Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:64780' (ECDSA) to the list of known hosts. 2022/09/12 18:58:08 fuzzer started 2022/09/12 18:58:08 dialing manager at localhost:38027 syzkaller login: [ 36.882304] cgroup: Unknown subsys name 'net' [ 36.994863] cgroup: Unknown subsys name 'rlimit' 2022/09/12 18:58:21 syscalls: 2215 2022/09/12 18:58:21 code coverage: enabled 2022/09/12 18:58:21 comparison tracing: enabled 2022/09/12 18:58:21 extra coverage: enabled 2022/09/12 18:58:21 setuid sandbox: enabled 2022/09/12 18:58:21 namespace sandbox: enabled 2022/09/12 18:58:21 Android sandbox: enabled 2022/09/12 18:58:21 fault injection: enabled 2022/09/12 18:58:21 leak checking: enabled 2022/09/12 18:58:21 net packet injection: enabled 2022/09/12 18:58:21 net device setup: enabled 2022/09/12 18:58:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 18:58:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 18:58:21 USB emulation: enabled 2022/09/12 18:58:21 hci packet injection: enabled 2022/09/12 18:58:21 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 18:58:21 802.15.4 emulation: enabled 2022/09/12 18:58:21 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 18:58:21 fetching corpus: 30, signal 21422/25116 (executing program) 2022/09/12 18:58:22 fetching corpus: 78, signal 47709/52690 (executing program) 2022/09/12 18:58:22 fetching corpus: 128, signal 57053/63397 (executing program) 2022/09/12 18:58:22 fetching corpus: 178, signal 66771/74368 (executing program) 2022/09/12 18:58:22 fetching corpus: 228, signal 72422/81323 (executing program) 2022/09/12 18:58:22 fetching corpus: 278, signal 78163/88264 (executing program) 2022/09/12 18:58:22 fetching corpus: 328, signal 83738/94914 (executing program) 2022/09/12 18:58:22 fetching corpus: 378, signal 89575/101782 (executing program) 2022/09/12 18:58:23 fetching corpus: 427, signal 93761/107028 (executing program) 2022/09/12 18:58:23 fetching corpus: 477, signal 97447/111795 (executing program) 2022/09/12 18:58:23 fetching corpus: 526, signal 100566/115972 (executing program) 2022/09/12 18:58:23 fetching corpus: 576, signal 105534/121784 (executing program) 2022/09/12 18:58:23 fetching corpus: 626, signal 108973/126156 (executing program) 2022/09/12 18:58:23 fetching corpus: 676, signal 111167/129390 (executing program) 2022/09/12 18:58:23 fetching corpus: 726, signal 112905/132150 (executing program) 2022/09/12 18:58:24 fetching corpus: 775, signal 115504/135630 (executing program) 2022/09/12 18:58:24 fetching corpus: 825, signal 117233/138333 (executing program) 2022/09/12 18:58:24 fetching corpus: 875, signal 119630/141594 (executing program) 2022/09/12 18:58:24 fetching corpus: 925, signal 122376/145100 (executing program) 2022/09/12 18:58:24 fetching corpus: 974, signal 125107/148629 (executing program) 2022/09/12 18:58:24 fetching corpus: 1024, signal 129166/153159 (executing program) 2022/09/12 18:58:24 fetching corpus: 1074, signal 132431/156973 (executing program) 2022/09/12 18:58:25 fetching corpus: 1124, signal 134032/159399 (executing program) 2022/09/12 18:58:25 fetching corpus: 1174, signal 136111/162223 (executing program) 2022/09/12 18:58:25 fetching corpus: 1224, signal 138051/164855 (executing program) 2022/09/12 18:58:25 fetching corpus: 1274, signal 140299/167685 (executing program) 2022/09/12 18:58:25 fetching corpus: 1324, signal 142455/170483 (executing program) 2022/09/12 18:58:25 fetching corpus: 1374, signal 144984/173474 (executing program) 2022/09/12 18:58:25 fetching corpus: 1424, signal 146813/175897 (executing program) 2022/09/12 18:58:26 fetching corpus: 1474, signal 148390/178079 (executing program) 2022/09/12 18:58:26 fetching corpus: 1524, signal 149451/179881 (executing program) 2022/09/12 18:58:26 fetching corpus: 1574, signal 150847/181915 (executing program) 2022/09/12 18:58:26 fetching corpus: 1624, signal 151901/183637 (executing program) 2022/09/12 18:58:26 fetching corpus: 1674, signal 153118/185474 (executing program) 2022/09/12 18:58:26 fetching corpus: 1724, signal 154743/187556 (executing program) 2022/09/12 18:58:26 fetching corpus: 1773, signal 156776/189965 (executing program) 2022/09/12 18:58:26 fetching corpus: 1823, signal 157821/191598 (executing program) 2022/09/12 18:58:27 fetching corpus: 1873, signal 159735/193896 (executing program) 2022/09/12 18:58:27 fetching corpus: 1923, signal 160990/195634 (executing program) 2022/09/12 18:58:27 fetching corpus: 1973, signal 162828/197774 (executing program) 2022/09/12 18:58:27 fetching corpus: 2023, signal 163769/199302 (executing program) 2022/09/12 18:58:27 fetching corpus: 2073, signal 165021/200991 (executing program) 2022/09/12 18:58:27 fetching corpus: 2123, signal 166504/202841 (executing program) 2022/09/12 18:58:27 fetching corpus: 2173, signal 168010/204690 (executing program) 2022/09/12 18:58:28 fetching corpus: 2223, signal 169933/206819 (executing program) 2022/09/12 18:58:28 fetching corpus: 2273, signal 171143/208396 (executing program) 2022/09/12 18:58:28 fetching corpus: 2322, signal 173316/210635 (executing program) 2022/09/12 18:58:28 fetching corpus: 2372, signal 174667/212342 (executing program) 2022/09/12 18:58:28 fetching corpus: 2422, signal 175978/213987 (executing program) 2022/09/12 18:58:28 fetching corpus: 2472, signal 177030/215435 (executing program) 2022/09/12 18:58:29 fetching corpus: 2522, signal 178756/217319 (executing program) 2022/09/12 18:58:29 fetching corpus: 2572, signal 180079/218912 (executing program) 2022/09/12 18:58:29 fetching corpus: 2622, signal 181404/220428 (executing program) 2022/09/12 18:58:29 fetching corpus: 2672, signal 182336/221714 (executing program) 2022/09/12 18:58:29 fetching corpus: 2722, signal 183677/223274 (executing program) 2022/09/12 18:58:29 fetching corpus: 2772, signal 184898/224698 (executing program) 2022/09/12 18:58:29 fetching corpus: 2822, signal 187141/226703 (executing program) 2022/09/12 18:58:29 fetching corpus: 2872, signal 189139/228563 (executing program) 2022/09/12 18:58:30 fetching corpus: 2922, signal 190169/229835 (executing program) 2022/09/12 18:58:30 fetching corpus: 2972, signal 191795/231477 (executing program) 2022/09/12 18:58:30 fetching corpus: 3022, signal 192558/232519 (executing program) 2022/09/12 18:58:30 fetching corpus: 3072, signal 193310/233576 (executing program) 2022/09/12 18:58:30 fetching corpus: 3122, signal 194067/234598 (executing program) 2022/09/12 18:58:30 fetching corpus: 3171, signal 194793/235621 (executing program) 2022/09/12 18:58:30 fetching corpus: 3221, signal 196042/236942 (executing program) 2022/09/12 18:58:31 fetching corpus: 3271, signal 196762/237943 (executing program) 2022/09/12 18:58:31 fetching corpus: 3321, signal 197869/239178 (executing program) 2022/09/12 18:58:31 fetching corpus: 3371, signal 198727/240228 (executing program) 2022/09/12 18:58:31 fetching corpus: 3421, signal 199988/241474 (executing program) 2022/09/12 18:58:31 fetching corpus: 3471, signal 200885/242629 (executing program) 2022/09/12 18:58:31 fetching corpus: 3521, signal 202034/243754 (executing program) 2022/09/12 18:58:31 fetching corpus: 3571, signal 203275/244903 (executing program) 2022/09/12 18:58:32 fetching corpus: 3621, signal 204180/245894 (executing program) 2022/09/12 18:58:32 fetching corpus: 3671, signal 205526/247120 (executing program) 2022/09/12 18:58:32 fetching corpus: 3721, signal 206192/247997 (executing program) 2022/09/12 18:58:32 fetching corpus: 3770, signal 206953/248935 (executing program) 2022/09/12 18:58:32 fetching corpus: 3820, signal 207877/249911 (executing program) 2022/09/12 18:58:32 fetching corpus: 3870, signal 208537/250664 (executing program) 2022/09/12 18:58:32 fetching corpus: 3920, signal 209409/251632 (executing program) 2022/09/12 18:58:33 fetching corpus: 3970, signal 210219/252481 (executing program) 2022/09/12 18:58:33 fetching corpus: 4020, signal 210905/253350 (executing program) 2022/09/12 18:58:33 fetching corpus: 4070, signal 211725/254206 (executing program) 2022/09/12 18:58:33 fetching corpus: 4120, signal 212397/255057 (executing program) 2022/09/12 18:58:33 fetching corpus: 4170, signal 212927/255782 (executing program) 2022/09/12 18:58:33 fetching corpus: 4220, signal 213680/256558 (executing program) 2022/09/12 18:58:33 fetching corpus: 4270, signal 214417/257312 (executing program) 2022/09/12 18:58:34 fetching corpus: 4320, signal 215098/258008 (executing program) 2022/09/12 18:58:34 fetching corpus: 4370, signal 216024/258918 (executing program) 2022/09/12 18:58:34 fetching corpus: 4420, signal 216568/259591 (executing program) 2022/09/12 18:58:34 fetching corpus: 4469, signal 217487/260362 (executing program) 2022/09/12 18:58:34 fetching corpus: 4519, signal 218360/261140 (executing program) 2022/09/12 18:58:34 fetching corpus: 4569, signal 219228/261910 (executing program) 2022/09/12 18:58:35 fetching corpus: 4619, signal 220124/262681 (executing program) 2022/09/12 18:58:35 fetching corpus: 4669, signal 220750/263363 (executing program) 2022/09/12 18:58:35 fetching corpus: 4719, signal 221269/263982 (executing program) 2022/09/12 18:58:35 fetching corpus: 4769, signal 221846/264620 (executing program) 2022/09/12 18:58:35 fetching corpus: 4819, signal 222420/265254 (executing program) 2022/09/12 18:58:35 fetching corpus: 4869, signal 222974/265867 (executing program) 2022/09/12 18:58:35 fetching corpus: 4919, signal 223569/266510 (executing program) 2022/09/12 18:58:35 fetching corpus: 4969, signal 224282/267115 (executing program) 2022/09/12 18:58:36 fetching corpus: 5019, signal 225053/267768 (executing program) 2022/09/12 18:58:36 fetching corpus: 5069, signal 225543/268318 (executing program) 2022/09/12 18:58:36 fetching corpus: 5119, signal 226044/268842 (executing program) 2022/09/12 18:58:36 fetching corpus: 5169, signal 226880/269487 (executing program) 2022/09/12 18:58:36 fetching corpus: 5219, signal 227586/270066 (executing program) 2022/09/12 18:58:36 fetching corpus: 5269, signal 228385/270691 (executing program) 2022/09/12 18:58:37 fetching corpus: 5319, signal 228911/271161 (executing program) 2022/09/12 18:58:37 fetching corpus: 5369, signal 229947/271750 (executing program) 2022/09/12 18:58:37 fetching corpus: 5419, signal 230439/272268 (executing program) 2022/09/12 18:58:37 fetching corpus: 5469, signal 230964/272753 (executing program) 2022/09/12 18:58:37 fetching corpus: 5519, signal 231620/273292 (executing program) 2022/09/12 18:58:37 fetching corpus: 5569, signal 232271/273799 (executing program) 2022/09/12 18:58:37 fetching corpus: 5619, signal 232967/274307 (executing program) 2022/09/12 18:58:37 fetching corpus: 5669, signal 233982/274946 (executing program) 2022/09/12 18:58:38 fetching corpus: 5719, signal 234498/275434 (executing program) 2022/09/12 