Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:41332' (ECDSA) to the list of known hosts. 2022/09/12 18:22:58 fuzzer started 2022/09/12 18:22:58 dialing manager at localhost:38027 syzkaller login: [ 35.963854] cgroup: Unknown subsys name 'net' [ 36.068590] cgroup: Unknown subsys name 'rlimit' 2022/09/12 18:23:12 syscalls: 2215 2022/09/12 18:23:12 code coverage: enabled 2022/09/12 18:23:12 comparison tracing: enabled 2022/09/12 18:23:12 extra coverage: enabled 2022/09/12 18:23:12 setuid sandbox: enabled 2022/09/12 18:23:12 namespace sandbox: enabled 2022/09/12 18:23:12 Android sandbox: enabled 2022/09/12 18:23:12 fault injection: enabled 2022/09/12 18:23:12 leak checking: enabled 2022/09/12 18:23:12 net packet injection: enabled 2022/09/12 18:23:12 net device setup: enabled 2022/09/12 18:23:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 18:23:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 18:23:12 USB emulation: enabled 2022/09/12 18:23:12 hci packet injection: enabled 2022/09/12 18:23:12 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 18:23:12 802.15.4 emulation: enabled 2022/09/12 18:23:12 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 18:23:12 fetching corpus: 49, signal 30965/34506 (executing program) 2022/09/12 18:23:12 fetching corpus: 99, signal 42834/47868 (executing program) 2022/09/12 18:23:12 fetching corpus: 149, signal 54012/60412 (executing program) 2022/09/12 18:23:12 fetching corpus: 199, signal 61627/69349 (executing program) 2022/09/12 18:23:12 fetching corpus: 249, signal 65284/74377 (executing program) 2022/09/12 18:23:13 fetching corpus: 299, signal 71635/81916 (executing program) 2022/09/12 18:23:13 fetching corpus: 349, signal 78566/89877 (executing program) 2022/09/12 18:23:13 fetching corpus: 399, signal 84035/96440 (executing program) 2022/09/12 18:23:13 fetching corpus: 449, signal 89246/102688 (executing program) 2022/09/12 18:23:13 fetching corpus: 499, signal 92901/107395 (executing program) 2022/09/12 18:23:13 fetching corpus: 549, signal 97847/113236 (executing program) 2022/09/12 18:23:13 fetching corpus: 599, signal 100855/117276 (executing program) 2022/09/12 18:23:13 fetching corpus: 649, signal 104012/121340 (executing program) 2022/09/12 18:23:14 fetching corpus: 699, signal 106968/125204 (executing program) 2022/09/12 18:23:14 fetching corpus: 748, signal 109401/128581 (executing program) 2022/09/12 18:23:14 fetching corpus: 798, signal 112400/132421 (executing program) 2022/09/12 18:23:14 fetching corpus: 848, signal 115819/136601 (executing program) 2022/09/12 18:23:14 fetching corpus: 898, signal 119297/140807 (executing program) 2022/09/12 18:23:14 fetching corpus: 948, signal 121511/143825 (executing program) 2022/09/12 18:23:14 fetching corpus: 998, signal 123388/146547 (executing program) 2022/09/12 18:23:15 fetching corpus: 1048, signal 125768/149688 (executing program) 2022/09/12 18:23:15 fetching corpus: 1098, signal 127139/151911 (executing program) 2022/09/12 18:23:15 fetching corpus: 1148, signal 128557/154124 (executing program) 2022/09/12 18:23:15 fetching corpus: 1198, signal 130265/156568 (executing program) 2022/09/12 18:23:15 fetching corpus: 1248, signal 133579/160295 (executing program) 2022/09/12 18:23:15 fetching corpus: 1298, signal 136146/163359 (executing program) 2022/09/12 18:23:15 fetching corpus: 1348, signal 138532/166203 (executing program) 2022/09/12 18:23:16 fetching corpus: 1398, signal 140764/168963 (executing program) 2022/09/12 18:23:16 fetching corpus: 1448, signal 142610/171349 (executing program) 2022/09/12 18:23:16 fetching corpus: 1498, signal 144062/173354 (executing program) 2022/09/12 18:23:16 fetching corpus: 1548, signal 145842/175677 (executing program) 2022/09/12 18:23:16 fetching corpus: 1598, signal 148329/178483 (executing program) 2022/09/12 18:23:16 fetching corpus: 1648, signal 149890/180547 (executing program) 2022/09/12 18:23:16 fetching corpus: 1698, signal 151578/182747 (executing program) 2022/09/12 18:23:17 fetching corpus: 1748, signal 152648/184411 (executing program) 2022/09/12 18:23:17 fetching corpus: 1798, signal 153664/186026 (executing program) 2022/09/12 18:23:17 fetching corpus: 1848, signal 155657/188322 (executing program) 2022/09/12 18:23:17 fetching corpus: 1898, signal 156807/190029 (executing program) 2022/09/12 18:23:17 fetching corpus: 1948, signal 158413/192031 (executing program) 2022/09/12 18:23:17 fetching corpus: 1998, signal 160273/194205 (executing program) 2022/09/12 18:23:18 fetching corpus: 2048, signal 162003/196237 (executing program) 2022/09/12 18:23:18 fetching corpus: 2098, signal 163604/198191 (executing program) 2022/09/12 18:23:18 fetching corpus: 2148, signal 164801/199791 (executing program) 2022/09/12 18:23:18 fetching corpus: 2198, signal 166448/201686 (executing program) 2022/09/12 18:23:18 fetching corpus: 2248, signal 167649/203291 (executing program) 2022/09/12 18:23:18 fetching corpus: 2298, signal 168887/204876 (executing program) 2022/09/12 18:23:18 fetching corpus: 2348, signal 170009/206376 (executing program) 2022/09/12 18:23:19 fetching corpus: 2398, signal 171171/207859 (executing program) 2022/09/12 18:23:19 fetching corpus: 2448, signal 173479/210116 (executing program) 2022/09/12 18:23:19 fetching corpus: 2498, signal 175031/211849 (executing program) 2022/09/12 18:23:19 fetching corpus: 2548, signal 175950/213131 (executing program) 2022/09/12 18:23:19 fetching corpus: 2598, signal 178186/215237 (executing program) 2022/09/12 18:23:19 fetching corpus: 2648, signal 179614/216850 (executing program) 2022/09/12 18:23:19 fetching corpus: 2698, signal 180694/218190 (executing program) 2022/09/12 18:23:20 fetching corpus: 2748, signal 182543/220031 (executing program) 2022/09/12 18:23:20 fetching corpus: 2798, signal 183617/221368 (executing program) 2022/09/12 18:23:20 fetching corpus: 2848, signal 184544/222609 (executing program) 2022/09/12 18:23:20 fetching corpus: 2898, signal 185634/223859 (executing program) 2022/09/12 18:23:20 fetching corpus: 2948, signal 187140/225395 (executing program) 2022/09/12 18:23:20 fetching corpus: 2998, signal 188494/226771 (executing program) 2022/09/12 18:23:21 fetching corpus: 3048, signal 189383/227919 (executing program) 2022/09/12 