Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:59413' (ECDSA) to the list of known hosts. 2022/09/23 13:02:42 fuzzer started 2022/09/23 13:02:42 dialing manager at localhost:38881 syzkaller login: [ 38.900991] cgroup: Unknown subsys name 'net' [ 39.024685] cgroup: Unknown subsys name 'rlimit' 2022/09/23 13:02:56 syscalls: 2215 2022/09/23 13:02:56 code coverage: enabled 2022/09/23 13:02:56 comparison tracing: enabled 2022/09/23 13:02:56 extra coverage: enabled 2022/09/23 13:02:56 setuid sandbox: enabled 2022/09/23 13:02:56 namespace sandbox: enabled 2022/09/23 13:02:56 Android sandbox: enabled 2022/09/23 13:02:56 fault injection: enabled 2022/09/23 13:02:56 leak checking: enabled 2022/09/23 13:02:56 net packet injection: enabled 2022/09/23 13:02:56 net device setup: enabled 2022/09/23 13:02:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/23 13:02:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/23 13:02:56 USB emulation: enabled 2022/09/23 13:02:56 hci packet injection: enabled 2022/09/23 13:02:56 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/23 13:02:56 802.15.4 emulation: enabled 2022/09/23 13:02:56 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/23 13:02:57 fetching corpus: 40, signal 20250/23836 (executing program) 2022/09/23 13:02:57 fetching corpus: 90, signal 32256/37279 (executing program) 2022/09/23 13:02:57 fetching corpus: 140, signal 43540/49763 (executing program) 2022/09/23 13:02:57 fetching corpus: 190, signal 50754/58193 (executing program) 2022/09/23 13:02:57 fetching corpus: 240, signal 57242/65799 (executing program) 2022/09/23 13:02:57 fetching corpus: 290, signal 59990/69804 (executing program) 2022/09/23 13:02:57 fetching corpus: 340, signal 64542/75406 (executing program) 2022/09/23 13:02:57 fetching corpus: 390, signal 68156/80063 (executing program) 2022/09/23 13:02:57 fetching corpus: 440, signal 73894/86464 (executing program) 2022/09/23 13:02:58 fetching corpus: 490, signal 77278/90714 (executing program) 2022/09/23 13:02:58 fetching corpus: 540, signal 80304/94619 (executing program) 2022/09/23 13:02:58 fetching corpus: 589, signal 84050/99055 (executing program) 2022/09/23 13:02:58 fetching corpus: 639, signal 87205/102966 (executing program) 2022/09/23 13:02:58 fetching corpus: 689, signal 92287/108456 (executing program) 2022/09/23 13:02:58 fetching corpus: 739, signal 93743/110751 (executing program) 2022/09/23 13:02:58 fetching corpus: 789, signal 95722/113421 (executing program) 2022/09/23 13:02:58 fetching corpus: 839, signal 98304/116557 (executing program) 2022/09/23 13:02:59 fetching corpus: 889, signal 101893/120543 (executing program) 2022/09/23 13:02:59 fetching corpus: 939, signal 104138/123298 (executing program) 2022/09/23 13:02:59 fetching corpus: 989, signal 106432/126017 (executing program) 2022/09/23 13:02:59 fetching corpus: 1039, signal 109046/128948 (executing program) 2022/09/23 13:02:59 fetching corpus: 1089, signal 112998/132868 (executing program) 2022/09/23 13:02:59 fetching corpus: 1139, signal 115340/135498 (executing program) 2022/09/23 13:02:59 fetching corpus: 1189, signal 116692/137374 (executing program) 2022/09/23 13:03:00 fetching corpus: 1239, signal 118177/139403 (executing program) 2022/09/23 13:03:00 fetching corpus: 1289, signal 120388/141844 (executing program) 2022/09/23 13:03:00 fetching corpus: 1339, signal 121482/143482 (executing program) 2022/09/23 13:03:00 fetching corpus: 1389, signal 124122/146164 (executing program) 2022/09/23 13:03:00 fetching corpus: 1439, signal 125908/148136 (executing program) 2022/09/23 13:03:00 fetching corpus: 1489, signal 129354/151238 (executing program) 2022/09/23 13:03:00 fetching corpus: 1539, signal 130659/152843 (executing program) 2022/09/23 13:03:00 fetching corpus: 1589, signal 131841/154336 (executing program) 2022/09/23 13:03:01 fetching corpus: 1639, signal 133507/156140 (executing program) 2022/09/23 13:03:01 fetching corpus: 1688, signal 135392/158044 (executing program) 2022/09/23 13:03:01 fetching corpus: 1738, signal 137170/159885 (executing program) 2022/09/23 13:03:01 fetching corpus: 1787, signal 139414/161927 (executing program) 2022/09/23 13:03:01 fetching corpus: 1837, signal 140669/163317 (executing program) 2022/09/23 13:03:01 fetching corpus: 1887, signal 142660/165077 (executing program) 2022/09/23 13:03:01 fetching corpus: 1937, signal 144039/166425 (executing program) 2022/09/23 13:03:02 fetching corpus: 1987, signal 145882/168151 (executing program) 2022/09/23 13:03:02 fetching corpus: 2037, signal 146753/169169 (executing program) 2022/09/23 13:03:02 fetching corpus: 2087, signal 147781/170320 (executing program) 2022/09/23 13:03:02 fetching corpus: 2137, signal 149297/171714 (executing program) 2022/09/23 13:03:02 fetching corpus: 2187, signal 150890/173079 (executing program) 2022/09/23 13:03:02 fetching corpus: 2237, signal 151875/174103 (executing program) 2022/09/23 13:03:02 fetching corpus: 2287, signal 153297/175371 (executing program) 2022/09/23 13:03:02 fetching corpus: 2337, signal 154257/176330 (executing program) 2022/09/23 13:03:03 fetching corpus: 2387, signal 155517/177411 (executing program) 2022/09/23 13:03:03 fetching corpus: 2437, signal 156798/178486 (executing program) 2022/09/23 13:03:03 fetching corpus: 2487, signal 157958/179479 (executing program) 2022/09/23 13:03:03 fetching corpus: 2537, signal 159460/180555 (executing program) 2022/09/23 13:03:03 fetching corpus: 2587, signal 160083/181256 (executing program) 2022/09/23 13:03:03 fetching corpus: 2637, signal 160844/182009 (executing program) 2022/09/23 13:03:03 fetching corpus: 2687, signal 161385/182620 (executing program) 2022/09/23 13:03:03 fetching corpus: 2737, signal 162377/183414 (executing program) 2022/09/23 13:03:04 fetching corpus: 2787, signal 162978/184067 (executing program) 2022/09/23 13:03:04 fetching corpus: 2837, signal 164435/185050 (executing program) 2022/09/23 13:03:04 fetching corpus: 2887, signal 165517/185832 (executing program) 2022/09/23 13:03:04 fetching corpus: 2936, signal 166111/186375 (executing program) 2022/09/23 13:03:04 fetching corpus: 2986, signal 166860/187017 (executing program) 2022/09/23 13:03:04 fetching corpus: 3036, signal 167486/187575 (executing program) 2022/09/23 13:03:04 fetching corpus: 3086, signal 168580/188289 (executing program) 2022/09/23 13:03:04 fetching corpus: 3136, signal 169325/188825 (executing program) 2022/09/23 13:03:05 fetching corpus: 3186, signal 170529/189538 (executing program) 2022/09/23 13:03:05 fetching corpus: 3236, signal 171311/190101 (executing program) 2022/09/23 13:03:05 fetching corpus: 3286, signal 171819/190533 (executing program) 2022/09/23 13:03:05 fetching corpus: 3336, signal 172575/191138 (executing program) 2022/09/23 13:03:05 fetching corpus: 3386, signal 173238/191602 (executing program) 2022/09/23 13:03:05 fetching corpus: 3436, signal 173950/192083 (executing program) 2022/09/23 13:03:05 fetching corpus: 3486, signal 174779/192583 (executing program) 2022/09/23 13:03:05 fetching corpus: 3536, signal 175706/193085 (executing program) 2022/09/23 13:03:06 fetching corpus: 3586, signal 176727/193589 (executing program) 2022/09/23 13:03:06 fetching corpus: 3636, signal 177430/194034 (executing program) 2022/09/23 13:03:06 fetching corpus: 3686, signal 178612/194572 (executing program) 2022/09/23 13:03:06 fetching corpus: 3736, signal 179265/194951 (executing program) 2022/09/23 13:03:06 fetching corpus: 3785, signal 180165/195332 (executing program) 2022/09/23 13:03:06 fetching corpus: 3835, signal 181110/195737 (executing program) 2022/09/23 13:03:06 fetching corpus: 3885, signal 181958/196071 (executing program) 2022/09/23 13:03:06 fetching corpus: 3935, signal 182571/196392 (executing program) 2022/09/23 13:03:06 fetching corpus: 3985, signal 183070/196662 (executing program) 2022/09/23 13:03:07 fetching corpus: 4035, signal 183997/197048 (executing program) 2022/09/23 13:03:07 fetching corpus: 4084, signal 185009/197425 (executing program) 2022/09/23 13:03:07 fetching corpus: 4134, signal 185793/197707 (executing program) 2022/09/23 13:03:07 fetching corpus: 4184, signal 186425/197926 (executing program) 2022/09/23 13:03:07 fetching corpus: 4234, signal 186990/198125 (executing program) 2022/09/23 13:03:07 fetching corpus: 4284, signal 187360/198322 (executing program) 2022/09/23 13:03:07 fetching corpus: 4334, signal 188044/198506 (executing program) 2022/09/23 13:03:07 fetching corpus: 4384, signal 189018/198759 (executing program) 2022/09/23 13:03:08 fetching corpus: 4434, signal 189649/198923 (executing program) 2022/09/23 13:03:08 fetching corpus: 4484, signal 190226/199062 (executing program) 2022/09/23 13:03:08 fetching corpus: 4534, signal 190895/199190 (executing program) 2022/09/23 13:03:08 fetching corpus: 4584, signal 191661/199304 (executing program) 2022/09/23 13:03:08 fetching corpus: 4634, signal 192636/199410 (executing program) 2022/09/23 13:03:08 fetching corpus: 4684, signal 193502/199493 (executing program) 2022/09/23 13:03:08 fetching corpus: 4722, signal 194169/199597 (executing program) 2022/09/23 13:03:08 fetching corpus: 4722, signal 194169/199674 (executing program) 2022/09/23 13:03:08 fetching corpus: 4722, signal 194169/199717 (executing program) 2022/09/23 13:03:08 fetching corpus: 4722, signal 194169/199717 (executing program) 2022/09/23 13:03:10 starting 8 fuzzer processes 13:03:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:03:10 executing program 1: eventfd2(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:03:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:03:10 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000600)={0x0, 0x0, 0x2}, 0x8) 13:03:10 executing program 4: syz_io_uring_setup(0x5db1, &(0x7f0000006440), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000064c0), &(0x7f0000006500)) [ 66.564064] audit: type=1400 audit(1663938190.500:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:03:10 executing program 5: r0 = socket(0x2, 0x3, 0xe4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 13:03:10 executing program 6: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:03:10 executing program 7: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fork() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)) [ 67.820473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.823731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.825256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.827943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.829798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.831551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.836349] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.898735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.900216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.902361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.905457] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.907585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.909430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.912719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.913914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.915196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.916769] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.918042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.919199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.921647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.933681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.935068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.936134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.937338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.941216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.942213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.944605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.946202] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.947821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.950342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.952526] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.954046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.956555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.958548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.959826] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.961137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.963032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.963540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.966062] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.967542] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.969032] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.970411] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.971607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.973298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.975395] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.980214] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.982972] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.987832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.996220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.997947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.999416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.015962] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.023187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.024858] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.026366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.031595] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.893414] Bluetooth: hci0: command 0x0409 tx timeout [ 70.021248] Bluetooth: hci5: command 0x0409 tx timeout [ 70.021927] Bluetooth: hci4: command 0x0409 tx timeout [ 70.022439] Bluetooth: hci3: command 0x0409 tx timeout [ 70.022903] Bluetooth: hci6: command 0x0409 tx timeout [ 70.023400] Bluetooth: hci2: command 0x0409 tx timeout [ 70.085495] Bluetooth: hci7: command 0x0409 tx timeout [ 70.086033] Bluetooth: hci1: command 0x0409 tx timeout [ 71.941499] Bluetooth: hci0: command 0x041b tx timeout [ 72.069627] Bluetooth: hci2: command 0x041b tx timeout [ 72.070372] Bluetooth: hci6: command 0x041b tx timeout [ 72.070736] Bluetooth: hci3: command 0x041b tx timeout [ 72.071123] Bluetooth: hci4: command 0x041b tx timeout [ 72.071486] Bluetooth: hci5: command 0x041b tx timeout [ 72.133186] Bluetooth: hci1: command 0x041b tx timeout [ 72.133612] Bluetooth: hci7: command 0x041b tx timeout [ 73.989177] Bluetooth: hci0: command 0x040f tx timeout [ 74.117203] Bluetooth: hci5: command 0x040f tx timeout [ 74.117660] Bluetooth: hci4: command 0x040f tx timeout [ 74.118060] Bluetooth: hci3: command 0x040f tx timeout [ 74.119261] Bluetooth: hci6: command 0x040f tx timeout [ 74.119663] Bluetooth: hci2: command 0x040f tx timeout [ 74.181847] Bluetooth: hci7: command 0x040f tx timeout [ 74.182297] Bluetooth: hci1: command 0x040f tx timeout [ 76.037176] Bluetooth: hci0: command 0x0419 tx timeout [ 76.165266] Bluetooth: hci2: command 0x0419 tx timeout [ 76.165721] Bluetooth: hci6: command 0x0419 tx timeout [ 76.166144] Bluetooth: hci3: command 0x0419 tx timeout [ 76.166528] Bluetooth: hci4: command 0x0419 tx timeout [ 76.166908] Bluetooth: hci5: command 0x0419 tx timeout [ 76.229188] Bluetooth: hci1: command 0x0419 tx timeout [ 76.229615] Bluetooth: hci7: command 0x0419 tx timeout [ 124.182458] loop3: detected capacity change from 0 to 40 [ 124.211240] audit: type=1400 audit(1663938248.147:7): avc: denied { open } for pid=3947 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.229292] audit: type=1400 audit(1663938248.163:8): avc: denied { kernel } for pid=3947 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.241068] ------------[ cut here ]------------ [ 124.241106] [ 124.241111] ====================================================== [ 124.241121] WARNING: possible circular locking dependency detected [ 124.241128] 6.0.0-rc6-next-20220923 #1 Not tainted [ 124.241139] ------------------------------------------------------ [ 124.241145] syz-executor.3/3948 is trying to acquire lock: [ 124.241157] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.241223] [ 124.241223] but task is already holding lock: [ 124.241228] ffff888008ab2020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.241279] [ 124.241279] which lock already depends on the new lock. [ 124.241279] [ 124.241285] [ 124.241285] the existing dependency chain (in reverse order) is: [ 124.241291] [ 124.241291] -> #3 (&ctx->lock){....}-{2:2}: [ 124.241316] _raw_spin_lock+0x2a/0x40 [ 124.241350] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.241373] __schedule+0xedd/0x2470 [ 124.241397] schedule+0xda/0x1b0 [ 124.241421] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.241442] syscall_exit_to_user_mode+0x19/0x40 [ 124.241465] do_syscall_64+0x48/0x90 [ 124.241495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.241518] [ 124.241518] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.241551] _raw_spin_lock_nested+0x30/0x40 [ 124.241584] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.241607] task_fork_fair+0x63/0x4d0 [ 124.241637] sched_cgroup_fork+0x3d0/0x540 [ 124.241663] copy_process+0x4183/0x6e20 [ 124.241682] kernel_clone+0xe7/0x890 [ 124.241699] user_mode_thread+0xad/0xf0 [ 124.241718] rest_init+0x24/0x250 [ 124.241738] arch_call_rest_init+0xf/0x14 [ 124.241770] start_kernel+0x4c1/0x4e6 [ 124.241798] secondary_startup_64_no_verify+0xe0/0xeb [ 124.241823] [ 124.241823] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.241848] _raw_spin_lock_irqsave+0x39/0x60 [ 124.241882] try_to_wake_up+0xab/0x1930 [ 124.241905] up+0x75/0xb0 [ 124.241931] __up_console_sem+0x6e/0x80 [ 124.241959] console_unlock+0x46a/0x590 [ 124.241988] do_con_write+0xc05/0x1d50 [ 124.242009] con_write+0x21/0x40 [ 124.242028] n_tty_write+0x4d4/0xfe0 [ 