18:58:38 fetching corpus: 5769, signal 235147/275902 (executing program) 2022/09/12 18:58:38 fetching corpus: 5819, signal 235629/276369 (executing program) 2022/09/12 18:58:38 fetching corpus: 5869, signal 236070/276765 (executing program) 2022/09/12 18:58:38 fetching corpus: 5919, signal 236718/277253 (executing program) 2022/09/12 18:58:38 fetching corpus: 5969, signal 237177/277707 (executing program) 2022/09/12 18:58:38 fetching corpus: 6019, signal 237662/278069 (executing program) 2022/09/12 18:58:38 fetching corpus: 6069, signal 238468/278529 (executing program) 2022/09/12 18:58:39 fetching corpus: 6119, signal 239110/278889 (executing program) 2022/09/12 18:58:39 fetching corpus: 6169, signal 239567/279317 (executing program) 2022/09/12 18:58:39 fetching corpus: 6219, signal 240074/279728 (executing program) 2022/09/12 18:58:39 fetching corpus: 6269, signal 240726/280091 (executing program) 2022/09/12 18:58:39 fetching corpus: 6319, signal 241524/280496 (executing program) 2022/09/12 18:58:39 fetching corpus: 6369, signal 242017/280828 (executing program) 2022/09/12 18:58:39 fetching corpus: 6419, signal 242549/281121 (executing program) 2022/09/12 18:58:40 fetching corpus: 6469, signal 242963/281467 (executing program) 2022/09/12 18:58:40 fetching corpus: 6519, signal 243439/281824 (executing program) 2022/09/12 18:58:40 fetching corpus: 6569, signal 243815/282147 (executing program) 2022/09/12 18:58:40 fetching corpus: 6619, signal 244206/282454 (executing program) 2022/09/12 18:58:40 fetching corpus: 6669, signal 244848/282761 (executing program) 2022/09/12 18:58:40 fetching corpus: 6719, signal 245228/283034 (executing program) 2022/09/12 18:58:40 fetching corpus: 6769, signal 245555/283332 (executing program) 2022/09/12 18:58:40 fetching corpus: 6819, signal 246015/283627 (executing program) 2022/09/12 18:58:41 fetching corpus: 6869, signal 246870/283762 (executing program) 2022/09/12 18:58:41 fetching corpus: 6918, signal 247330/283766 (executing program) 2022/09/12 18:58:41 fetching corpus: 6968, signal 247678/283770 (executing program) 2022/09/12 18:58:41 fetching corpus: 7018, signal 248266/283772 (executing program) 2022/09/12 18:58:41 fetching corpus: 7068, signal 248635/283781 (executing program) 2022/09/12 18:58:41 fetching corpus: 7118, signal 248979/283783 (executing program) 2022/09/12 18:58:41 fetching corpus: 7168, signal 249212/283787 (executing program) 2022/09/12 18:58:42 fetching corpus: 7218, signal 249817/283883 (executing program) 2022/09/12 18:58:42 fetching corpus: 7268, signal 250187/283888 (executing program) 2022/09/12 18:58:42 fetching corpus: 7318, signal 250481/283896 (executing program) 2022/09/12 18:58:42 fetching corpus: 7368, signal 251088/283902 (executing program) 2022/09/12 18:58:42 fetching corpus: 7418, signal 251477/283977 (executing program) 2022/09/12 18:58:42 fetching corpus: 7468, signal 251881/283986 (executing program) 2022/09/12 18:58:42 fetching corpus: 7518, signal 252737/283987 (executing program) 2022/09/12 18:58:42 fetching corpus: 7568, signal 253152/284019 (executing program) 2022/09/12 18:58:43 fetching corpus: 7618, signal 253856/284029 (executing program) 2022/09/12 18:58:43 fetching corpus: 7668, signal 254430/284060 (executing program) 2022/09/12 18:58:43 fetching corpus: 7717, signal 255168/284065 (executing program) 2022/09/12 18:58:43 fetching corpus: 7767, signal 255603/284067 (executing program) 2022/09/12 18:58:43 fetching corpus: 7817, signal 256117/284106 (executing program) 2022/09/12 18:58:43 fetching corpus: 7867, signal 256546/284119 (executing program) 2022/09/12 18:58:43 fetching corpus: 7917, signal 257264/284129 (executing program) 2022/09/12 18:58:44 fetching corpus: 7967, signal 257643/284139 (executing program) 2022/09/12 18:58:44 fetching corpus: 8017, signal 258737/284320 (executing program) 2022/09/12 18:58:44 fetching corpus: 8067, signal 259207/284336 (executing program) 2022/09/12 18:58:44 fetching corpus: 8117, signal 259556/284362 (executing program) 2022/09/12 18:58:44 fetching corpus: 8167, signal 260041/284371 (executing program) 2022/09/12 18:58:44 fetching corpus: 8217, signal 260386/284372 (executing program) 2022/09/12 18:58:44 fetching corpus: 8267, signal 260798/284376 (executing program) 2022/09/12 18:58:44 fetching corpus: 8317, signal 261945/284437 (executing program) 2022/09/12 18:58:45 fetching corpus: 8367, signal 262436/284451 (executing program) 2022/09/12 18:58:45 fetching corpus: 8417, signal 262785/284451 (executing program) 2022/09/12 18:58:45 fetching corpus: 8467, signal 263299/284459 (executing program) 2022/09/12 18:58:45 fetching corpus: 8517, signal 263777/284463 (executing program) 2022/09/12 18:58:45 fetching corpus: 8567, signal 264246/284466 (executing program) 2022/09/12 18:58:45 fetching corpus: 8617, signal 264707/284470 (executing program) 2022/09/12 18:58:45 fetching corpus: 8667, signal 265282/284475 (executing program) 2022/09/12 18:58:45 fetching corpus: 8717, signal 265480/284480 (executing program) 2022/09/12 18:58:46 fetching corpus: 8767, signal 265747/284495 (executing program) 2022/09/12 18:58:46 fetching corpus: 8817, signal 266206/284535 (executing program) 2022/09/12 18:58:46 fetching corpus: 8867, signal 266608/284536 (executing program) 2022/09/12 18:58:46 fetching corpus: 8917, signal 267005/284559 (executing program) 2022/09/12 18:58:46 fetching corpus: 8967, signal 267570/284567 (executing program) 2022/09/12 18:58:46 fetching corpus: 9017, signal 268016/284606 (executing program) 2022/09/12 18:58:46 fetching corpus: 9067, signal 268514/284632 (executing program) 2022/09/12 18:58:46 fetching corpus: 9117, signal 268846/284642 (executing program) 2022/09/12 18:58:47 fetching corpus: 9167, signal 269244/284654 (executing program) 2022/09/12 18:58:47 fetching corpus: 9217, signal 269668/284674 (executing program) 2022/09/12 18:58:47 fetching corpus: 9267, signal 270008/284674 (executing program) 2022/09/12 18:58:47 fetching corpus: 9317, signal 270253/284674 (executing program) 2022/09/12 18:58:47 fetching corpus: 9367, signal 270837/284682 (executing program) 2022/09/12 18:58:47 fetching corpus: 9417, signal 271230/284684 (executing program) 2022/09/12 18:58:47 fetching corpus: 9467, signal 271784/284714 (executing program) 2022/09/12 18:58:48 fetching corpus: 9517, signal 272073/284723 (executing program) 2022/09/12 18:58:48 fetching corpus: 9567, signal 272388/284726 (executing program) 2022/09/12 18:58:48 fetching corpus: 9617, signal 272749/284753 (executing program) 2022/09/12 18:58:48 fetching corpus: 9667, signal 273153/284758 (executing program) 2022/09/12 18:58:48 fetching corpus: 9717, signal 273529/284765 (executing program) 2022/09/12 18:58:48 fetching corpus: 9748, signal 273731/284808 (executing program) 2022/09/12 18:58:48 fetching corpus: 9748, signal 273731/284808 (executing program) 2022/09/12 18:58:50 starting 8 fuzzer processes 18:58:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000300)={0x0, 0x82e8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 18:58:50 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0xee01) setregid(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x45, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x44, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@nodevmap}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@obj_type}]}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{}, "f588ef226785a8c31d3599994334f80ce921aeecff9462f6cd7befe9172c37368a5323575d267d39c99b8bfee022898af3c1bf77afd59c30e15e64e4121ab990eb0ad5dbcd4a822138b425728c25be06e26f33c301c23ad2ee96ffd769ae34642af472088bd78d5af48e0dbd664dba4a732713457816c1df0b1aa9d58c34c0d4b7ded7dea833fc62ef2fa93eefb0108b115c666d8172d40825b689a6d9c7b948b01b0ae29cfd76986cd9b0a6abc931ede1723292b0d30712efa6f09f51ae6dbc5868a8f3780330f348a9fa45505ce69b835b5c945cf846b400586d84e54811d0f496354b6586ea3269f064937f5b240526b46fdd31ade4d5a4c3da96f1d0ead3ce1d547b3a11d339ee226ad077b17027dc1f0309f35f0858e783ccd68e8dccef92c4f2ce5fca73eee5432675f60d9ef38d2937c137fc2df4d3ffff0000cad11c188e92293938fc0a618199046f8e4341c0a01695da5c4f3847a912b594276222a4b9c84dff4da1b92da8be268149972c76cb2ba3bb45d2739eeab1d80e4a7d7c6a49efe9ad26531a02293c9928a4aeab5e4ca9de1e297dcde69f740d5c944500600d5973e236c705eba624d76f62aa79dc2254c268db753a9ae9a562138f457f20e4f7634a248f062bba5a7688eba38460aa3873a79aac4d51b69b11284718e6ab9e241666f8435f11db31e0a1218201bc4985330004000002b6b5af78d52497fc3e41ddfba147fd1bcc22e68654d43cb1606791cf0b2fc72c76fb43175952395d53833a36e83fe4383c39a6c44101d77bd0ca495b81bc26b7b1a889f1253a089c6ba57565eaf9f8180840edd0a1ed72598a612b0181d2777b2358c091083839caafc27e1b82206d6ee04255ea8d334b4452a6c7e162446f341d92d553b87f22809922894a397e9b0e2ad391fb97d5703e2ac09ebf49573479670d4eb3e13499b534287729a14ab6810b1100321a9b286f93d15a351c08b59bea7d8e85a3c7d56d4f2adf99f53569c8a8a70cafcedab9a6342a70790c039a20d590e6ab49bf5b633888e0a7a3fc9c7cfaf48ac239d22a43110ca5883a0169159b820aa75a6a321cc72c2131d1163347b35d6178a9c3050a2ed0f2b002b336a30b6c7395f3102ca55954df94ffff787126bb4ca0fdf5d595c6e8df337c9d402da6c01fefd512f66db01c2fcf46b426161c4428e5162a61bd0c49d72349c09dbbf39f32beba74bc90ae059c3cd5bac09ae6f4cf7102301458cdb9b6dd23da07f03bb6d1e3b67cc60f3721059255502ab25b9288e2f1ac0c4cb75b5a86772d527e68e27d5bccb4eeffd154fad7bc54b8b6136b7dddf723f439ccc902d379da925f93c0a628943d3fe238e0d0a8d7d6365d5a11fed71dd03da09872e6256c69d4547980b5572c4b4402951dd896cd2706c35c6eb88a59f41ea80c16a7092570e33bf107511f073932379c84eedc4f3fec0f3a72f16d52d34755718a95fda60bb11ded1571f0be28e3e902911a164009dff1fe81f45f397871d7ddcdfb79414c502e0c37e393b8e4a073b9cf4ed876dcae1c6e86614071d6cf3ff2e477ad96b4b6dccccbbcfd09ae279ffee945786a46db69ddd9258692f7261cf73fd5a76c9ce636962a0b29c43c8d68dc08ef9f1d0713432ae17b13e58df897da807c874e7c08db5be584ad1dfa4978f12dc0447f70465abf55b21f493f0e7860fd557ba934d0dc0fd3fd851530eea4fc4ae484f3e64872a2e9aa335be0819288ffc233ec460b53f02f64b7574051d6c322bc1fa30878fe280b7c4d2c9d896ec334dd21ed01a06dd1ab229abff3aa52d083404953dbf1ee4df2396bbb2fa9c609f7ba0be405dbd68cc9f895342741968050238a3310d359c4fac43fca77cf1714720b271ada29b481e52c3e1f94dba95fbd759f76ddc84a2397fa1d61e227b1805f5788d9dff1499e792dbcaaa4f3966c141548c3cafb693a2d4466c00eb8556ff09a482ca1eae6d5516f1997bf9c7f70d7d4d4a7e40e0df2e2ca091e99d14750bc3b6c3c5d44b90449d05025dbfba8b40a50c23c7593241f83ca9ad87eb755c1c9500a051c2b3afaf1146d9305cfbc7efd392b356aceb7d0df45ffb62a89bc5db328075ffbd6832973cd61af22efb8b38e91188316f966e578125664648c08311ea8344df586e0e1a56748011a9c5ac2bd0b9976a6b8b4d84e8819beb32c761bd257b923e63b85aef31acea8fb11e1a7da9f92e21a6335e78ba1156671c8da08667590f407654dda7951f18b0e7a6535ec09d84e209e8623397086323d3de7c007c69a0f5a19ba5174b70156981ac4366e3ca7c8c6ef2cbb90e67f90f1f964210112bc5374e7e97fab1e028ea4f8bae78a07da510b92e968cab0a8910996794d6c511520f7131