18:23:21 fetching corpus: 3098, signal 190061/228872 (executing program) 2022/09/12 18:23:21 fetching corpus: 3148, signal 190934/229955 (executing program) 2022/09/12 18:23:21 fetching corpus: 3198, signal 191556/230886 (executing program) 2022/09/12 18:23:21 fetching corpus: 3248, signal 192558/232005 (executing program) 2022/09/12 18:23:21 fetching corpus: 3298, signal 193547/233103 (executing program) 2022/09/12 18:23:21 fetching corpus: 3348, signal 194462/234152 (executing program) 2022/09/12 18:23:22 fetching corpus: 3398, signal 195298/235178 (executing program) 2022/09/12 18:23:22 fetching corpus: 3448, signal 196398/236308 (executing program) 2022/09/12 18:23:22 fetching corpus: 3498, signal 197276/237331 (executing program) 2022/09/12 18:23:22 fetching corpus: 3548, signal 198057/238219 (executing program) 2022/09/12 18:23:22 fetching corpus: 3598, signal 198642/239062 (executing program) 2022/09/12 18:23:22 fetching corpus: 3648, signal 199778/240129 (executing program) 2022/09/12 18:23:22 fetching corpus: 3698, signal 200827/241099 (executing program) 2022/09/12 18:23:22 fetching corpus: 3748, signal 202342/242347 (executing program) 2022/09/12 18:23:23 fetching corpus: 3798, signal 203325/243330 (executing program) 2022/09/12 18:23:23 fetching corpus: 3848, signal 204255/244245 (executing program) 2022/09/12 18:23:23 fetching corpus: 3898, signal 205249/245219 (executing program) 2022/09/12 18:23:23 fetching corpus: 3948, signal 205997/246054 (executing program) 2022/09/12 18:23:23 fetching corpus: 3998, signal 207004/246964 (executing program) 2022/09/12 18:23:23 fetching corpus: 4048, signal 207701/247756 (executing program) 2022/09/12 18:23:24 fetching corpus: 4098, signal 208366/248533 (executing program) 2022/09/12 18:23:24 fetching corpus: 4148, signal 209132/249284 (executing program) 2022/09/12 18:23:24 fetching corpus: 4198, signal 209919/250126 (executing program) 2022/09/12 18:23:24 fetching corpus: 4248, signal 210525/250828 (executing program) 2022/09/12 18:23:24 fetching corpus: 4298, signal 211214/251530 (executing program) 2022/09/12 18:23:24 fetching corpus: 4348, signal 212290/252407 (executing program) 2022/09/12 18:23:24 fetching corpus: 4398, signal 213033/253168 (executing program) 2022/09/12 18:23:24 fetching corpus: 4448, signal 214128/254011 (executing program) 2022/09/12 18:23:25 fetching corpus: 4498, signal 215314/254802 (executing program) 2022/09/12 18:23:25 fetching corpus: 4548, signal 216218/255605 (executing program) 2022/09/12 18:23:25 fetching corpus: 4598, signal 216711/256182 (executing program) 2022/09/12 18:23:25 fetching corpus: 4648, signal 217362/256767 (executing program) 2022/09/12 18:23:25 fetching corpus: 4698, signal 218177/257459 (executing program) 2022/09/12 18:23:25 fetching corpus: 4748, signal 218918/258091 (executing program) 2022/09/12 18:23:25 fetching corpus: 4798, signal 219669/258746 (executing program) 2022/09/12 18:23:26 fetching corpus: 4848, signal 220572/259367 (executing program) 2022/09/12 18:23:26 fetching corpus: 4898, signal 221485/260068 (executing program) 2022/09/12 18:23:26 fetching corpus: 4948, signal 221965/260571 (executing program) 2022/09/12 18:23:26 fetching corpus: 4998, signal 222580/261146 (executing program) 2022/09/12 18:23:26 fetching corpus: 5048, signal 223853/261981 (executing program) 2022/09/12 18:23:26 fetching corpus: 5098, signal 224320/262463 (executing program) 2022/09/12 18:23:26 fetching corpus: 5148, signal 225288/263086 (executing program) 2022/09/12 18:23:26 fetching corpus: 5198, signal 225897/263607 (executing program) 2022/09/12 18:23:26 fetching corpus: 5248, signal 226610/264103 (executing program) 2022/09/12 18:23:27 fetching corpus: 5298, signal 227047/264574 (executing program) 2022/09/12 18:23:27 fetching corpus: 5348, signal 227793/265115 (executing program) 2022/09/12 18:23:27 fetching corpus: 5398, signal 228355/265577 (executing program) 2022/09/12 18:23:27 fetching corpus: 5448, signal 229064/266052 (executing program) 2022/09/12 18:23:27 fetching corpus: 5498, signal 229440/266456 (executing program) 2022/09/12 18:23:27 fetching corpus: 5548, signal 230148/266915 (executing program) 2022/09/12 18:23:27 fetching corpus: 5598, signal 230592/267306 (executing program) 2022/09/12 18:23:28 fetching corpus: 5648, signal 231176/267735 (executing program) 2022/09/12 18:23:28 fetching corpus: 5698, signal 231695/268187 (executing program) 2022/09/12 18:23:28 fetching corpus: 5748, signal 232519/268683 (executing program) 2022/09/12 18:23:28 fetching corpus: 5798, signal 233025/269063 (executing program) 2022/09/12 18:23:28 fetching corpus: 5848, signal 233558/269472 (executing program) 2022/09/12 18:23:28 fetching corpus: 5898, signal 234018/269853 (executing program) 2022/09/12 18:23:28 fetching corpus: 5948, signal 234601/270231 (executing program) 2022/09/12 18:23:29 fetching corpus: 5998, signal 235251/270604 (executing program) 2022/09/12 18:23:29 fetching corpus: 6048, signal 235698/270918 (executing program) 2022/09/12 18:23:29 fetching corpus: 6098, signal 236027/271260 (executing program) 2022/09/12 18:23:29 fetching corpus: 6148, signal 236442/271584 (executing program) 2022/09/12 18:23:29 fetching corpus: 6198, signal 236976/271911 (executing program) 2022/09/12 18:23:29 fetching corpus: 6248, signal 237590/272294 (executing program) 2022/09/12 18:23:29 fetching corpus: 6298, signal 238407/272636 (executing program) 2022/09/12 18:23:30 fetching corpus: 6348, signal 238923/272901 (executing program) 2022/09/12 18:23:30 fetching corpus: 6398, signal 239599/273214 (executing program) 2022/09/12 18:23:30 fetching corpus: 6448, signal 240236/273501 (executing program) 2022/09/12 18:23:30 fetching corpus: 6498, signal 241011/273788 (executing program) 2022/09/12 18:23:30 fetching corpus: 6548, signal 241438/274071 (executing program) 2022/09/12 18:23:30 fetching corpus: 6598, signal 241840/274333 (executing program) 2022/09/12 18:23:30 fetching corpus: 6648, signal 242486/274649 (executing program) 2022/09/12 18:23:30 fetching corpus: 6698, signal 243080/274653 (executing program) 2022/09/12 18:23:31 fetching corpus: 6748, signal 243554/274658 (executing program) 2022/09/12 18:23:31 fetching corpus: 6798, signal 244183/274686 (executing program) 2022/09/12 18:23:31 fetching corpus: 6848, signal 244683/274746 (executing program) 2022/09/12 18:23:31 fetching corpus: 6898, signal 245015/274762 (executing program) 2022/09/12 18:23:31 fetching corpus: 6948, signal 245484/274780 (executing program) 2022/09/12 18:23:31 fetching corpus: 6998, signal 245860/274806 (executing program) 2022/09/12 18:23:31 fetching corpus: 7048, signal 246530/274843 (executing program) 2022/09/12 18:23:31 fetching corpus: 7098, signal 246896/274854 (executing program) 2022/09/12 18:23:32 fetching corpus: 7148, signal 247433/274862 (executing program) 2022/09/12 18:23:32 fetching corpus: 7198, signal 247829/274876 (executing program) 2022/09/12 18:23:32 fetching corpus: 7248, signal 248416/274918 (executing program) 2022/09/12 18:23:32 fetching corpus: 7298, signal 248947/274944 (executing program) 2022/09/12 18:23:32 fetching corpus: 7348, signal 249518/274975 (executing program) 2022/09/12 18:23:32 fetching corpus: 7398, signal 250042/274975 (executing program) 2022/09/12 18:23:32 fetching corpus: 7448, signal 250583/275010 (executing program) 2022/09/12 18:23:32 fetching corpus: 7498, signal 251173/275012 (executing program) 2022/09/12 18:23:33 fetching corpus: 7548, signal 251506/275021 (executing program) 2022/09/12 18:23:33 fetching corpus: 7598, signal 251952/275036 (executing program) 2022/09/12 18:23:33 fetching corpus: 7647, signal 252244/275042 (executing program) 2022/09/12 18:23:33 fetching corpus: 7697, signal 252568/275052 (executing program) 2022/09/12 18:23:33 fetching corpus: 7747, signal 252970/275090 (executing program) 2022/09/12 18:23:33 fetching corpus: 7797, signal 253705/275092 (executing program) 2022/09/12 18:23:33 fetching corpus: 7847, signal 254339/275125 (executing program) 2022/09/12 18:23:33 fetching corpus: 7897, signal 254872/275125 (executing program) 2022/09/12 18:23:34 fetching corpus: 7947, signal 255225/275154 (executing program) 2022/09/12 18:23:34 fetching corpus: 7997, signal 255745/275194 (executing program) 2022/09/12 18:23:34 fetching corpus: 8047, signal 256037/275201 (executing program) 2022/09/12 18:23:34 fetching corpus: 8097, signal 256560/275231 (executing program) 2022/09/12 18:23:34 fetching corpus: 8147, signal 256990/275243 (executing program) 2022/09/12 18:23:34 fetching corpus: 8197, signal 257523/275266 (executing program) 2022/09/12 18:23:34 fetching corpus: 8247, signal 257786/275274 (executing program) 2022/09/12 18:23:35 fetching corpus: 8297, signal 258192/275289 (executing program) 2022/09/12 18:23:35 fetching corpus: 8347, signal 258680/275292 (executing program) 2022/09/12 18:23:35 fetching corpus: 8397, signal 258998/275296 (executing program) 2022/09/12 18:23:35 fetching corpus: 8447, signal 259308/275326 (executing program) 2022/09/12 18:23:35 fetching corpus: 8497, signal 259647/275340 (executing program) 2022/09/12 18:23:35 fetching corpus: 8547, signal 260049/275340 (executing program) 2022/09/12 18:23:35 fetching corpus: 8597, signal 260359/275348 (executing program) 2022/09/12 18:23:35 fetching corpus: 8647, signal 260752/275355 (executing program) 2022/09/12 18:23:36 fetching corpus: 8697, signal 261336/275363 (executing program) 2022/09/12 18:23:36 fetching corpus: 8747, signal 261601/275364 (executing program) 2022/09/12 18:23:36 fetching corpus: 8797, signal 262181/275374 (executing program) 2022/09/12 18:23:36 fetching corpus: 8847, signal 262909/275385 (executing program) 2022/09/12 18:23:36 fetching corpus: 8897, signal 263445/275404 (executing program) 2022/09/12 18:23:36 fetching corpus: 8947, signal 263798/275404 (executing program) 2022/09/12 18:23:36 fetching corpus: 8997, signal 264387/275454 (executing program) 2022/09/12 18:23:37 fetching corpus: 9037, signal 264605/275458 (executing program) 2022/09/12 18:23:37 fetching corpus: 9037, signal 264605/275458 (executing program) 2022/09/12 18:23:39 starting 8 fuzzer processes 18:23:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x745840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) close(0xffffffffffffffff) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x44) 18:23:39 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x2a, 0x9b, 0x92, 0x0, 0x12d1, 0x8829, 0x936f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x2, 0x17, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004740), 0xffffffffffffffff) 18:23:39 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) 18:23:39 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 18:23:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40016001) 18:23:39 executing program 6: msgsnd(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02"], 0xdd, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/203}, 0xd3, 0x0, 0x1000) 18:23:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:23:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 76.991250] audit: type=1400 audit(1663007020.026:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 78.292363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.293466] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.295370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.296884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.298023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.304099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.310755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.311754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.314252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.315459] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.319404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.320615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.334178] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.340142] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.348784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.351320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.353379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.356367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.358731] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.360690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.378220] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.416770