124.242052] file_tty_write.constprop.0+0x49c/0x8f0 [ 124.242075] vfs_write+0x9c3/0xd90 [ 124.242114] ksys_write+0x127/0x250 [ 124.242154] do_syscall_64+0x3b/0x90 [ 124.242193] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.242216] [ 124.242216] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.242241] __lock_acquire+0x2a02/0x5e70 [ 124.242272] lock_acquire+0x1a2/0x530 [ 124.242300] _raw_spin_lock_irqsave+0x39/0x60 [ 124.242334] down_trylock+0xe/0x70 [ 124.242360] __down_trylock_console_sem+0x3b/0xd0 [ 124.242390] vprintk_emit+0x16b/0x560 [ 124.242419] vprintk+0x84/0xa0 [ 124.242447] _printk+0xba/0xf1 [ 124.242467] report_bug.cold+0x72/0xab [ 124.242496] handle_bug+0x3c/0x70 [ 124.242525] exc_invalid_op+0x14/0x50 [ 124.242555] asm_exc_invalid_op+0x16/0x20 [ 124.242576] group_sched_out.part.0+0x2c7/0x460 [ 124.242596] ctx_sched_out+0x8f1/0xc10 [ 124.242614] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.242637] __schedule+0xedd/0x2470 [ 124.242661] schedule+0xda/0x1b0 [ 124.242684] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.242704] syscall_exit_to_user_mode+0x19/0x40 [ 124.242726] do_syscall_64+0x48/0x90 [ 124.242755] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.242777] [ 124.242777] other info that might help us debug this: [ 124.242777] [ 124.242782] Chain exists of: [ 124.242782] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.242782] [ 124.242809] Possible unsafe locking scenario: [ 124.242809] [ 124.242814] CPU0 CPU1 [ 124.242818] ---- ---- [ 124.242822] lock(&ctx->lock); [ 124.242832] lock(&rq->__lock); [ 124.242845] lock(&ctx->lock); [ 124.242856] lock((console_sem).lock); [ 124.242866] [ 124.242866] *** DEADLOCK *** [ 124.242866] [ 124.242870] 2 locks held by syz-executor.3/3948: [ 124.242883] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.242936] #1: ffff888008ab2020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.242986] [ 124.242986] stack backtrace: [ 124.242991] CPU: 1 PID: 3948 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923 #1 [ 124.243014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.243028] Call Trace: [ 124.243034] [ 124.243040] dump_stack_lvl+0x8b/0xb3 [ 124.243073] check_noncircular+0x263/0x2e0 [ 124.243103] ? format_decode+0x26c/0xb50 [ 124.243132] ? print_circular_bug+0x450/0x450 [ 124.243163] ? enable_ptr_key_workfn+0x20/0x20 [ 124.243193] ? format_decode+0x26c/0xb50 [ 124.243224] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.243256] __lock_acquire+0x2a02/0x5e70 [ 124.243296] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.243337] lock_acquire+0x1a2/0x530 [ 124.243367] ? down_trylock+0xe/0x70 [ 124.243397] ? lock_release+0x750/0x750 [ 124.243435] ? vprintk+0x84/0xa0 [ 124.243467] _raw_spin_lock_irqsave+0x39/0x60 [ 124.243502] ? down_trylock+0xe/0x70 [ 124.243530] down_trylock+0xe/0x70 [ 124.243558] ? vprintk+0x84/0xa0 [ 124.243589] __down_trylock_console_sem+0x3b/0xd0 [ 124.243620] vprintk_emit+0x16b/0x560 [ 124.243654] vprintk+0x84/0xa0 [ 124.243686] _printk+0xba/0xf1 [ 124.243706] ? record_print_text.cold+0x16/0x16 [ 124.243735] ? report_bug.cold+0x66/0xab [ 124.243767] ? group_sched_out.part.0+0x2c7/0x460 [ 124.243788] report_bug.cold+0x72/0xab [ 124.243822] handle_bug+0x3c/0x70 [ 124.243853] exc_invalid_op+0x14/0x50 [ 124.243885] asm_exc_invalid_op+0x16/0x20 [ 124.243908] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.243933] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.243953] RSP: 0018:ffff8880157cfc48 EFLAGS: 00010006 [ 124.243970] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.243984] RDX: ffff88800ff7b580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 124.243998] RBP: ffff88801cef8000 R08: 0000000000000005 R09: 0000000000000001 [ 124.244012] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888008ab2000 [ 124.244026] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 124.244046] ? group_sched_out.part.0+0x2c7/0x460 [ 124.244070] ? group_sched_out.part.0+0x2c7/0x460 [ 124.244095] ctx_sched_out+0x8f1/0xc10 [ 124.244118] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.244147] ? lock_is_held_type+0xd7/0x130 [ 124.244171] ? __perf_cgroup_move+0x160/0x160 [ 124.244194] ? set_next_entity+0x304/0x550 [ 124.244225] ? update_curr+0x267/0x740 [ 124.244259] ? lock_is_held_type+0xd7/0x130 [ 124.244284] __schedule+0xedd/0x2470 [ 124.244314] ? io_schedule_timeout+0x150/0x150 [ 124.244344] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.244381] schedule+0xda/0x1b0 [ 124.244407] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.244430] syscall_exit_to_user_mode+0x19/0x40 [ 124.244454] do_syscall_64+0x48/0x90 [ 124.244486] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.244509] RIP: 0033:0x7fbac7a40b19 [ 124.244524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.244544] RSP: 002b:00007fbac4fb6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.244564] RAX: 0000000000000001 RBX: 00007fbac7b53f68 RCX: 00007fbac7a40b19 [ 124.244578] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbac7b53f6c [ 124.244591] RBP: 00007fbac7b53f60 R08: 000000000000000e R09: 0000000000000000 [ 124.244604] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fbac7b53f6c [ 124.244618] R13: 00007ffcb94d04ef R14: 00007fbac4fb6300 R15: 0000000000022000 [ 124.244641] [ 124.344446] WARNING: CPU: 1 PID: 3948 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.345653] Modules linked in: [ 124.346080] CPU: 1 PID: 3948 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923 #1 [ 124.347114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.348559] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.349262] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.351578] RSP: 0018:ffff8880157cfc48 EFLAGS: 00010006 [ 124.352266] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.353188] RDX: ffff88800ff7b580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 124.354167] RBP: ffff88801cef8000 R08: 0000000000000005 R09: 0000000000000001 [ 