b45d67583eebf0d8b169e94b248eb79b33f65894126f41bee8d2bb7ff76f3515fefdc80d448ff1eb63f0641ba51e08609141f78a664b922c7fc53a5a6c71ca164e2dc09093b439265c44c52460f723f0065a486b2efa7baca393015e0958bf1544b6a263050addc7e35f26327a49450453693c4b0880f92fd571838b5cd4682c887d6d49d4aac5829c100574b9f6c58dd6f592676ae2a8d9ae16a0d8cd8ed6e53654c43f856b8478bfcc58519986c068d5956c67d8e147d3d99120ef7daef8d6f3145d32f79dc900d6b00501a76014867ac8be07231005f23bbf07a20aca49c7cf5b4261aa7d18779b5448c45cd27ceabe343ebe87a5ebc0d2df3b221b47ac013ce9508cf3c6cb2f637c20bc8f3e94236b33ff3da6515718deb6e276e923a6d2234e5198b8702a2747bb1725d8c8d344341e301558ea7d94e6e5c3cc75c5a83380f660139939ed1274c8ad6299446ade528a20d8ae22200b88fa354f2525528b011d71604ffae08039e4786fd6843cfce4a374a0158b657cc11fa91436e1f9cfe53a8ccd58ac8d468b5dcea08b74676ef82513cbad6999ee34128738390a2d25353cc78a3a75ce2c079aaa4f9d30f1e4de732c09fc8972b6f3ffaa4ac849d93a366beb95f91e3a653ace0c3ba7300b187f75ac75a896d43e206fd5b825c3b0fda840796ca8c8c6fab90df2bd4804d3274a825343576f7f4c3f1fa36cc00415201e34d3e1b3b0d795473fdfe5d1b220da394ab6a404a737fdaa7fc2716f0348166f1a813ecb225df7eac89155fc7ef985cdc38ab36d1e5dcbb3d18aeb4a07aee2530260b2bca18fc7a87fff0e748449ef16e6bbc30d4e7af98a181b6b3017a1d086ba9d3771ba0a8d8dd9a8c706945a788a0ee58eb4dfecdbe42a589414f48c9d8e26aaff16512d81ec965a0380b8ac100e02fb1d511ce5a392d022f30182a85765526d8eea97e53691d713e54181c94269fbdf3a8f3553960f66c0dcb9d676064837bf77127d82a28c758335979cb1f5b2a3c9257aa3e3bd014ac380e59df598ef650813d09b3fbddc3710ae75b49a96340d14b8e2044d3fba85565456ded53bfceffecb1c38b74315c04082da6efcec23229206d95189d87bf744d19d31c6a7450208bdd724ad2a295987647c394d1fd5ba5ce2e9384ad5933f1155a2cefbd433f202394b02fa2e9e930cacf691b3a02f3c52fda6836cbf2b24a0ab8da3186d4a4ad5e9796ea583c8310a925453baf3535d8cb075d352c30db800e0721dca23416d4319ace4e535b651cf4f79d8b10253365a3bf57664c6cbd9a8cecc3e1b455478d15da781e593d5b2ebbbed36c56c8c08a1b847b93cec13da66490aa41cca5feb5c2f257fb58d7a77d69750f6d35aa9cce7c50277fa43c23599ba17915c97203f7121d1f7ea7f0acfeb4f054d0cfdcdf320b57d6a8973d0537f49b892e9dfd2fb874f2eb02054da54c4e38548c3a3af28e9eb449eefab42c01b08ccb39923580ec89b2503c6b4968832ec11a84a461cf177a144ab52cd9a0f11bd383d26f5605f26f5bba032f3d395fc696a75e6366697355998ba4f393e3010000800000000032e16be8e18b3ff0b0a726dae7d51b800feea90a15c40039aa269a5ac7a2a0dd48c57d2d3cb3d8b9f0e0d6f6ba387f6cc10a037fab0a917414d194718bb00104000000000000d36bad81d53061d323c003bde9c227b6ffff12e1bc38f175c27294013725246cac5cc917ced552ca6c9457a110f024ba9b7d30beb8bed94617154bc0e162009e6da1c391a62c3a16a9a2b5cc23eb7ab8d5f3db2ecc1ada462403b720b4d52911b5ae448b0cb71e553cbb226067472462fbb9b218ec9fb4f0beb5ea00c68c7417c10c5f5b2a58ea95bd71134333f18c0c80f6a09187a174129ab2505484c84693f04aaad8771d2c36af2750818fa08efed8939ea43383fb1e32655525192400d64f98ec4da3badf7e4e4870a0778386694bb33ec97b42455c253b0bec60f4ddb85a98aff2e92f2cc5fe45ac765901db95e7cacf4b0cc5b4fe789f8f55bb332194f3c13ee33aafac8ea4067c19f9a4a347941e76655c07b73678d11f9a54d31a643a0b683827f8e827aa9b3d9b5f6d5154472d6ad039ab7886e040c6f16f5e447f1fb871275b44cffe797db80b1748ae6c5c082eafa9e9e1905d36b78f444244b71403ae9a023971a307af1f3b9c48a4e94e5c13d4354e83c454f27d15b863a0fc0a792327275ad55f8d8d323a284531b03a1a8701d440215d99b4833063b1987db87fab90e6587050f2cdbda72b2c608399273f4562a5ba2966679b436c91a6dba324e2d7f8bfbe3610c004096f071fb40250497818dd4d14ff3ad123f0b3efcfd1cee1ffe4ffe6a62b3db620371621b6594bb38375bc9e82caf0b507315c3119ce469065f36b291b67ebf529e16026b57812be0af4f6cbcaddd6e8e701da2fe23744c69c4044dcd2b687bfc9a56a971b9de4320293ee9a8904f361bbc99b212a0d380d40c7f4e4f8f2a24bc9711a68d5f334890599e7f40f4bb80e26e36c2a82d8098903e0b55c075061f4a1516cf83f7727e56bd2f4ae34159bb15661c0b550471873e2aa8718f058ab938d05dc1d3b793a38dbe600a1ec75d94d149c29e49f52fdac4e2e0f56ca004f81a61bdd696d7094ae77abc19f9553a9ee727d553d1532ddb34cfc80fbf7e589c8038b91f4a295553dce77adb07cecfac1ca96e41ee1c062ab73d102730b86127e05147cbf6fc6715f69a0581281597b923ae87da9110103232ba0a2f34da91b7144a8bf5a09ac6deac4e9ee8a5b81bc110e4ee136754e646061c5d4741a134d765f6b87437a96750e41df85a0020ec27420bd8222f2b44dd71c32bfb398ceb169babda43108f4dc831a057cf25c9782f807fc93af5c973218c3b545769916c8d107ca87b3bea14f6fe60a98ecd4d670fc48756cd0334bdf5f0c64bb1b59cf533710c3b214fc7eb2e9ad8d220df9311e9d03ec4a5c3df3eb629420b5ff1a6a2de4645c4b9640a880ad00d6109fb401b8dec6e960957d701f2eb1b11d64a64472e58aba21418b7146b1e89a80444fea629e81672b8eff1cb87d64294c0d3d091e34e910c89559fb686480b3f2600cc00942e1b6acf978ee710246c111a8044e1623bd6649014239404986d05bcc59b5455eded64e9bfd2e8e45e383a7249b1b85c681166e9639c697dd783f12e97355e47067125a5714497775f341c62ccc3fc4e2ab37de397c3d67d04dd8d0417e8983b89b17efbd004f844276862e9759478dacda672249276f563d0db981105370feafd3e2fa6aea0367ebb02ae76ba25c9639a1b20d886d187de2f3fafe44204c310f00ace4dc22358cf3b0a1711b009c00"}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xffff5d14, 0x80}) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x1000000000000096, 0x0) syz_io_uring_setup(0x7976, &(0x7f0000000140)={0x0, 0x432c, 0x8, 0x2, 0x47}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 18:58:50 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:58:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, 0xfffffffffffffffc, &(0x7f0000000480)=0x3) [ 78.999047] audit: type=1400 audit(1663009130.843:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:58:50 executing program 5: semtimedop(0x0, 0x0, 0x1f4, 0x0) 18:58:50 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:58:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) 18:58:50 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/55, 0x37}], 0x1, 0x0, 0x0) [ 80.241585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.243712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.246857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.248263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.250904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.254048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.261623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.289123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.290955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.292489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.295566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.298745] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.300242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.302887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.305213] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.312019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.313681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.320577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.322295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.323621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.327614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.330826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.332881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.336016] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.337558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.344448] Bluetooth: hci0: HCI_REQ-0x0c1a [ 80.345970] Bluetooth: hci2: HCI_REQ-0x0c1a [ 80.359662] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.384012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.391679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.393448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.395234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.397843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.399153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.401659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.403241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.404625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.405149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.408897] Bluetooth: hci6: HCI_REQ-0x0c1a [ 80.413647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.416296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.427133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.431814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.439589] Bluetooth: hci4: HCI_REQ-0x0c1a [ 80.440833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.466392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.476662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.486762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.497520] Bluetooth: hci3: HCI_REQ-0x0c1a [ 82.374164] Bluetooth: hci1: command 0x0409 tx timeout [ 82.374389] Bluetooth: hci2: command 0x0409 tx timeout [ 82.375249] Bluetooth: hci5: command 0x0409 tx timeout [ 82.376374] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 82.376658] Bluetooth: hci0: command 0x0409 tx timeout [ 82.439782] Bluetooth: hci6: command 0x0409 tx timeout [ 82.502404] Bluetooth: hci4: command 0x0409 tx timeout [ 82.566982] Bluetooth: hci3: command 0x0409 tx timeout [ 84.422427] Bluetooth: hci5: command 0x041b tx timeout [ 84.422920] Bluetooth: hci2: command 0x041b tx timeout [ 84.423441] Bluetooth: hci1: command 0x041b tx timeout [ 84.423529] Bluetooth: hci0: command 0x041b tx timeout [ 84.485449] Bluetooth: hci6: command 0x041b tx timeout [ 84.549497] Bluetooth: hci4: command 0x041b tx timeout [ 84.613431] Bluetooth: hci3: command 0x041b tx timeout [ 85.741954] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.743455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.745424] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.754888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.756113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.760850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.772467] Bluetooth: hci7: HCI_REQ-0x0c1a [ 86.469456] Bluetooth: hci0: command 0x040f tx timeout [ 86.470062] Bluetooth: hci2: command 0x040f tx timeout [ 86.470401] Bluetooth: hci1: command 0x040f tx timeout [ 86.470621] Bluetooth: hci5: command 0x040f tx timeout [ 86.533392] Bluetooth: hci6: command 0x040f tx timeout [ 86.597437] Bluetooth: hci4: command 0x040f tx timeout [ 86.661408] Bluetooth: hci3: command 0x040f tx timeout [ 87.813443] Bluetooth: hci7: command 0x0409 tx timeout [ 88.517538] Bluetooth: hci1: command 0x0419 tx timeout [ 88.518409] Bluetooth: hci5: command 0x0419 tx timeout [ 88.519242] Bluetooth: hci2: command 0x0419 tx timeout [ 88.520146] Bluetooth: hci0: command 0x0419 tx timeout [ 88.582431] Bluetooth: hci6: command 0x0419 tx timeout [ 88.645410] Bluetooth: hci4: command 0x0419 tx timeout [ 88.710433] Bluetooth: hci3: command 0x0419 tx timeout [ 89.861401] Bluetooth: hci7: command 0x041b tx timeout [ 91.910442] Bluetooth: hci7: command 0x040f tx timeout [ 93.957524] Bluetooth: hci7: command 0x0419 tx timeout 18:59:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 134.059072] loop1: detected capacity change from 0 to 40 [ 134.146116] audit: type=1400 audit(1663009185.990:7): avc: denied { open } for pid=3671 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.147546] audit: type=1400 audit(1663009185.990:8): avc: denied { kernel } for pid=3671 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.160474] ------------[ cut here ]------------ [ 134.160499] [ 134.160502] ====================================================== [ 134.160506] WARNING: possible circular locking dependency detected [ 134.160511] 6.0.0-rc5-next-20220912 #1 Not tainted [ 134.160517] ------------------------------------------------------ [ 134.160521] syz-executor.1/3672 is trying to acquire lock: [ 134.160527] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.160567] [ 134.160567] but task is already holding lock: [ 134.160569] ffff88800f867c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.160598] [ 134.160598] which lock already depends on the new lock. [ 134.160598] [ 134.160601] [ 134.160601] the existing dependency chain (in reverse order) is: [ 134.160605] [ 134.160605] -> #3 (&ctx->lock){....