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.421282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.423907] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.429384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.433469] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.435147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.435980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.439807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.442688] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.451146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.451332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.453458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.455915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.456516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.458666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.461478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.463329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.464871] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.466888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.471546] Bluetooth: hci6: HCI_REQ-0x0c1a [ 78.471551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.494802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.496209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.515253] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.596316] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.621426] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.627273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.646017] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.373283] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 80.374793] Bluetooth: hci0: command 0x0409 tx timeout [ 80.439259] Bluetooth: hci2: command 0x0409 tx timeout [ 80.439826] Bluetooth: hci1: command 0x0409 tx timeout [ 80.502077] Bluetooth: hci6: command 0x0409 tx timeout [ 80.502638] Bluetooth: hci7: command 0x0409 tx timeout [ 80.598732] Bluetooth: hci4: command 0x0409 tx timeout [ 80.693223] Bluetooth: hci5: command 0x0409 tx timeout [ 82.421265] Bluetooth: hci0: command 0x041b tx timeout [ 82.485125] Bluetooth: hci1: command 0x041b tx timeout [ 82.485927] Bluetooth: hci2: command 0x041b tx timeout [ 82.549136] Bluetooth: hci7: command 0x041b tx timeout [ 82.549970] Bluetooth: hci6: command 0x041b tx timeout [ 82.613099] Bluetooth: hci4: command 0x041b tx timeout [ 82.741483] Bluetooth: hci5: command 0x041b tx timeout [ 84.166327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.176662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.181795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.195277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.197363] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.199775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.230159] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.469113] Bluetooth: hci0: command 0x040f tx timeout [ 84.533122] Bluetooth: hci2: command 0x040f tx timeout [ 84.535715] Bluetooth: hci1: command 0x040f tx timeout [ 84.597110] Bluetooth: hci6: command 0x040f tx timeout [ 84.597789] Bluetooth: hci7: command 0x040f tx timeout [ 84.661153] Bluetooth: hci4: command 0x040f tx timeout [ 84.789317] Bluetooth: hci5: command 0x040f tx timeout [ 86.261076] Bluetooth: hci3: command 0x0409 tx timeout [ 86.517069] Bluetooth: hci0: command 0x0419 tx timeout [ 86.581126] Bluetooth: hci1: command 0x0419 tx timeout [ 86.581576] Bluetooth: hci2: command 0x0419 tx timeout [ 86.645128] Bluetooth: hci7: command 0x0419 tx timeout [ 86.645543] Bluetooth: hci6: command 0x0419 tx timeout [ 86.709080] Bluetooth: hci4: command 0x0419 tx timeout [ 86.837459] Bluetooth: hci5: command 0x0419 tx timeout [ 88.309154] Bluetooth: hci3: command 0x041b tx timeout [ 90.357069] Bluetooth: hci3: command 0x040f tx timeout [ 92.405588] Bluetooth: hci3: command 0x0419 tx timeout [ 134.320489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.331118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:24:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)) 18:24:37 executing program 7: prctl$PR_CAPBSET_DROP(0x18, 0x0) 18:24:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r2, r1, 0x0, 0xffff) 18:24:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) [ 134.669777] audit: type=1400 audit(1663007077.705:7): avc: denied { open } for pid=3886 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.674582] audit: type=1400 audit(1663007077.705:8): avc: denied { kernel } for pid=3886 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.691330] ------------[ cut here ]------------ [ 134.691364] [ 134.691369] ====================================================== [ 134.691375] WARNING: possible circular locking dependency detected [ 134.691382] 6.0.0-rc5-next-20220912 #1 Not tainted [ 134.691393] ------------------------------------------------------ [ 134.691399] syz-executor.7/3890 is trying to acquire lock: [ 134.691410] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.691470] [ 134.691470] but task is already holding lock: [ 134.691475] ffff88800f428420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.691524] [ 134.691524] which lock already depends on the new lock. [ 134.691524] [ 134.691529] [ 134.691529] the existing dependency chain (in reverse order) is: [ 134.691535] [ 134.691535] -> #3 (&ctx->lock){....