124.355082] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888008ab2000 [ 124.355988] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 124.356919] FS: 00007fbac4fb6700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 124.357962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.358713] CR2: 00007f44ecc50820 CR3: 000000001b7a8000 CR4: 0000000000350ee0 [ 124.359629] Call Trace: [ 124.359969] [ 124.360275] ctx_sched_out+0x8f1/0xc10 [ 124.360798] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.361470] ? lock_is_held_type+0xd7/0x130 [ 124.362039] ? __perf_cgroup_move+0x160/0x160 [ 124.362635] ? set_next_entity+0x304/0x550 [ 124.363197] ? update_curr+0x267/0x740 [ 124.363724] ? lock_is_held_type+0xd7/0x130 [ 124.364300] __schedule+0xedd/0x2470 [ 124.364805] ? io_schedule_timeout+0x150/0x150 [ 124.365416] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.366065] schedule+0xda/0x1b0 [ 124.366543] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.367191] syscall_exit_to_user_mode+0x19/0x40 [ 124.367817] do_syscall_64+0x48/0x90 [ 124.368323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.369001] RIP: 0033:0x7fbac7a40b19 [ 124.369494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.371819] RSP: 002b:00007fbac4fb6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.372809] RAX: 0000000000000001 RBX: 00007fbac7b53f68 RCX: 00007fbac7a40b19 [ 124.373730] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbac7b53f6c [ 124.374654] RBP: 00007fbac7b53f60 R08: 000000000000000e R09: 0000000000000000 [ 124.375568] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fbac7b53f6c [ 124.376485] R13: 00007ffcb94d04ef R14: 00007fbac4fb6300 R15: 0000000000022000 [ 124.377405] [ 124.377738] irq event stamp: 4264 [ 124.378219] hardirqs last enabled at (4263): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.379441] hardirqs last disabled at (4264): [] __schedule+0x1225/0x2470 [ 124.380503] softirqs last enabled at (4062): [] __irq_exit_rcu+0x11b/0x180 [ 124.381621] softirqs last disabled at (4015): [] __irq_exit_rcu+0x11b/0x180 [ 124.382725] ---[ end trace 0000000000000000 ]--- [ 124.422093] hrtimer: interrupt took 15790 ns [ 124.852514] syz-executor.3: attempt to access beyond end of device [ 124.852514] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 124.855553] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 124.887195] syz-executor.3: attempt to access beyond end of device [ 124.887195] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 124.888898] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 124.938496] syz-executor.3 (3948) used greatest stack depth: 24600 bytes left 13:04:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:08 executing program 7: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000013c0)) [ 124.960708] loop0: detected capacity change from 0 to 40 13:04:08 executing program 6: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:04:08 executing program 5: fsmount(0xffffffffffffffff, 0x1000000, 0x0) 13:04:08 executing program 4: setresgid(0x0, 0xee00, 0xffffffffffffffff) 13:04:08 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x84801, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 13:04:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000003c0)=""/105, &(0x7f00000004c0)=0x69) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xb8) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x2, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000280)=""/160, 0xa0}, 0x3ff}], 0x1, 0x40000041, 0x0) 13:04:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 125.029664] loop3: detected capacity change from 0 to 40 13:04:08 executing program 6: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:04:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() 13:04:09 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001740)=""/206) 13:04:09 executing program 7: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000013c0)) 13:04:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000003c0)=""/105, &(0x7f00000004c0)=0x69) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xb8) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x2, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000280)=""/160, 0xa0}, 0x3ff}], 0x1, 0x40000041, 0x0) [ 125.146841] loop4: detected capacity change from 0 to 40 [ 125.218283] syz-executor.0: attempt to access beyond end of device [ 125.218283] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.219779] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 125.319246] syz-executor.0 (3956) used greatest stack depth: 24472 bytes left [ 125.353649] syz-executor.3: attempt to access beyond end of device [ 125.353649] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.354925] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 125.371812] syz-executor.4: attempt to access beyond end of device [ 125.371812] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.373012] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:04:09 executing program 6: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:04:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 13:04:09 executing program 7: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000013c0)) 13:04:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000003c0)=""/105, &(0x7f00000004c0)=0x69) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xb8) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x2, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000280)=""/160, 0xa0}, 0x3ff}], 0x1, 0x40000041, 0x0) 13:04:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() 13:04:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 125.474402] loop0: detected capacity change from 0 to 40 [ 125.500886] loop3: detected capacity change from 0 to 40 [ 125.512505] loop4: detected capacity change from 0 to 40 