}-{2:2}: [ 134.160619] _raw_spin_lock+0x2a/0x40 [ 134.160636] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.160649] __schedule+0xedd/0x2470 [ 134.160659] schedule+0xda/0x1b0 [ 134.160668] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.160689] syscall_exit_to_user_mode+0x19/0x40 [ 134.160707] do_syscall_64+0x48/0x90 [ 134.160721] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.160738] [ 134.160738] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.160752] _raw_spin_lock_nested+0x30/0x40 [ 134.160767] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.160780] task_fork_fair+0x63/0x4d0 [ 134.160798] sched_cgroup_fork+0x3d0/0x540 [ 134.160812] copy_process+0x3f9e/0x6df0 [ 134.160823] kernel_clone+0xe7/0x890 [ 134.160833] user_mode_thread+0xad/0xf0 [ 134.160843] rest_init+0x24/0x250 [ 134.160859] arch_call_rest_init+0xf/0x14 [ 134.160879] start_kernel+0x4c1/0x4e6 [ 134.160896] secondary_startup_64_no_verify+0xe0/0xeb [ 134.160918] [ 134.160918] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.160932] _raw_spin_lock_irqsave+0x39/0x60 [ 134.160947] try_to_wake_up+0xab/0x1920 [ 134.160960] up+0x75/0xb0 [ 134.160972] __up_console_sem+0x6e/0x80 [ 134.160989] console_unlock+0x46a/0x590 [ 134.161005] vprintk_emit+0x1bd/0x560 [ 134.161022] vprintk+0x84/0xa0 [ 134.161038] _printk+0xba/0xf1 [ 134.161056] kauditd_hold_skb.cold+0x3f/0x4e [ 134.161070] kauditd_send_queue+0x233/0x290 [ 134.161086] kauditd_thread+0x5da/0x9a0 [ 134.161100] kthread+0x2ed/0x3a0 [ 134.161115] ret_from_fork+0x22/0x30 [ 134.161128] [ 134.161128] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.161142] __lock_acquire+0x2a02/0x5e70 [ 134.161158] lock_acquire+0x1a2/0x530 [ 134.161175] _raw_spin_lock_irqsave+0x39/0x60 [ 134.161189] down_trylock+0xe/0x70 [ 134.161202] __down_trylock_console_sem+0x3b/0xd0 [ 134.161218] vprintk_emit+0x16b/0x560 [ 134.161235] vprintk+0x84/0xa0 [ 134.161251] _printk+0xba/0xf1 [ 134.161267] report_bug.cold+0x72/0xab [ 134.161279] handle_bug+0x3c/0x70 [ 134.161292] exc_invalid_op+0x14/0x50 [ 134.161305] asm_exc_invalid_op+0x16/0x20 [ 134.161321] group_sched_out.part.0+0x2c7/0x460 [ 134.161332] ctx_sched_out+0x8f1/0xc10 [ 134.161341] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.161354] __schedule+0xedd/0x2470 [ 134.161363] schedule+0xda/0x1b0 [ 134.161372] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.161391] syscall_exit_to_user_mode+0x19/0x40 [ 134.161408] do_syscall_64+0x48/0x90 [ 134.161421] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.161437] [ 134.161437] other info that might help us debug this: [ 134.161437] [ 134.161440] Chain exists of: [ 134.161440] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.161440] [ 134.161455] Possible unsafe locking scenario: [ 134.161455] [ 134.161458] CPU0 CPU1 [ 134.161460] ---- ---- [ 134.161462] lock(&ctx->lock); [ 134.161468] lock(&rq->__lock); [ 134.161475] lock(&ctx->lock); [ 134.161481] lock((console_sem).lock); [ 134.161487] [ 134.161487] *** DEADLOCK *** [ 134.161487] [ 134.161489] 2 locks held by syz-executor.1/3672: [ 134.161496] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.161521] #1: ffff88800f867c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.161549] [ 134.161549] stack backtrace: [ 134.161552] CPU: 1 PID: 3672 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 134.161565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.161573] Call Trace: [ 134.161576] [ 134.161581] dump_stack_lvl+0x8b/0xb3 [ 134.161596] check_noncircular+0x263/0x2e0 [ 134.161612] ? format_decode+0x26c/0xb50 [ 134.161627] ? print_circular_bug+0x450/0x450 [ 134.161645] ? enable_ptr_key_workfn+0x20/0x20 [ 134.161658] ? __lockdep_reset_lock+0x180/0x180 [ 134.161676] ? format_decode+0x26c/0xb50 [ 134.161691] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.161709] __lock_acquire+0x2a02/0x5e70 [ 134.161731] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.161753] lock_acquire+0x1a2/0x530 [ 134.161771] ? down_trylock+0xe/0x70 [ 134.161785] ? rcu_read_unlock+0x40/0x40 [ 134.161804] ? find_held_lock+0x2c/0x110 [ 134.161821] ? vprintk+0x84/0xa0 [ 134.161840] _raw_spin_lock_irqsave+0x39/0x60 [ 134.161855] ? down_trylock+0xe/0x70 [ 134.161869] down_trylock+0xe/0x70 [ 134.161882] ? vprintk+0x84/0xa0 [ 134.161900] __down_trylock_console_sem+0x3b/0xd0 [ 134.161917] vprintk_emit+0x16b/0x560 [ 134.161937] vprintk+0x84/0xa0 [ 134.161955] _printk+0xba/0xf1 [ 134.161972] ? record_print_text.cold+0x16/0x16 [ 134.161992] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 134.162007] ? lock_downgrade+0x6d0/0x6d0 [ 134.162025] ? report_bug.cold+0x66/0xab [ 134.162039] ? group_sched_out.part.0+0x2c7/0x460 [ 134.162050] report_bug.cold+0x72/0xab [ 134.162065] handle_bug+0x3c/0x70 [ 134.162078] exc_invalid_op+0x14/0x50 [ 134.162093] asm_exc_invalid_op+0x16/0x20 [ 134.162110] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.162124] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.162136] RSP: 0018:ffff888040f27c48 EFLAGS: 00010006 [ 134.162145] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.162153] RDX: ffff888040dd8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.162161] RBP: ffff8880174f0000 R08: 0000000000000005 R09: 0000000000000001 [ 134.162168] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f867c00 [ 134.162176] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.162187] ? group_sched_out.part.0+0x2c7/0x460 [ 134.162200] ? group_sched_out.part.0+0x2c7/0x460 [ 134.162213] ctx_sched_out+0x8f1/0xc10 [ 134.162225] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.162241] ? lock_is_held_type+0xd7/0x130 [ 134.162259] ? __perf_cgroup_move+0x160/0x160 [ 134.162271] ? set_next_entity+0x304/0x550 [ 134.162289] ? update_curr+0x267/0x740 [ 134.162308] ? lock_is_held_type+0xd7/0x130 [ 134.162326] __schedule+0xedd/0x2470 [ 134.162339] ? io_schedule_timeout+0x150/0x150 [ 134.162352] ? __x64_sys_futex_time32+0x480/0x480 [ 134.162365] schedule+0xda/0x1b0 [ 134.162376] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.162397] syscall_exit_to_user_mode+0x19/0x40 [ 134.162415] do_syscall_64+0x48/0x90 [ 134.162429] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.162446] RIP: 0033:0x7fe9e5565b19 [ 134.162455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.162466] RSP: 002b:00007fe9e2adb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.162477] RAX: 0000000000000001 RBX: 00007fe9e5678f68 RCX: 00007fe9e5565b19 [ 134.162485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9e5678f6c [ 134.162492] RBP: 00007fe9e5678f60 R08: 000000000000000e R09: 0000000000000000 [ 134.162499] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe9e5678f6c [ 134.162507] R13: 00007fff3530011f R14: 00007fe9e2adb300 R15: 0000000000022000 [ 134.162520] [ 134.219354] WARNING: CPU: 1 PID: 3672 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.220023] Modules linked in: [ 134.220277] CPU: 1 PID: 3672 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 134.220859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.221683] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.222074] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.223365] RSP: 0018:ffff888040f27c48 EFLAGS: 00010006 [ 134.223749] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.224267] RDX: ffff888040dd8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.224784] RBP: ffff8880174f0000 R08: 0000000000000005 R09: 0000000000000001 [ 134.225312] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f867c00 [ 134.225823] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.226339] FS: 00007fe9e2adb700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 134.226915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.227341] CR2: 00007fb212d258e0 CR3: 000000001864e000 CR4: 0000000000350ee0 [ 134.227857] Call Trace: [ 134.228050] [ 134.228225] ctx_sched_out+0x8f1/0xc10 [ 134.228516] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.228893] ? lock_is_held_type+0xd7/0x130 [ 134.229230] ? __perf_cgroup_move+0x160/0x160 [ 134.229565] ? set_next_entity+0x304/0x550 [ 134.229882] ? update_curr+0x267/0x740 [ 134.230181] ? lock_is_held_type+0xd7/0x130 [ 134.230505] __schedule+0xedd/0x2470 [ 134.230782] ? io_schedule_timeout+0x150/0x150 [ 134.231121] ? __x64_sys_futex_time32+0x480/0x480 [ 134.231478] schedule+0xda/0x1b0 [ 134.231732] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.232107] syscall_exit_to_user_mode+0x19/0x40 [ 134.232463] do_syscall_64+0x48/0x90 [ 134.232741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.233133] RIP: 0033:0x7fe9e5565b19 [ 134.233410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.234717] RSP: 002b:00007fe9e2adb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.235265] RAX: 0000000000000001 RBX: 00007fe9e5678f68 RCX: 00007fe9e5565b19 [ 134.235789] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9e5678f6c [ 134.236303] RBP: 00007fe9e5678f60 R08: 000000000000000e R09: 0000000000000000 [ 134.236821] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe9e5678f6c [ 134.237332] R13: 00007fff3530011f R14: 00007fe9e2adb300 R15: 0000000000022000 [ 134.237848] [ 134.238021] irq event stamp: 3330 [ 134.238275] hardirqs last enabled at (3329): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 134.238961] hardirqs last disabled at (3330): [] __schedule+0x1225/0x2470 [ 134.239559] softirqs last enabled at (2930): [] __irq_exit_rcu+0x11b/0x180 [ 134.240188] softirqs last disabled at (2881): [] __irq_exit_rcu+0x11b/0x180 [ 134.240809] ---[ end trace 0000000000000000 ]--- [ 134.555196] syz-executor.1: attempt to access beyond end of device [ 134.555196] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.556195] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 