}-{2:2}: [ 134.691560] _raw_spin_lock+0x2a/0x40 [ 134.691590] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.691612] __schedule+0xedd/0x2470 [ 134.691635] preempt_schedule_common+0x45/0xc0 [ 134.691654] __cond_resched+0x17/0x30 [ 134.691672] __mutex_lock+0xa3/0x14d0 [ 134.691692] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.691716] do_syscall_64+0x3b/0x90 [ 134.691740] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.691771] [ 134.691771] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.691796] _raw_spin_lock_nested+0x30/0x40 [ 134.691823] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.691846] task_fork_fair+0x63/0x4d0 [ 134.691877] sched_cgroup_fork+0x3d0/0x540 [ 134.691903] copy_process+0x3f9e/0x6df0 [ 134.691922] kernel_clone+0xe7/0x890 [ 134.691939] user_mode_thread+0xad/0xf0 [ 134.691958] rest_init+0x24/0x250 [ 134.691988] arch_call_rest_init+0xf/0x14 [ 134.692021] start_kernel+0x4c1/0x4e6 [ 134.692052] secondary_startup_64_no_verify+0xe0/0xeb [ 134.692078] [ 134.692078] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.692102] _raw_spin_lock_irqsave+0x39/0x60 [ 134.692130] try_to_wake_up+0xab/0x1920 [ 134.692155] up+0x75/0xb0 [ 134.692176] __up_console_sem+0x6e/0x80 [ 134.692205] console_unlock+0x46a/0x590 [ 134.692235] vprintk_emit+0x1bd/0x560 [ 134.692266] vprintk+0x84/0xa0 [ 134.692297] _printk+0xba/0xf1 [ 134.692328] kauditd_hold_skb.cold+0x3f/0x4e [ 134.692354] kauditd_send_queue+0x233/0x290 [ 134.692381] kauditd_thread+0x5da/0x9a0 [ 134.692406] kthread+0x2ed/0x3a0 [ 134.692433] ret_from_fork+0x22/0x30 [ 134.692456] [ 134.692456] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.692481] __lock_acquire+0x2a02/0x5e70 [ 134.692512] lock_acquire+0x1a2/0x530 [ 134.692542] _raw_spin_lock_irqsave+0x39/0x60 [ 134.692569] down_trylock+0xe/0x70 [ 134.692592] __down_trylock_console_sem+0x3b/0xd0 [ 134.692623] vprintk_emit+0x16b/0x560 [ 134.692654] vprintk+0x84/0xa0 [ 134.692693] _printk+0xba/0xf1 [ 134.692723] report_bug.cold+0x72/0xab [ 134.692745] handle_bug+0x3c/0x70 [ 134.692768] exc_invalid_op+0x14/0x50 [ 134.692792] asm_exc_invalid_op+0x16/0x20 [ 134.692822] group_sched_out.part.0+0x2c7/0x460 [ 134.692841] ctx_sched_out+0x8f1/0xc10 [ 134.692859] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.692882] __schedule+0xedd/0x2470 [ 134.692899] preempt_schedule_common+0x45/0xc0 [ 134.692918] __cond_resched+0x17/0x30 [ 134.692936] __mutex_lock+0xa3/0x14d0 [ 134.692956] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.692979] do_syscall_64+0x3b/0x90 [ 134.693003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.693034] [ 134.693034] other info that might help us debug this: [ 134.693034] [ 134.693038] Chain exists of: [ 134.693038] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.693038] [ 134.693066] Possible unsafe locking scenario: [ 134.693066] [ 134.693070] CPU0 CPU1 [ 134.693074] ---- ---- [ 134.693078] lock(&ctx->lock); [ 134.693088] lock(&rq->__lock); [ 134.693100] lock(&ctx->lock); [ 134.693111] lock((console_sem).lock); [ 134.693122] [ 134.693122] *** DEADLOCK *** [ 134.693122] [ 134.693125] 2 locks held by syz-executor.7/3890: [ 134.693138] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.693184] #1: ffff88800f428420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.693236] [ 134.693236] stack backtrace: [ 134.693240] CPU: 0 PID: 3890 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1 [ 134.693263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.693277] Call Trace: [ 134.693283] [ 134.693290] dump_stack_lvl+0x8b/0xb3 [ 134.693316] check_noncircular+0x263/0x2e0 [ 134.693347] ? format_decode+0x26c/0xb50 [ 134.693373] ? print_circular_bug+0x450/0x450 [ 134.693405] ? enable_ptr_key_workfn+0x20/0x20 [ 134.693432] ? lock_release+0x547/0x750 [ 134.693463] ? format_decode+0x26c/0xb50 [ 134.693492] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.693525] __lock_acquire+0x2a02/0x5e70 [ 134.693566] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.693609] lock_acquire+0x1a2/0x530 [ 134.693640] ? down_trylock+0xe/0x70 [ 134.693668] ? rcu_read_unlock+0x40/0x40 [ 134.693707] ? vprintk+0x84/0xa0 [ 134.693742] _raw_spin_lock_irqsave+0x39/0x60 [ 134.693770] ? down_trylock+0xe/0x70 [ 134.693795] down_trylock+0xe/0x70 [ 134.693820] ? vprintk+0x84/0xa0 [ 134.693853] __down_trylock_console_sem+0x3b/0xd0 [ 134.693886] vprintk_emit+0x16b/0x560 [ 134.693922] vprintk+0x84/0xa0 [ 134.693955] _printk+0xba/0xf1 [ 134.693988] ? record_print_text.cold+0x16/0x16 [ 134.694029] ? report_bug.cold+0x66/0xab [ 134.694055] ? group_sched_out.part.0+0x2c7/0x460 [ 134.694076] report_bug.cold+0x72/0xab [ 134.694103] handle_bug+0x3c/0x70 [ 134.694128] exc_invalid_op+0x14/0x50 [ 134.694155] asm_exc_invalid_op+0x16/0x20 [ 134.694186] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.694210] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.694231] RSP: 0018:ffff888042def978 EFLAGS: 00010006 [ 134.694248] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.694262] RDX: ffff888018729ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.694276] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 134.694290] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800f428400 [ 134.694304] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 134.694324] ? group_sched_out.part.0+0x2c7/0x460 [ 134.694349] ? group_sched_out.part.0+0x2c7/0x460 [ 134.694373] ctx_sched_out+0x8f1/0xc10 [ 134.694396] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.694425] ? lock_is_held_type+0xd7/0x130 [ 134.694459] ? __perf_cgroup_move+0x160/0x160 [ 134.694481] ? set_next_entity+0x304/0x550 [ 134.694514] ? update_curr+0x267/0x740 [ 134.694549] ? lock_is_held_type+0xd7/0x130 [ 134.694584] __schedule+0xedd/0x2470 [ 134.694607] ? io_schedule_timeout+0x150/0x150 [ 134.694627] ? find_held_lock+0x2c/0x110 [ 134.694658] ? lock_is_held_type+0xd7/0x130 [ 134.694691] ? __cond_resched+0x17/0x30 [ 134.694711] preempt_schedule_common+0x45/0xc0 [ 134.694734] __cond_resched+0x17/0x30 [ 134.694753] __mutex_lock+0xa3/0x14d0 [ 134.694777] ? lock_is_held_type+0xd7/0x130 [ 134.694808] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.694836] ? mutex_lock_io_nested+0x1310/0x1310 [ 134.694859] ? lock_release+0x3b2/0x750 [ 134.694892] ? __up_read+0x192/0x730 [ 134.694919] ? up_write+0x480/0x480 [ 134.694951] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.694982] ? __up_read+0x192/0x730 [ 134.695008] ? perf_compat_ioctl+0x130/0x130 [ 134.695032] ? up_write+0x480/0x480 [ 134.695066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.695100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.695137] do_syscall_64+0x3b/0x90 [ 134.695163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.695196] RIP: 0033:0x7f23cc9fdb19 [ 134.695211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.695232] RSP: 002b:00007f23c9f73188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.695252] RAX: ffffffffffffffda RBX: 00007f23ccb10f60 RCX: 00007f23cc9fdb19 [ 134.695266] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 134.695280] RBP: 00007f23cca57f6d R08: 0000000000000001 R09: 0000000000000000 [ 