13:04:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="65247535d07a6d61c328d263acdb8705182e75aaf931344a022e8f8746a51c10958fd5799f99dc22c926bb9b0c4e0b48124f7f67483d63fcebfded4c6511ca9391e72b7c85e07242c3d05522ace93add2f2aa97db32465a86c96a2e3bbd881b7ae3ab1b16b8f864b2cddd345c21547e5d7c83f2b8425e35ad48105a99cbc3705055abaafd480d738c2b91b65f3c017de74da7a75768400689020659d37b248c23b39a9bd90a302b2a5bd37026572b95f8b6c68fbb9f7d2e9852c83dce3c8aee2b1e78b96f9b1e675a2a72ae8f27e0329fcea10a3da55d90863023da07fbfafe2ee8a4e17401736e4e2d7b8c9c7cdbd4e8a2db8e132032d7efd68144e20a2b2109430d2fb5feb0e8646e60e95efc61a9882ab3713081d882c8b31fada64749cf157fa1a0428151d16a2eb96573bf7e4dc7b852e85dd7d8318fbc2e633642d39ee7a1d9798c6dfe4bf5d3b471f7940c756a87d0111debe1e77931a5b89f48d2c2d1db2e68fb4394d799fdc1dc8ec496e7cd6b2f41eb069b75189a8eeadb77df71c5c420b7ff821c72dc8d4ceaf94f20e6b91800100c6b96a1836d01013ada7fece65817da2fc01774e38db0cd8858b74aba1c50c3d8e748b95a39b8a5c39261b98a245424ba961e4143cd4bfb1125b58bb33118bbeb83ed8e3b9a3cacabefbe679073237128400334c2b7ff0519a1c583f4d06ec43dd56e7870e86c32663b91abcb8e2c699e0f54e1318aea9d4545414f1daf787ae38f0554c711e25d88fe22270f4d30c51a32a9c74bf457226d2df3f4625539975c1968e1418049bb1f307ede1f902f932054d74523d593523e8068629ec0e5bf3a8099e3a04a2c14d27fc492c7b1db2d18b4c20e29f667e08657c92455c935cdfc1e9844fa82f64636e0959030bac2c94b88c8b80774444fbfbc2c6096cdcaa53bc5c1db22bb62034c05f869f53bdfd87e039fc2de88cf2bdfde7842df80eff31c661aae4e5dabec8b1064323e6537778cc15c0b77376e04d71810bf261e170c7708dbbb896427e5c6d4a615e15edc1603f90769b9dd409bd8ad6da5b5482a7ad968569c36d901c2804e3de9379f6c37ce6e0098d44458929981d18a52821de7f90b2dfd33f9b8a8c9c0236c6d8668d805f1f66f7f39c061756920c1e5b0577e6a77d320076fde5f1e681c22ed1746bda8cf77a70ecd1ce627eb055770fb2e32b3632cc71bb51a756c59b171a5abe0abadeb78fe5201238b1144195ccd8b231bbee1378ab139a40e27d026de93f769784f4de00263a3e869f5b52e6d5883a3209113ca586435d77a82834b1402703757032a11c7aee72d69a7588b52f1c54cedc46ffb190484416e74a2a15a2dfde9db46a13db49c102a3ab111f831ad6db7227e28367495f612498cb689e68356c6169e838ba848c65f1134f7cb5f2df16ee881aa9a8ad6baee8b66488a43fddd224a3af0ed3a19e7a69a1b4798f8058863452f17275ac29cfa1c350b4b6bbea6b6c87e074c71ba8ff4d9de7f5bd69d7642546bf38021f9bbe66c5133c0c14509217fbe7daca5d7f674e800d3ec10f34beb74830737f88f7b0f7311b986c0e5ad54bc4218446e4206425fbaada8df212e16d42ab3403010345ebc79436b289a0e404d5e58b8738f085c012c1bc49933dd9ec581b83f3192bd5f07aa64834e0d8816c3757858fe2e0798160afaf5e9d4f82f71d7ad1db201dafc0fd97bfb4304dcf255a2866e150f6c64c7c64dc6f71353cbd5f9dee628478256612b56b238ec7026f2bb46d04de8da35c1f5b91710a45e0bf1ec606eae63aad9ab272d61b08b0dc9ecec117d6913a5e6be59ee9b69c4ddc03ea0559f3b97c5d421aa8f79c75d4cffe0067b129e9230a1d12445ba7179d5b33dd149b2d5e5d265cbbe84853d25798c464d636d4a0f3a47cf09bee986197f840ad80509e37ee9b8f5364ecd13a06f83b9e293901c3ce81da904f343e952f3855dc7700578580abf1c2fee1a16659a062cd62112bf79e0a5d415aa0550d8e17cbab52178bfe35d677a69484ea1b07a9b3785095f4e0eaf9386e2afbbf4492bbada36923f74a3487cf46fcc6cab85c5a3dd5d50ab7fc335561d43f2c8b8ce37e8a136ea112f4eb36a8c97ed2c6afe8cdc1b23d9d159cc3ffc5c1659c41acc9f90c816759f4483c054c85540cd2990eba50f2bfe280d85911470f3a2805385d7eb8e4ce72a71fd55146b510b38b967beb916dfee1a2b5bc2009543a2b12725046f7e084cffb884a47a2e87ae2c4dd84fec51b15cf1fbac44f39ab379e3b33e94520df0d7fe3404edc5be179402d7533bb9befbc54f23db2573d44ccf36d2ac03a4a2d109ee52a936f442a4405f029019cc036513f1c0085cd49d8b7bb4b78ca7ee621066531c7b504cf707e67b5a69fa612b2851c750a66845685e455931ed9bff1e4eccf1eec90e22b5307970a1919de80cf27af0817af5a837a218ab9dd99ca9ce909d80cbb411e1df50bf1b62c71e7536f9ef5da027aab496a85c7650488d525dc3631b64072b3796b0a9a7c192e36306306f63cd5c1bd66fb34b2aa221c05d8cbc49b039e88190fdfcfee59530782d9e14bafc39ee522cdaa927f25c0d2394a2e5b61651bda2233bebf5dbad974bf71ab4e89ae892ca767fd7aeced09bd441d8b2100b65a685e01ac8252a7eb0f8814e2f6e4101e9fb9c2f9ca2fdd7b5236a6a148af0d6f9af472e63b686941fabf3bb2de39880834b0828986ec1d8d843479d4d17f9d7a26e18831210b8ea2118fe3bd58da05246c32f56b5e16c84c9ee0549303245463a6f5d7bb71b68f9916155d1a1eed93ec6d6a737a88452c39526fbbf7cf7f3588c2a01c815cc2f0127dfc97fffb35d0aac59f60789660fe45433c93a68729f40fd9f151ddee70e26dad3c4d76722a11a139aa21a467cade0fd5dbd99a86fe41705c910463c2ff6a077c5adbadd57c9737f4e9ed4e0b5b7b3cd1929647835da4aed58eeb4b7c582e0e8d94ec88cc71fe281ba0e4995b000984d38141d90543d1ea8e782dbb0a4c86fcc30d37dc6ea2d80f6cb06e3bd4878b046ac86de2549e03e66fe56ed2ad55c65867e3a4a582eb65c990a348ac124edaba88f19fbf81d9c2d250d798fd6c4ac9a18c4a4f8ea4f13961c9608dbfd05d3e78e8326ef03c3b1b5301c7136eab8c8cfb083ad010e7f66106bbe439a3afdfe150d461426db90317275bb195b780786e2ed512a50d37ec7fbb550b79d33ca73bba91641e9d642cfc86ae950fdee04b069eeb56ef19c2fc345a9330763632828ebc2c9f2139469016a18364fe283b71e4f8ee55aa004a8e15f0cadf0c26ed7bdc04d11943e586e137d95512def840c187ec242501353d5d601e591ef87113e15cb7e3b37022b983b170db940cee33d71a37ba04e448cf411892a8f574626eb56fa2019bd8fc77724161287b8f3d292dda938743aab891173de8083c8f0052d2169992b2120006e80740ecc4620809cc284f79f99ded492f62ee7ab7d513ea595486e6a9d6718f5a4ca1c0ca0c0f1277484d00fc1565d44d5aba0dc3c1dd9e8808df32aedb19c0f466fcfa2dca750b1821db0f0f1321a7410c4cd7de3b1ba49d06f3624fe7778cd466a69cde3d9adecb4a4d4a74227678695168b8a3016ef5a898a47f3fe9f23d1760db506bebe8ecc21ba5d189ba3f26d97c840cf6df866e68ab3667a94d7a808017d890e76168e9dd8e5a0068183f1a568bfd78b58b75593f06cb28b7cb885f316c390fabfbe7e1f54f0af4302ae24dcb24eb1afd3873b811e7ef13939e6b4611b17524ad583661d9bcecfddd49ae780ea9354a16ca9a99a56aac251d8a2d1636c61277f3880b5981e1a32d7e3ade71041022e0d05dbd091351fbd0bbd2a2301a1af167a773df5f705617941d8645146769b9512e05e1979d7cb3166ddf6904d833c99f7c966e3364e16fc2d6535e0525bdf7a043dadcc4e6d2a9ccafcf95fb69145d2370dba7666d3f923eb2dd8b69c6362f06299d0ef71c443280b9655fb293bd5230cb12acfa81a4a0de4f4fd0e99f1d1bbf8a0e9ac8cd13ef0714f774423e00d835a2ae5fffdd9681490db78466ff3b6ce4", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() 13:04:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000003c0)=""/105, &(0x7f00000004c0)=0x69) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xb8) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x2, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000280)=""/160, 