134.576463] syz-executor.1: attempt to access beyond end of device [ 134.576463] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.577375] Buffer I/O error on dev loop1, logical block 10, lost async page write 18:59:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 134.663282] loop1: detected capacity change from 0 to 40 [ 134.749909] syz-executor.1: attempt to access beyond end of device [ 134.749909] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.751121] Buffer I/O error on dev loop1, logical block 10, lost async page write 18:59:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 134.822222] loop1: detected capacity change from 0 to 40 [ 134.885272] syz-executor.1: attempt to access beyond end of device [ 134.885272] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.886285] Buffer I/O error on dev loop1, logical block 10, lost async page write 18:59:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 134.985394] loop1: detected capacity change from 0 to 40 [ 135.061646] syz-executor.1: attempt to access beyond end of device [ 135.061646] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 135.062844] Buffer I/O error on dev loop1, logical block 10, lost async page write 18:59:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8850, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10300, &(0x7f0000001640)) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=[&(0x7f0000000040)='\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='\x00', &(0x7f0000000380)='\x00'], 0x400) r0 = openat(0xffffffffffffffff, 0x0, 0x420000, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) io_uring_setup(0x7b31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', &(0x7f0000000200)={0x200100, 0x40, 0x9}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 18:59:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4, 0x81, 0x8, 0xff, 0x0, 0xfff, 0x4004, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0xfffffffffffffff9, 0xffff, 0x0, 0x4, 0x7ff, 0x6, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r2, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x421d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = fcntl$getown(r1, 0x9) tkill(r4, 0x27) tkill(r3, 0x16) capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r3) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x400c8c0}, 0x444d4) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 18:59:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000008480)=[{{&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="4c85", 0x2}], 0x1}}], 0x1, 0x0) [ 135.488080] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 18:59:47 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) [ 136.462291] loop4: detected capacity change from 0 to 256 [ 136.485604] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 136.712373] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 136.943041] audit: type=1400 audit(1663009188.787:9): avc: denied { write } for pid=3925 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.949221] loop3: detected capacity change from 0 to 40 [ 136.981019] syz-executor.3: attempt to access beyond end of device [ 136.981019] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.982090] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 136.989743] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 136.990481] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 136.990979] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 136.991481] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 136.992026] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 136.994398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.994795] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.995771] Buffer I/O error on dev sr0, logical block 0, async page read [ 136.997001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.997825] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.998379] Buffer I/O error on dev sr0, logical block 1, async page read [ 136.999012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.999402] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.999957] Buffer I/O error on dev sr0, logical block 2, async page read [ 137.000669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.001036] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.001593] Buffer I/O error on dev sr0, logical block 3, async page read [ 137.002219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.002745] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.003706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.004067] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.006558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.006923] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.007714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.008079] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.008937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.009307] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.010176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.010685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.011221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.013300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.014413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.015024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.015704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.018872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.019388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.019886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.020588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.025518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.026036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.027136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.027923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.028604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.029108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.029877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.030402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.030947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.032290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.034693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.035756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.294317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 18:59:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000300)={0x0, 0x82e8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 18:59:50 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 18:59:50 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:50 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0xee01) setregid(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x45, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x44, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@nodevmap}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@obj_type}]}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{}, "f588ef226785a8c31d3599994334f80ce921aeecff9462f6cd7befe9172c37368a5323575d267d39c99b8bfee022898af3c1bf77afd59c30e15e64e4121ab990eb0ad5dbcd4a822138b425728c25be06e26f33c301c23ad2ee96ffd769ae34642af472088bd78d5af48e0dbd664dba4a732713457816c1df0b1aa9d58c34c0d4b7ded7dea833fc62ef2fa93eefb0108b115c666d8172d40825b689a6d9c7b948b01b0ae29cfd76986cd9b0a6abc931ede1723292b0d30712efa6f09f51ae6dbc5868a8f3780330f348a9fa45505ce69b835b5c945cf846b400586d84e54811d0f496354b6586ea3269f064937f5b240526b46fdd31ade4d5a4c3da96f1d0ead3ce1d547b3a11d339ee226ad077b17027dc1f0309f35f0858e783ccd68e8dccef92c4f2ce5fca73eee5432675f60d9ef38d2937c137fc2df4d3ffff0000cad11c188e92293938fc0a618199046f8e4341c0a01695da5c4f3847a912b594276222a4b9c84dff4da1b92da8be268149972c76cb2ba3bb45d2739eeab1d80e4a7d7c6a49efe9ad26531a02293c9928a4aeab5e4ca9de1e297dcde69f740d5c944500600d5973e236c705eba624d76f62aa79dc2254c268db753a9ae9a562138f457f20e4f7634a248f062bba5a7688eba38460aa3873a79aac4d51b69b11284718e6ab9e241666f8435f11db31e0a1218201bc4985330004000002b6b5af78d52497fc3e41ddfba147fd1bcc22e68654d43cb1606791cf0b2fc72c76fb43175952395d53833a36e83fe4383c39a6c44101d77bd0ca495b81bc26b7b1a889f1253a089c6ba57565eaf9f8180840edd0a1ed72598a612b0181d2777b2358c091083839caafc27e1b82206d6ee04255ea8d334b4452a6c7e162446f341d92d553b87f22809922894a397e9b0e2ad391fb97d5703e2ac09ebf49573479670d4eb3e13499b534287729a14ab6810b1100321a9b286f93d15a351c08b59bea7d8e85a3c7d56d4f2adf99f53569c8a8a70cafcedab9a6342a70790c039a20d590e6ab49bf5b633888e0a7a3fc9c7cfaf48ac239d22a43110ca5883a0169159b820aa75a6a321cc72c2131d1163347b35d6178a9c3050a2ed0f2b002b336a30b6c7395f3102ca55954df94ffff787126bb4ca0fdf5d595c6e8df337c9d402da6c01fefd512f66db01c2fcf46b426161c4428e5162a61bd0c49d72349c09dbbf39f32beba74bc90ae059c3cd5bac09ae6f4cf7102301458cdb9b6dd23da07f03bb6d1e3b67cc60f3721059255502ab25b9288e2f1ac0c4cb75b5a86772d527e68e27d5bccb4eeffd154fad7bc54b8b6136b7dddf723f439ccc902d379da925f93c0a628943d3fe238e0d0a8d7d6365d5a11fed71dd03da09872e6256c69d4547980b5572c4b4402951dd896cd2706c35c6eb88a59f41ea80c16a7092570e33bf107511f073932379c84eedc4f3fec0f3a72f16d52d34755718a95fda60bb11ded1571f0be28e3e902911a164009dff1fe81f45f397871d7ddcdfb79414c502e0c37e393b8e4a073b9cf4ed876dcae1c6e86614071d6cf3ff2e477ad96b4b6dccccbbcfd09ae279ffee945786a46db69ddd9258692f7261cf73fd5a76c9ce636962a0b29c43c8d68dc08ef9f1d0713432ae17b13e58df897da807c874e7c08db5be584ad1dfa4978f12dc0447f70465abf55b21f493f0e7860fd557ba934d0dc0fd3fd851530eea4fc4ae484f3e64872a2e9aa335be0819288ffc233ec460b53f02f64b7574051d6c322bc1fa30878fe280b7c4d2c9d896ec334dd21ed01a06dd1ab229abff3aa52d083404953dbf1ee4df2396bbb2fa9c609f7ba0be405dbd68cc9f895342741968050238a3310d359c4fac43fca77cf1714720b271ada29b481e52c3e1f94dba95fbd759f76ddc84a2397fa1d61e227b1805f5788d9dff1499e792dbcaaa4f3966c141548c3cafb693a2d4466c00eb8556ff09a482ca1eae6d5516f1997bf9c7f70d7d4d4a7e40e0df2e2ca091e99d14750bc3b6c3c5d44b90449d05025dbfba8b40a50c23c7593241f83ca9ad87eb755c1c9500a051c2b3afaf1146d9305cfbc7efd392b356aceb7d0df45ffb62a89bc5db328075ffbd6832973cd61af22efb8b38e91188316f966e578125664648c08311ea8344df586e0e1a56748011a9c5ac2bd0b9976a6b8b4d84e8819beb32c761bd257b923e63b85aef31acea8fb11e1a7da9f92e21a6335e78ba1156671c8da08667590f407654dda7951f18b0e7a6535ec09d84e209e8623397086323d3de7c007c69a0f5a19ba5174b70156981ac4366e3ca7c8c6ef2cbb90e67f90f1f964210112bc5374e7e97fab1e028ea4f8bae78a07da510b92e968cab0a8910996794d6c511520f7131b45d67583eebf0d8b169e94b248eb79b33f65894126f41bee8d2bb7ff76f3515fefdc80d448ff1eb63f0641ba51e08609141f78a664b922c7fc53a5a6c71ca164e2dc09093b439265c44c52460f723f0065a486b2efa7baca393015e0958bf1544b6a263050addc7e35f26327a49450453693c4b0880f92fd571838b5cd4682c887d6d49d4aac5829c100574b9f6c58dd6f592676ae2a8d9ae16a0d8cd8ed6e53654c43f856b8478bfcc58519986