134.695294] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.695307] R13: 00007ffd45176def R14: 00007f23c9f73300 R15: 0000000000022000 [ 134.695331] [ 134.808778] WARNING: CPU: 0 PID: 3890 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.810008] Modules linked in: [ 134.810440] CPU: 0 PID: 3890 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1 [ 134.811509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.813011] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.813744] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.816127] RSP: 0018:ffff888042def978 EFLAGS: 00010006 [ 134.816842] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.817778] RDX: ffff888018729ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.818716] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 134.819651] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800f428400 [ 134.820592] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 134.821555] FS: 00007f23c9f73700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 134.822614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.823390] CR2: 00007fd174395fe0 CR3: 000000001b296000 CR4: 0000000000350ef0 [ 134.824335] Call Trace: [ 134.824691] [ 134.825001] ctx_sched_out+0x8f1/0xc10 [ 134.825528] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.826224] ? lock_is_held_type+0xd7/0x130 [ 134.826818] ? __perf_cgroup_move+0x160/0x160 [ 134.827430] ? set_next_entity+0x304/0x550 [ 134.828012] ? update_curr+0x267/0x740 [ 134.828553] ? lock_is_held_type+0xd7/0x130 [ 134.829176] __schedule+0xedd/0x2470 [ 134.829679] ? io_schedule_timeout+0x150/0x150 [ 134.830302] ? find_held_lock+0x2c/0x110 [ 134.830861] ? lock_is_held_type+0xd7/0x130 [ 134.831461] ? __cond_resched+0x17/0x30 [ 134.832009] preempt_schedule_common+0x45/0xc0 [ 134.832638] __cond_resched+0x17/0x30 [ 134.833172] __mutex_lock+0xa3/0x14d0 [ 134.833691] ? lock_is_held_type+0xd7/0x130 [ 134.834280] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.834976] ? mutex_lock_io_nested+0x1310/0x1310 [ 134.835638] ? lock_release+0x3b2/0x750 [ 134.836191] ? __up_read+0x192/0x730 [ 134.836718] ? up_write+0x480/0x480 [ 134.837230] __do_sys_perf_event_open+0x1eec/0x32c0 [ 134.837920] ? __up_read+0x192/0x730 [ 134.838438] ? perf_compat_ioctl+0x130/0x130 [ 134.839042] ? up_write+0x480/0x480 [ 134.839551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.840257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.840974] do_syscall_64+0x3b/0x90 [ 134.841493] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.842200] RIP: 0033:0x7f23cc9fdb19 [ 134.842705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.845059] RSP: 002b:00007f23c9f73188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.846042] RAX: ffffffffffffffda RBX: 00007f23ccb10f60 RCX: 00007f23cc9fdb19 [ 134.846962] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 134.847892] RBP: 00007f23cca57f6d R08: 0000000000000001 R09: 0000000000000000 [ 134.848830] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.849775] R13: 00007ffd45176def R14: 00007f23c9f73300 R15: 0000000000022000 [ 134.850745] [ 134.851074] irq event stamp: 760 [ 134.851534] hardirqs last enabled at (759): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.852869] hardirqs last disabled at (760): [] __schedule+0x1225/0x2470 [ 134.853971] softirqs last enabled at (758): [] __irq_exit_rcu+0x11b/0x180 [ 134.855114] softirqs last disabled at (751): [] __irq_exit_rcu+0x11b/0x180 [ 134.856256] ---[ end trace 0000000000000000 ]--- 18:24:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39333832373135313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001f4ebd2e6bb144ba8e000d53fbc5896c010000000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000dc5271addc5271ad00000000e0f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000e0f4655fe0f4655fe0f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f736dadd00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f024aad600000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000e1f4655fe1f4655fe1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3933383237313531382f66696c65302f66696c653000000000000000000000000000000000000000000000543a54af00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="ed81000064000000e1f4655fe1f4655fe1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2e2d9eb500000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) [ 134.958587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.959932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.986123] loop6: detected capacity change from 0 to 512 18:24:38 executing program 1: syz_mount_image$msdos(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000ec0)) [ 135.007188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 135.065928] FAT-fs (loop1): bogus number of reserved sectors [ 135.066782] FAT-fs (loop1): Can't find a valid FAT filesystem [ 135.076589] EXT4-fs (loop6): unmounting filesystem. [ 135.158039] hrtimer: interrupt took 17923 ns [ 135.185340] FAT-fs (loop1): bogus number of reserved sectors [ 135.186203] FAT-fs (loop1): Can't find a valid FAT filesystem 18:24:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0xfffffffffffffffd) 18:24:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000080)) 18:24:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') timerfd_settime(r0, 0x0, &(0x7f0000001300)={{}, {0x0, 0x989680}}, 0x0) 18:24:40 executing program 7: ioprio_get$pid(0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) 18:24:40 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 18:24:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) 18:24:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') timerfd_settime(r0, 0x0, &(0x7f0000001300)={{}, {0x0, 0x989680}}, 0x0) 18:24:40 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 18:24:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r0, r0, 0x0, 0x100000) 18:24:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) 18:24:40 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 18:24:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086602, 0xfffffffffffffffe) 18:24:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) 18:24:40 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 18:24:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 