps until 2038 (0x7fffffff) [ 131.601924] EXT4-fs (loop5): unmounting filesystem. 14:09:46 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x5}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0xc0002100}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 14:09:46 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 14:09:46 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) [ 131.721631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4054 comm=syz-executor.0 14:09:46 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 14:09:46 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:09:46 executing program 3: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000780)) 14:09:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x0, 0x1, 0x7a]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 14:09:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:09:46 executing program 2: sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001000), 0xffffffffffffffff) 14:09:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 14:09:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:09:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) uname(&(0x7f0000000000)=""/59) 14:09:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000100)) 14:09:47 executing program 5: membarrier(0x2, 0x0) 14:09:47 executing program 6: syz_io_uring_setup(0x1c64, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x28d}, &(0x7f0000c00000/0x1000)=nil, &(0x7f0000abc000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 14:09:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:09:47 executing program 3: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x5, &(0x7f0000000040)='bdev\x00', &(0x7f0000000080)='bdev\x00', 0x0) 14:09:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 1: timer_create(0x0, 0x0, 0xfffffffffffffffd) 14:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 14:09:47 executing program 5: membarrier(0x2, 0x0) 14:09:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000100)=""/199) 14:09:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r1, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x600) 14:09:47 executing program 1: timer_create(0x0, 0x0, 0xfffffffffffffffd) 14:09:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 14:09:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5452, 0x0) 14:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000100)=""/199) 14:09:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x3a, {0x2, 0x0, @empty}}) 14:09:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r1, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x600) 14:09:47 executing program 5: membarrier(0x2, 0x0) [ 132.589862] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 14:09:47 executing program 1: timer_create(0x0, 0x0, 0xfffffffffffffffd) 14:09:47 executing program 5: membarrier(0x2, 0x0) 14:09:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 14:09:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x3a, {0x2, 0x0, @empty}}) 14:09:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r1, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x600) 14:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000100)=""/199) 14:09:47 executing program 1: timer_create(0x0, 0x0, 0xfffffffffffffffd) 14:09:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 14:09:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000100)=""/199) 14:09:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x3a, {0x2, 0x0, @empty}}) 14:09:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 14:09:47 executing program 1: shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 14:09:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r1, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x600) [ 132.941669] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.942749] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.943527] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.944245] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 132.945096] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 14:09:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 14:09:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x1, './file0/file0\x00'}, 0x6e) 14:09:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 14:09:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x3a, {0x2, 0x0, @empty}}) 14:09:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 14:09:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 133.027813] loop7: detected capacity change from 0 to 40 14:09:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x1, './file0/file0\x00'}, 0x6e) 14:09:47 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 14:09:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0) [ 133.146702] syz-executor.7: attempt to access beyond end of device [ 133.146702] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.147726] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:09:47 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40400, 0x0) getdents(r0, &(0x7f00000012c0)=""/4093, 0xffd) 14:09:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x1, './file0/file0\x00'}, 0x6e) 14:09:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 14:09:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 14:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) [ 133.287746] loop7: detected capacity change from 0 to 40 14:09:48 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40400, 0x0) getdents(r0, &(0x7f00000012c0)=""/4093, 0xffd) 14:09:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x1, './file0/file0\x00'}, 0x6e) [ 133.335224] loop0: detected capacity change from 0 to 40 [ 133.404007] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.405835] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.406614] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.407364] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.408201] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 133.413066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.413786] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.414410] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.416814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.417253] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.417881] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.418671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.419079] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.419711] Buffer I/O error on dev sr0, logical block 2, async page read [ 133.420508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.420925] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.421569] Buffer I/O error on dev sr0, logical block 3, async page read [ 133.422655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.423077] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.423709] Buffer I/O error on dev sr0, logical block 4, async page read [ 133.424457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.424867] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.425509] Buffer I/O error on dev sr0, logical block 5, async page read [ 133.426526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.426960] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.427612] Buffer I/O error on dev sr0, logical block 6, async page read [ 133.429454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.429938] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.430614] Buffer I/O error on dev sr0, logical block 7, async page read [ 133.432438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.433066] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.449312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.455223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.458050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.471454] syz-executor.0: attempt to access beyond end of device [ 133.471454] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.490777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.493262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.498004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.501131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.508801] syz-executor.7: attempt to access beyond end of device [ 133.508801] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 14:09:48 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40400, 0x0) getdents(r0, &(0x7f00000012c0)=""/4093, 0xffd) [ 133.589739] loop4: detected capacity change from 0 to 40 [ 133.597110] loop0: detected capacity change from 0 to 40 [ 133.597885] loop6: detected capacity change from 0 to 40 14:09:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 14:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40400, 0x0) getdents(r0, &(0x7f00000012c0)=""/4093, 0xffd) [ 133.613367] loop7: detected capacity change from 0 to 40 14:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f00000001c0)={@private1, 0x0, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd, 0x1000000000000000, 0x8, 0x1000, 0x8, 0x1, {0x3}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r3}, r4, 0x16, @inherit={0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000000000000030000000000000005fffffffc000000400000000000000005000000a1c623d3270000000000070006000000000000000100000000f926a98fbd2772fb00000006000000000000000825000000000000030000000000001f8efb79518ac49c9feb881f31a44fc9e1315109d8056a0417c772b6df9acc6e8a5366cea94350b633d81f70876f4a0c3e0167"]}, @subvolid=0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) [ 133.668563] syz-executor.6: attempt to access beyond end of device [ 133.668563] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.689975] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.691559] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.692568] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.693581] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.703976] syz-executor.4: attempt to access beyond end of device [ 133.703976] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 14:09:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 133.722746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.723737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.724822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.725398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.725962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.726549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.727139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.727746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:09:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 133.773826] loop5: detected capacity change from 0 to 40 [ 