c068d5956c67d8e147d3d99120ef7daef8d6f3145d32f79dc900d6b00501a76014867ac8be07231005f23bbf07a20aca49c7cf5b4261aa7d18779b5448c45cd27ceabe343ebe87a5ebc0d2df3b221b47ac013ce9508cf3c6cb2f637c20bc8f3e94236b33ff3da6515718deb6e276e923a6d2234e5198b8702a2747bb1725d8c8d344341e301558ea7d94e6e5c3cc75c5a83380f660139939ed1274c8ad6299446ade528a20d8ae22200b88fa354f2525528b011d71604ffae08039e4786fd6843cfce4a374a0158b657cc11fa91436e1f9cfe53a8ccd58ac8d468b5dcea08b74676ef82513cbad6999ee34128738390a2d25353cc78a3a75ce2c079aaa4f9d30f1e4de732c09fc8972b6f3ffaa4ac849d93a366beb95f91e3a653ace0c3ba7300b187f75ac75a896d43e206fd5b825c3b0fda840796ca8c8c6fab90df2bd4804d3274a825343576f7f4c3f1fa36cc00415201e34d3e1b3b0d795473fdfe5d1b220da394ab6a404a737fdaa7fc2716f0348166f1a813ecb225df7eac89155fc7ef985cdc38ab36d1e5dcbb3d18aeb4a07aee2530260b2bca18fc7a87fff0e748449ef16e6bbc30d4e7af98a181b6b3017a1d086ba9d3771ba0a8d8dd9a8c706945a788a0ee58eb4dfecdbe42a589414f48c9d8e26aaff16512d81ec965a0380b8ac100e02fb1d511ce5a392d022f30182a85765526d8eea97e53691d713e54181c94269fbdf3a8f3553960f66c0dcb9d676064837bf77127d82a28c758335979cb1f5b2a3c9257aa3e3bd014ac380e59df598ef650813d09b3fbddc3710ae75b49a96340d14b8e2044d3fba85565456ded53bfceffecb1c38b74315c04082da6efcec23229206d95189d87bf744d19d31c6a7450208bdd724ad2a295987647c394d1fd5ba5ce2e9384ad5933f1155a2cefbd433f202394b02fa2e9e930cacf691b3a02f3c52fda6836cbf2b24a0ab8da3186d4a4ad5e9796ea583c8310a925453baf3535d8cb075d352c30db800e0721dca23416d4319ace4e535b651cf4f79d8b10253365a3bf57664c6cbd9a8cecc3e1b455478d15da781e593d5b2ebbbed36c56c8c08a1b847b93cec13da66490aa41cca5feb5c2f257fb58d7a77d69750f6d35aa9cce7c50277fa43c23599ba17915c97203f7121d1f7ea7f0acfeb4f054d0cfdcdf320b57d6a8973d0537f49b892e9dfd2fb874f2eb02054da54c4e38548c3a3af28e9eb449eefab42c01b08ccb39923580ec89b2503c6b4968832ec11a84a461cf177a144ab52cd9a0f11bd383d26f5605f26f5bba032f3d395fc696a75e6366697355998ba4f393e3010000800000000032e16be8e18b3ff0b0a726dae7d51b800feea90a15c40039aa269a5ac7a2a0dd48c57d2d3cb3d8b9f0e0d6f6ba387f6cc10a037fab0a917414d194718bb00104000000000000d36bad81d53061d323c003bde9c227b6ffff12e1bc38f175c27294013725246cac5cc917ced552ca6c9457a110f024ba9b7d30beb8bed94617154bc0e162009e6da1c391a62c3a16a9a2b5cc23eb7ab8d5f3db2ecc1ada462403b720b4d52911b5ae448b0cb71e553cbb226067472462fbb9b218ec9fb4f0beb5ea00c68c7417c10c5f5b2a58ea95bd71134333f18c0c80f6a09187a174129ab2505484c84693f04aaad8771d2c36af2750818fa08efed8939ea43383fb1e32655525192400d64f98ec4da3badf7e4e4870a0778386694bb33ec97b42455c253b0bec60f4ddb85a98aff2e92f2cc5fe45ac765901db95e7cacf4b0cc5b4fe789f8f55bb332194f3c13ee33aafac8ea4067c19f9a4a347941e76655c07b73678d11f9a54d31a643a0b683827f8e827aa9b3d9b5f6d5154472d6ad039ab7886e040c6f16f5e447f1fb871275b44cffe797db80b1748ae6c5c082eafa9e9e1905d36b78f444244b71403ae9a023971a307af1f3b9c48a4e94e5c13d4354e83c454f27d15b863a0fc0a792327275ad55f8d8d323a284531b03a1a8701d440215d99b4833063b1987db87fab90e6587050f2cdbda72b2c608399273f4562a5ba2966679b436c91a6dba324e2d7f8bfbe3610c004096f071fb40250497818dd4d14ff3ad123f0b3efcfd1cee1ffe4ffe6a62b3db620371621b6594bb38375bc9e82caf0b507315c3119ce469065f36b291b67ebf529e16026b57812be0af4f6cbcaddd6e8e701da2fe23744c69c4044dcd2b687bfc9a56a971b9de4320293ee9a8904f361bbc99b212a0d380d40c7f4e4f8f2a24bc9711a68d5f334890599e7f40f4bb80e26e36c2a82d8098903e0b55c075061f4a1516cf83f7727e56bd2f4ae34159bb15661c0b550471873e2aa8718f058ab938d05dc1d3b793a38dbe600a1ec75d94d149c29e49f52fdac4e2e0f56ca004f81a61bdd696d7094ae77abc19f9553a9ee727d553d1532ddb34cfc80fbf7e589c8038b91f4a295553dce77adb07cecfac1ca96e41ee1c062ab73d102730b86127e05147cbf6fc6715f69a0581281597b923ae87da9110103232ba0a2f34da91b7144a8bf5a09ac6deac4e9ee8a5b81bc110e4ee136754e646061c5d4741a134d765f6b87437a96750e41df85a0020ec27420bd8222f2b44dd71c32bfb398ceb169babda43108f4dc831a057cf25c9782f807fc93af5c973218c3b545769916c8d107ca87b3bea14f6fe60a98ecd4d670fc48756cd0334bdf5f0c64bb1b59cf533710c3b214fc7eb2e9ad8d220df9311e9d03ec4a5c3df3eb629420b5ff1a6a2de4645c4b9640a880ad00d6109fb401b8dec6e960957d701f2eb1b11d64a64472e58aba21418b7146b1e89a80444fea629e81672b8eff1cb87d64294c0d3d091e34e910c89559fb686480b3f2600cc00942e1b6acf978ee710246c111a8044e1623bd6649014239404986d05bcc59b5455eded64e9bfd2e8e45e383a7249b1b85c681166e9639c697dd783f12e97355e47067125a5714497775f341c62ccc3fc4e2ab37de397c3d67d04dd8d0417e8983b89b17efbd004f844276862e9759478dacda672249276f563d0db981105370feafd3e2fa6aea0367ebb02ae76ba25c9639a1b20d886d187de2f3fafe44204c310f00ace4dc22358cf3b0a1711b009c00"}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xffff5d14, 0x80}) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x1000000000000096, 0x0) syz_io_uring_setup(0x7976, &(0x7f0000000140)={0x0, 0x432c, 0x8, 0x2, 0x47}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 18:59:50 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:50 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x5, 0x0, r0, 0x0}]) 18:59:50 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:50 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 138.356757] loop4: detected capacity change from 0 to 256 [ 138.369444] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.377357] hrtimer: interrupt took 15680 ns 18:59:50 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) [ 138.404939] loop3: detected capacity change from 0 to 40 [ 138.408758] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 138.409539] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 138.410043] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 138.410558] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 138.411707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.413133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.413782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.414879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.415514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.416148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.416826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.417459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.418188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.418855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.419612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.420195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.420784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.421430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.423577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.424152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.424934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.426530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.427082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.427698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.428254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.428895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.430106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.433447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.434145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.435217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.435785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.436378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.437007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.437744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.439904] loop5: detected capacity change from 0 to 256 [ 138.441077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.441665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.443494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.444451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.445089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.446539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:59:50 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:50 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 18:59:50 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 138.522369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.523073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.523785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.524958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.525853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.527437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.528081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.528715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.529291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.529943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.530616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.531333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.532095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.532731] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.534572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.535562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.536179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.537979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.537977] syz-executor.3: attempt to access beyond end of device [ 138.537977] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.538604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.541916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.543695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.545594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.546817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.548662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.549236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.549952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.551022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.551623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.552498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.554508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.555076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.556520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.557137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.557754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.559481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.560045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.560681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.561475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.562114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.562701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.563315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.563915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.564757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.565334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.565981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.567031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.