18:24:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') timerfd_settime(r0, 0x0, &(0x7f0000001300)={{}, {0x0, 0x989680}}, 0x0) 18:24:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086602, 0xfffffffffffffffe) 18:24:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 18:24:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0x0) 18:24:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') timerfd_settime(r0, 0x0, &(0x7f0000001300)={{}, {0x0, 0x989680}}, 0x0) 18:24:41 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 18:24:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 18:24:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086602, 0xfffffffffffffffe) 18:24:41 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xc3}, 0x0, 0x0, 0x2, 0xb, 0x0, 0x96}, 0x20) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) 18:24:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 18:24:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x8001, 0x100000000, 0x9, 0x4}, &(0x7f0000000080)) r1 = getpid() r2 = clone3(&(0x7f00000008c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x29}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{0x9, 0x6, 0x3c, 0x80000001}, {0x8, 0x81, 0xf8, 0x1}, {0x8, 0x1, 0x6, 0x3}]}) tkill(r3, 0x17) mq_notify(r0, 0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r2, r3], 0x2}, 0x58) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) ptrace$setopts(0x4206, r4, 0x100000000001, 0x44) ptrace(0x4208, r4) ptrace(0x4208, r4) 18:24:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) clone3(0x0, 0x0) 18:24:41 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 18:24:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) [ 138.867468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.883276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.887317] loop2: detected capacity change from 0 to 40 18:24:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086602, 0xfffffffffffffffe) 18:24:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) [ 138.893620] syz-executor.6 (4064) used greatest stack depth: 22872 bytes left 18:24:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 18:24:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x7fffffff, 0x1, 0x6}) [ 138.952299] syz-executor.2: attempt to access beyond end of device [ 138.952299] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.953538] Buffer I/O error on dev loop2, logical block 10, lost async page write 18:24:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 18:24:42 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8800) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0x9, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x4, 0x4) r2 = open_tree(r1, &(0x7f0000000640)='.\x00', 0x8100) recvmsg$unix(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)=""/184, 0xb8}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/224, 0xe0}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/35, 0x23}], 0x7, &(0x7f00000029c0)=[@cred={{0x1c}}], 0x20}, 0xb03d3487446c7256) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002a40)) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000002c40), 0x4) pipe2(&(0x7f0000002f00), 0x0) r3 = openat$incfs(r2, &(0x7f0000002f80)='.pending_reads\x00', 0x22143, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000002fc0)={{r3}, "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"}) pivot_root(&(0x7f0000003fc0)='./file1\x00', &(0x7f0000004000)='./file0\x00') 18:24:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 18:24:42 executing program 6: prctl$PR_SET_MM_EXE_FILE(0x35, 0xd, 0xffffffffffffffff) [ 139.187651] loop2: detected capacity change from 0 to 40 [ 139.197709] loop5: detected capacity change from 0 to 40 18:24:42 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 18:24:42 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 18:24:42 executing program 6: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 18:24:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 18:24:42 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 18:24:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:42 executing program 0: pselect6(0x40, &(0x7f00000036c0), 0xfffffffffffffffd, 0x0, 0x0, 0x0) [ 139.294898] syz-executor.2: attempt to access beyond end of device [ 139.294898] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.296095] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 139.320092] process 'syz-executor.6' launched './file1' with NULL argv: empty string added [ 139.323760] syz-executor.5: attempt to access beyond end of device [ 139.323760] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.324712] Buffer I/O error on dev loop5, logical block 10, lost async page write 18:24:42 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000001c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x9, 0x6, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x600, 0x4, 0x1, 0x0, 0x2, "ef8a0061728960537fbebf0ef1379fdc8a2484", 0x80000000, 0x8}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 18:24:42 executing program 0: pselect6(0x40, &(0x7f00000036c0), 0xfffffffffffffffd, 0x0, 0x0, 0x0) 18:24:42 executing program 1: clock_gettime(0xb, &(0x7f0000000740)) [ 139.378976] loop4: detected capacity change from 0 to 27 [ 139.383324] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 139.478231] loop4: detected capacity change from 0 to 27 [ 139.479123] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 18:24:42 executing program 0: pselect6(0x40, &(0x7f00000036c0), 0xfffffffffffffffd, 0x0, 0x0, 0x0) 18:24:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 18:24:42 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 18:24:42 executing program 6: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 18:24:42 executing program 1: clock_gettime(0xb, &(0x7f0000000740)) 18:24:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 139.558384] loop5: detected capacity change from 0 to 40 [ 139.559400] loop2: detected capacity change from 0 to 40 18:24:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:42 executing program 1: clock_gettime(0xb, &(0x7f0000000740)) 18:24:42 executing program 0: pselect6(0x40, &(0x7f00000036c0), 0xfffffffffffffffd, 0x0, 0x0, 0x0) 18:24:42 