0xa0}, 0x3ff}], 0x1, 0x40000041, 0x0) 13:04:09 executing program 7: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000013c0)) 13:04:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 125.625819] syz-executor.3: attempt to access beyond end of device [ 125.625819] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.626869] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 125.713865] syz-executor.0: attempt to access beyond end of device [ 125.713865] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.715342] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 125.724054] syz-executor.4: attempt to access beyond end of device [ 125.724054] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.725051] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:04:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:04:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() 13:04:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() 13:04:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) 13:04:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:04:09 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}}, 0x0) [ 125.831786] loop4: detected capacity change from 0 to 40 [ 125.833933] loop0: detected capacity change from 0 to 40 [ 125.838349] loop3: detected capacity change from 0 to 40 13:04:09 executing program 7: msgrcv(0x0, 0x0, 0x0, 0x0, 0x17619eeb39436941) 13:04:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:04:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() [ 125.905694] syz-executor.4: attempt to access beyond end of device [ 125.905694] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.907454] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:04:09 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0xb49}, {0x0}], 0x2, &(0x7f0000002380)=[@rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x4000801) gettid() [ 125.947546] syz-executor.0: attempt to access beyond end of device [ 125.947546] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 125.948822] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:04:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:04:09 executing program 7: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:04:10 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="0300c8bf0b3d03ea3bfc00674f590e19a751c86a2d7f6298523412aa34bc235ae8731b1dc2d21e7ab5f4cfa7cbcf37b4427ac15297d730e6ceacddf84a3d44eaa99810264dee3d3dcb7fb564f58804a8bc8fb642d103e6c23bcd62147cc78f37bcef182ed139ae6f306cdc8177cd2d1bd02f77c25278ce99cdcaaf5974dc4072fdda2aa1fd90b56511777be0ff4722405644f6084b6c483b340dd4b9d44c6d69f028a683f78584282fe9f0063df4cfd6379220f8b39f037437b9db96f5def476dd4640bc25c8e7458e351609cdc19206f18218cbffc278715227b39a22b1b470d133fc85a440fe33d3d4441cf140bddac9acd9c75743a3ffd78b5bf6c0a67f6ec7e61468cd58f697677189e0378b9153230076b20121b72f8033e09a8ea396d420ef766fb41e49889283387a49543cdfa7857634aa8b894b1f9bb2f827b9013252ba79cab8ef92a5b21cdc25eb9e5fd33fc8a39baa8a4cdeba54e86464e4773e1989b87e5b4a44c1f69019c8d5cf47c000"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 13:04:10 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) 13:04:10 executing program 5: syz_io_uring_setup(0x5972, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 13:04:10 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:04:10 executing program 0: r0 = io_uring_setup(0x52da, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x18, &(0x7f0000000480), 0x0) 13:04:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 13:04:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) 13:04:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) 13:04:10 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 13:04:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 13:04:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:04:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) 13:04:10 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 13:04:10 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 13:04:10 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="0300c8bf0b3d03ea3bfc00674f590e19a751c86a2d7f6298523412aa34bc235ae8731b1dc2d21e7ab5f4cfa7cbcf37b4427ac15297d730e6ceacddf84a3d44eaa99810264dee3d3dcb7fb564f58804a8bc8fb642d103e6c23bcd62147cc78f37bcef182ed139ae6f306cdc8177cd2d1bd02f77c25278ce99cdcaaf5974dc4072fdda2aa1fd90b56511777be0ff4722405644f6084b6c483b340dd4b9d44c6d69f028a683f78584282fe9f0063df4cfd6379220f8b39f037437b9db96f5def476dd4640bc25c8e7458e351609cdc19206f18218cbffc278715227b39a22b1b470d133fc85a440fe33d3d4441cf140bddac9acd9c75743a3ffd78b5bf6c0a67f6ec7e61468cd58f697677189e0378b9153230076b20121b72f8033e09a8ea396d420ef766fb41e49889283387a49543cdfa7857634aa8b894b1f9bb2f827b9013252ba79cab8ef92a5b21cdc25eb9e5fd33fc8a39baa8a4cdeba54e86464e4773e1989b87e5b4a44c1f69019c8d5cf47c000"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 13:04:10 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 13:04:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) 13:04:10 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 13:04:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x42ac5332367f44b}, 0x14}}, 0x0) 13:04:10 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0xb, 0x0, 0x0) 13:04:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 13:04:10 executing program 6: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 13:04:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x7}}) 13:04:10 executing program 0: r0 = gettid() r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)) 13:04:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, 0x0, 0x0) [ 127.046413] Bluetooth: hci0: command 0x041c tx timeout 13:04:11 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 13:04:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 13:04:11 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000109000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fil']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000018000100000000000000000002"], 