567625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.568235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.568850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.569519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.570084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.570725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.571282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.572038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.572646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.573272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.573859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.574497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.575076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.575731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.576301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.577054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.577621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.578255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.578853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.579610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.580168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.581033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.581626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.582449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.583005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.583630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.584174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.584915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.585542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.586328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.586938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.587712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.588281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.589545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.590086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.590736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.591283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.591890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.592442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.593276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.593900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.594616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.595185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.595890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.596559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.598481] loop4: detected capacity change from 0 to 256 [ 138.600523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.601530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.606254] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.610429] loop7: detected capacity change from 0 to 256 [ 138.612106] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.617799] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.628528] loop6: detected capacity change from 0 to 256 18:59:50 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 138.653965] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.775678] loop5: detected capacity change from 0 to 256 [ 138.826027] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.058612] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.111293] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.151178] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:59:51 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0xee01) setregid(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x45, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x44, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@nodevmap}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@obj_type}]}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{}, "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"}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xffff5d14, 0x80}) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x1000000000000096, 0x0) syz_io_uring_setup(0x7976, &(0x7f0000000140)={0x0, 0x432c, 0x8, 0x2, 0x47}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 18:59:51 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000300)={0x0, 0x82e8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) [ 139.269188] loop7: detected capacity change from 0 to 256 18:59:51 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 139.277914] loop3: detected capacity change from 0 to 40 [ 139.310639] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:59:51 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:51 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) [ 139.332480] syz-executor.3: attempt to access beyond end of device [ 139.332480] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 18:59:51 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:51 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) [ 139.366229] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.366978] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.367523] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.368065] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 139.371937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.375129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.375894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.377026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.377623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.378999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.380680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.381281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.382031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.382608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.384283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.384861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.385514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.386083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.386706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.387277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.388618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.389202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.391333] loop6: detected capacity change from 0 to 256 [ 139.393264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.394355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.395911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.397891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.398942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.401246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.403765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.405757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.406332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.407217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.417078] loop5: detected capacity change from 0 to 256 [ 139.437801] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.469593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.481791] loop4: detected capacity change from 0 to 256 18:59:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000300)={0x0, 0x82e8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) [ 139.491370] loop3: detected capacity change from 0 to 40 [ 139.513550] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.549608] syz-executor.3: attempt to access beyond end of device [ 139.549608] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.611110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.612416] buffer_io_error: 188 callbacks suppressed [ 139.612440] Buffer I/O error on dev sr0, logical block 5, async page read [ 139.647471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.647957] Buffer I/O error on dev sr0, logical block 6, async page read [ 139.648698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.649142] Buffer I/O error on dev sr0, logical block 7, async page read [ 139.654034] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:59:51 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:51 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0xee01) setregid(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x45, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x44, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@nodevmap}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@obj_type}]}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{}, "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"}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xffff5d14, 0x80}) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x1000000000000096, 0x0) syz_io_uring_setup(0x7976, &(0x7f0000000140)={0x0, 0x432c, 0x8, 0x2, 0x47}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 18:59:51 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) [ 139.815949] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.841637] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.969209] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.983238] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.984005] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.984545] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.985049] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 139.986229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.986671] Buffer I/O error on dev sr0, logical block 0, async page read [ 139.987570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.987990] Buffer I/O error on dev sr0, logical block 1, async page read [ 139.988928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.989706] Buffer I/O error on dev sr0, logical block 2, async page read [ 139.990400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.990808] Buffer I/O error on dev sr0, logical block 3, async page read [ 139.991518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.991926] Buffer I/O error on dev sr0, logical block 4, async page read [ 139.992806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.993243] Buffer I/O error on dev sr0, logical block 5, async page read [ 139.993963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.994456] Buffer I/O error on dev sr0, logical block 6, async page read [ 