executing program 6: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 18:24:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) [ 139.638609] syz-executor.5: attempt to access beyond end of device [ 139.638609] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.639676] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 139.673547] loop3: detected capacity change from 0 to 27 [ 139.675330] syz-executor.2: attempt to access beyond end of device [ 139.675330] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.676680] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 139.677180] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 18:24:42 executing program 1: clock_gettime(0xb, &(0x7f0000000740)) [ 139.684753] loop4: detected capacity change from 0 to 27 [ 139.685426] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 18:24:42 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 18:24:42 executing program 6: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 18:24:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xb1) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="873b07000000efb1606e00770100"/24, @ANYRES32=r3, @ANYBLOB='Y0\x00``\x00'/18]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xa015000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) [ 139.954534] loop5: detected capacity change from 0 to 40 [ 139.977424] loop2: detected capacity change from 0 to 40 18:24:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) [ 140.080268] loop1: detected capacity change from 0 to 27 [ 140.080980] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.088935] syz-executor.2: attempt to access beyond end of device [ 140.088935] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 140.089965] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 140.122429] loop7: detected capacity change from 0 to 27 [ 140.122443] loop0: detected capacity change from 0 to 27 [ 140.123041] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.130533] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.187158] loop3: detected capacity change from 0 to 27 [ 140.187806] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.189910] loop4: detected capacity change from 0 to 27 [ 140.190584] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.879665] syz-executor.5: attempt to access beyond end of device [ 140.879665] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 140.881301] Buffer I/O error on dev loop5, logical block 10, lost async page write 18:24:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) [ 141.183945] loop7: detected capacity change from 0 to 27 [ 141.196887] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 18:24:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:44 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) pselect6(0x40, &(0x7f0000000440), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) [ 141.695940] loop2: detected capacity change from 0 to 27 [ 141.717482] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 18:24:44 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1000000, 0x4) [ 141.955238] loop0: detected capacity change from 0 to 27 [ 141.956328] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 141.958999] loop3: detected capacity change from 0 to 27 [ 141.964259] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 141.965575] loop6: detected capacity change from 0 to 27 [ 141.966229] loop4: detected capacity change from 0 to 27 [ 141.968086] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 141.968128] loop1: detected capacity change from 0 to 27 [ 141.970221] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 141.994413] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 142.000302] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 18:24:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) migrate_pages(0x0, 0x2, &(0x7f0000000200)=0x391, &(0x7f0000000240)=0xfff) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140a0000190001000000000000000000020a008058f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829bea57f735eaabf87d23701a0c5d56732c4c3de5887f348e70e191fe2f34ac416912f79e7c5329c9702be9412211b0ebcbcde9e9a595a67b11894c0f50e34dfe57cd7c969d110d4bedb65cca183e4dc9b68f69212be0afbee3499f56f57d3dc094fbf58ef1b5f6313a9fe4d0d17dc2b0c06648590788b2a6747b5b9d61f"], 0xa14}], 0x1}, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x30, 0x2, @thr={&(0x7f0000000040)="637abd", &(0x7f0000000140)="4e8ccc01"}}, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) 18:24:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) migrate_pages(0x0, 0x2, &(0x7f0000000200)=0x391, &(0x7f0000000240)=0xfff) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140a0000190001000000000000000000020a008058f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829bea57f735eaabf87d23701a0c5d56732c4c3de5887f348e70e191fe2f34ac416912f79e7c5329c9702be9412211b0ebcbcde9e9a595a67b11894c0f50e34dfe57cd7c969d110d4bedb65cca183e4dc9b68f69212be0afbee3499f56f57d3dc094fbf58ef1b5f6313a9fe4d0d17dc2b0c06648590788b2a6747b5b9d61f"], 0xa14}], 0x1}, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x30, 0x2, @thr={&(0x7f0000000040)="637abd", &(0x7f0000000140)="4e8ccc01"}}, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) 18:24:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0xfffffffffffffffc) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r5, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) 18:24:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 18:24:38 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042def3c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f23c9f73700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd174395fe0 CR3=000000001b296000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff11001c5cce6 RBX=ffff88800d661808 RCX=ffffffff812aaa31 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88800e2e6730 RBP=ffff8880353aa400 RSP=ffff88804304f9c0 R8 =0000000000000001 R9 =ffff88804304f963 R10=ffffed1008609f2c R11=0000000000000001 R12=dffffc0000000000 R13=ffff8880353aa600 R14=0000000000000000 R15=ffff8880353aa600 RIP=ffffffff817bc282 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc2191b51f0 CR3=000000000d416000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000