133.775513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.776266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.776914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.777536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.778139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.778812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.779354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.780014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.780721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.781403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.781943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.782522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.783010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.783536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.784052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.784562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.785104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.785614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.786225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.786875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.787438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.788065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.788699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.789246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.791016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.791756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.792463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.793855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.794372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.794975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.795496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.796560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.797110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.797655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.798120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.798608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.799163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.799704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.800323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.800853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.801814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.803960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.805098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.805748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.806350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.806891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.807793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.808484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.809022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.810171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.810671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.811156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.811714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.812204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.812696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.813516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.814033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.814642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.815368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:09:48 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x18, {0x2, 0x0, @empty}}) [ 133.816842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.817471] syz-executor.7: attempt to access beyond end of device [ 133.817471] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.817707] loop2: detected capacity change from 0 to 40 [ 133.818540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.819916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.820866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.821406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.821910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.822460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.824075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.824634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.825184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.825749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.826742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.827248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.827843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.828360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.828875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.829375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.829876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.830394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.830895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.831416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.831948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.832472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.832998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.833497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.833988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.834539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.835104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.835623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.836159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.836966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.837472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.837972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.838672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.839157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.839646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.840321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.840846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.841380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.841859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.842338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.843262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.843779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.844313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.844793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.845391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.845883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.846377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.846937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.847637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.848145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.848633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.849102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.849695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.850157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.850652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.851734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.852235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.852736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.853221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.853750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.854305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.854774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.855236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.855767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.856236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.856719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.857209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.857741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.858544] loop6: detected capacity change from 0 to 40 14:09:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 133.860403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.860963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.861731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.862352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.862863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.863626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.864133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.864700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.865226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.865720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.866194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.866734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.867199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.867684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.868180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.868771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.869317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.869803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.870350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.870858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.871364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.871842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.872402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.872867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.873410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.873895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.874397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.874859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.875364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.875823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.876348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.877357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.877883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.878419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.878882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.879366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.879852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.880442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.880930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.881433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.881941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.882507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.883211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.883712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.884214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.884771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.885255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.885759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.886310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.886804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.887327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.887806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.888393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.888893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.889408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.889916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.890457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.890949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.891457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.891962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.892468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.892932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.893461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.893926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.894455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.894951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.895502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.895969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.896472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.896934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.897513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.897991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.898521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.899007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.899546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.900029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.900531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.901037