139.995156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.995896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.996497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.997075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.997694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.998261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.998893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.999620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.000230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.001016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.001674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.002235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.002852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.003454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.004043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.004646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.005251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.005991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.006606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.007146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.007792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.008335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.009017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.009632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.010253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.013844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.014408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.014985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.015562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.016130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.016723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.017311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.018148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.018855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.019500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.020125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.021426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.021982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.022692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.023224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.024007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.025237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.025806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.026397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.026949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.028762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.029373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.030015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.030617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.031356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.031921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.032533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.033118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.033743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.034535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.035132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.035694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.036376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.037421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.037968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.038575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.039141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.039824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.040385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.040968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.041748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.042320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.042921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.043542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.044110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.044752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.045313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.045910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.046571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.047171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.047756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.048360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.048943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.049583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.050116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.050693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.051368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.051938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.052528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.053105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.053729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.054296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.054872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.055705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.056373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.056961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.057556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.058137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.058723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.059299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.059873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.060543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.061184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.061777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.062308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.062927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.063524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.064123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.064686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.065319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.065980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.066602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.067164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.067754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.068306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.068894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.168073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.168741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:59:52 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:52 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:52 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:52 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:52 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80000) pidfd_send_signal(0xffffffffffffffff, 0x57aa, &(0x7f0000000480)={0x15, 0x8001, 0x81}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x8, 0x6, 0x1, 0x1, 0x0, 0x9, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x10, 0x3f, 0x7ff, 0xc, 0x81, 0x1, 0x912a, 0x0, 0x0, 0x0, 0x2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) pread64(r4, &(0x7f0000000300)=""/129, 0x81, 0x100) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="8273782e7666617400"]) write(r1, &(0x7f0000000080)="01", 0xffff8000) 18:59:52 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x3) fork() 18:59:52 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) [ 140.358781] loop6: detected capacity change from 0 to 256 [ 140.378607] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.562217] loop7: detected capacity change from 0 to 256 [ 140.573504] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.594532] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.182257] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:59:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 18:59:53 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x3) fork() 18:59:53 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/94, 0x18) 18:59:53 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:53 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 18:59:53 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) 18:59:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 18:59:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 18:59:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 18:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000080)={@local, 0x0, r5}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @rand_addr=0x2}, @in={0x2, 0x0, @loopback}, @generic}) 18:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000080)={@local, 0x0, r5}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @rand_addr=0x2}, @in={0x2, 0x0, @loopback}, @generic}) 18:59:53 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 18:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000080)={@local, 0x0, r5}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @rand_addr=0x2}, @in={0x2, 0x0, @loopback}, @generic}) 18:59:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 18:59:53 executing program 6: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 18:59:53 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)="9a6e4a0f82a69a9b6d6c36ab6fc0172c1b05a155ad281d3fe5d8b72754a9eb2fee3ca7319c34a0775b01ad34d1f2ea300a", 0x31, 0x8000}, 0xf9a) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) openat(r4, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x4) [ 141.655498] blktrace: Concurrent blktraces are not allowed on sg0 18:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000080)={@local, 0x0, r5}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @rand_addr=0x2}, @in={0x2, 0x0, @loopback}, @generic}) 18:59:53 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0 VM DIAGNOSIS: 18:59:46 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=dffffc0000000000 RCX=ffffffff81690e43 RDX=ffff88801883d040 RSI=0000000000000000 RDI=0000000000000007 RBP=1ffff110041b0f84 RSP=ffff888020d87c10 R8 =0000000000000007 R9 =0000000000000000 R10=8000000007870025 R11=0000000000000001 R12=ffff88800d67d000 R13=00007f6746676000 R14=8000000007870025 R15=ffff888020d87db0 RIP=ffffffff81461747 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f674648e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f67466763f0 CR3=00000000428d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000007 00007f6746999a90 YMM02=0000000000000000 0000000000000000 494c4700362e322e 325f4342494c4700 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000004700 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888040f27698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000069 R11=0000000000000001 R12=0000000000000069 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe9e2adb700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb212d258e0 CR3=000000001864e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000