0x28}}, 0x0) 13:04:11 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:04:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x7}}) 13:04:11 executing program 0: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe003) 13:04:11 executing program 2: llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 13:04:11 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() [ 127.972172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 13:04:11 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000109000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fil']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000018000100000000000000000002"], 0x28}}, 0x0) 13:04:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x7}}) 13:04:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) 13:04:12 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 13:04:12 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:04:12 executing program 0: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe003) [ 128.098250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 13:04:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000109000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fil']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000018000100000000000000000002"], 0x28}}, 0x0) 13:04:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x7}}) [ 128.211569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 13:04:12 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000000)={@empty, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x2b, 0x0, [@rand_addr, @local, @multicast1, @local, @empty, @rand_addr, @loopback, @broadcast, @broadcast, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) 13:04:12 executing program 0: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe003) 13:04:12 executing program 5: io_uring_setup(0x0, 0x0) io_setup(0x31c1, &(0x7f0000000b40)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c80)={&(0x7f0000000c40)={[0x8]}, 0x8}) 13:04:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000109000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fil']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000018000100000000000000000002"], 0x28}}, 0x0) 13:04:12 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 13:04:12 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() [ 128.516612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 13:04:12 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 13:04:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) 13:04:12 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 13:04:12 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMEJECT(r0, 0x5309) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:04:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysfs$3(0x3) 13:04:12 executing program 0: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe003) 13:04:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4b}}) 13:04:12 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 13:04:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 13:04:12 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMEJECT(r0, 0x5309) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:04:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 13:04:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysfs$3(0x3) 13:04:12 executing program 6: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r1, &(0x7f0000000080)="01", 0x292e9) 13:04:12 executing program 2: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/77, 0x4d) 13:04:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) [ 128.934432] audit: type=1400 audit(1663938252.870:9): avc: denied { write } for pid=4218 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:04:12 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMEJECT(r0, 0x5309) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:04:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 13:04:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 13:04:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysfs$3(0x3) 13:04:12 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000001440)='syzkaller\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f0000001540)='^:\x00', r0) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000001240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001500), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3062e30b20a32c612e8f11840f7b9ea26a9176607516cfdaadfe7746b510af67eaa0a7a711137dc40bdeb4f3827fd2c46185", 0x32, r2) 13:04:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 13:04:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysfs$3(0x3) 13:04:12 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMEJECT(r0, 0x5309) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:04:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000000)) 13:04:13 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000001440)='syzkaller\x00', &(0x7f0000001480)={'syz', 0x1}, &(0x7f0000001540)='^:\x00', r0) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000001240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001500), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0 VM DIAGNOSIS: 13:04:08 Registers: info registers vcpu 0 RAX=0100000000010200 RBX=ffff88802054aa00 RCX=ffffea0000000000 RDX=ffffea0000815201 RSI=ffffffff811496f0 RDI=ffff88800843cb40 RBP=ffff8880177b7b18 RSP=ffff8880177b7ae0 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000014a R11=0000000000000001 R12=ffffea0000815200 R13=ffffffff811496f0 R14=ffff88800f7e4a40 R15=ffff88800843cb40 RIP=ffffffff81781af0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2da22000 CR3=000000000df66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff8880157cf698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbac4fb6700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f44ecc50820 CR3=000000001b7a8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000