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.901570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.902061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.902608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.903092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.903598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.904094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.904624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.905120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.905633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.906122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.906669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.907161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.907663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.908152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.908693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.909155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.909639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.910139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.910772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.911293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.912221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.912846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.913335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.913810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.914372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.914854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.915463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.915940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.916528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.917003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.917502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.917976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.918492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.918970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.919509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.920006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.920560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.921191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.921701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.922202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.922736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.923231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.923781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.924307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.924791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.925285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.925767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.926251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.926741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.927219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.927904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.928412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.928901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.929406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.929886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.930376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.930883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.931384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.931915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.932438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.932922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.933419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.933921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.934419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.934906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.935415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.935931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.936444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.936936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.937434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.937923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.938437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.938928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.939617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.940383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.941013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.941622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.942152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.942653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.943121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.943861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.944437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.944960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.945490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.945989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.946483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.946952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.947481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.947972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.948497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.949014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.949541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.950035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.950525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.950995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.951529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.952004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.952507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.953257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.953797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.954379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.954995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.955534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.956008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.956511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.957033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.957597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.958090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.958583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.959168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.959700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.960664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.961138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.961671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.962184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.962684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.963391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.963988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.964497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.965033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.965631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.966102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.966648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.967372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.967852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.968374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.974496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.975094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.975953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.976626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:09:48 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x18, {0x2, 0x0, @empty}}) [ 134.039949] syz-executor.6: attempt to access beyond end of device [ 134.039949] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.057030] syz-executor.0: attempt to access beyond end of device [ 134.057030] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.110907] loop4: detected capacity change from 0 to 40 14:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 134.153952] loop0: detected capacity change from 0 to 40 [ 134.154735] syz-executor.2: attempt to access beyond end of device [ 134.154735] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.211569] syz-executor.5: attempt to access beyond end of device [ 134.211569] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.229634] loop7: detected capacity change from 0 to 40 [ 134.415636] loop2: detected capacity change from 0 to 40 14:09:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:49 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x18, {0x2, 0x0, @empty}}) 14:09:49 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 14:09:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 14:09:49 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000001c0)=""/97) [ 134.432765] loop5: detected capacity change from 0 to 40 14:09:49 executing program 0: pipe2$9p(&(0x7f0000001740), 0x0) [ 134.444968] loop6: detected capacity change from 0 to 40 14:09:49 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 134.494029] loop4: detected capacity change from 0 to 40 14:09:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 14:09:49 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x18, {0x2, 0x0, @empty}}) 14:09:49 executing program 7: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r0, 0x409, 0x17) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000}) 14:09:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x14300, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x220) openat(r1, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x3, 0x80000, 0x8000000) write$binfmt_aout(r3, &(0x7f0000001300)={{0xcc, 0x0, 0x52, 0x289, 0x295, 0x5, 0x0, 0x9}, "24f14da56a86b2a113f3cc53ca55bafe991660d1b42188439f2c77c871d17bd6ca9e650fc131bd814bc836be2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xabe2fe4d9e090a4d, 0x0) pread64(r4, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0 VM DIAGNOSIS: 14:09:44 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88803d90ac38 RCX=1ffff11001f3efaa RDX=1ffff110036ba0e5 RSI=ffffffff8707c940 RDI=ffff88801b5d0728 RBP=ffff88801b5d0728 RSP=ffff88800ae2f628 R8 =0000000000000001 R9 =0000000000000246 R10=ffffed10015c5ebb R11=0000000000000001 R12=ffff88801b5d0728 R13=dffffc0000000000 R14=ffff88803d90ac38 R15=ffff88801b5d06c0 RIP=ffffffff8411339a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5578b9e8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9d026cc5c0 CR3=000000000ecfa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 000055fe5e74ca30 000000524f4e494d YMM02=0000000000000000 0000000000000000 ffffffffffffffff 00000000000000ff YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 000055fe5e727c70 000055fe5e70c270 YMM05=0000000000000000 0000000000000000 ff00020202020100 0000000400000006 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000031 000000006c617574 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000002000000000 0000002000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803e77f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f716d4b5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda88036148 CR3=000000003111c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f71700267c0 00007f71700267c8 YMM02=0000000000000000 0000000000000000 00007f71700267e0 00007f71700267c0 YMM03=0000000000000000 0000000000000000 00007f71700267c8 00007f71700267c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000