Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:30112' (ECDSA) to the list of known hosts. 2022/09/28 04:02:16 fuzzer started 2022/09/28 04:02:16 dialing manager at localhost:35827 syzkaller login: [ 36.484667] cgroup: Unknown subsys name 'net' [ 36.606316] cgroup: Unknown subsys name 'rlimit' 2022/09/28 04:02:30 syscalls: 2215 2022/09/28 04:02:30 code coverage: enabled 2022/09/28 04:02:30 comparison tracing: enabled 2022/09/28 04:02:30 extra coverage: enabled 2022/09/28 04:02:30 setuid sandbox: enabled 2022/09/28 04:02:30 namespace sandbox: enabled 2022/09/28 04:02:30 Android sandbox: enabled 2022/09/28 04:02:30 fault injection: enabled 2022/09/28 04:02:30 leak checking: enabled 2022/09/28 04:02:30 net packet injection: enabled 2022/09/28 04:02:30 net device setup: enabled 2022/09/28 04:02:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 04:02:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 04:02:30 USB emulation: enabled 2022/09/28 04:02:30 hci packet injection: enabled 2022/09/28 04:02:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 04:02:30 802.15.4 emulation: enabled 2022/09/28 04:02:30 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/28 04:02:30 fetching corpus: 50, signal 33427/36826 (executing program) 2022/09/28 04:02:30 fetching corpus: 100, signal 42016/46881 (executing program) 2022/09/28 04:02:30 fetching corpus: 150, signal 47855/54104 (executing program) 2022/09/28 04:02:30 fetching corpus: 200, signal 56552/63923 (executing program) 2022/09/28 04:02:30 fetching corpus: 250, signal 63577/71989 (executing program) 2022/09/28 04:02:30 fetching corpus: 300, signal 66536/76095 (executing program) 2022/09/28 04:02:30 fetching corpus: 350, signal 71171/81746 (executing program) 2022/09/28 04:02:31 fetching corpus: 400, signal 75378/86965 (executing program) 2022/09/28 04:02:31 fetching corpus: 450, signal 78436/91006 (executing program) 2022/09/28 04:02:31 fetching corpus: 500, signal 84011/97201 (executing program) 2022/09/28 04:02:31 fetching corpus: 550, signal 87071/101130 (executing program) 2022/09/28 04:02:31 fetching corpus: 600, signal 90058/104958 (executing program) 2022/09/28 04:02:31 fetching corpus: 650, signal 91889/107664 (executing program) 2022/09/28 04:02:31 fetching corpus: 700, signal 94903/111400 (executing program) 2022/09/28 04:02:31 fetching corpus: 750, signal 97552/114754 (executing program) 2022/09/28 04:02:31 fetching corpus: 800, signal 99817/117752 (executing program) 2022/09/28 04:02:32 fetching corpus: 850, signal 102264/120823 (executing program) 2022/09/28 04:02:32 fetching corpus: 900, signal 104701/123806 (executing program) 2022/09/28 04:02:32 fetching corpus: 950, signal 106485/126197 (executing program) 2022/09/28 04:02:32 fetching corpus: 1000, signal 108656/128980 (executing program) 2022/09/28 04:02:32 fetching corpus: 1050, signal 110700/131533 (executing program) 2022/09/28 04:02:32 fetching corpus: 1100, signal 112874/134151 (executing program) 2022/09/28 04:02:32 fetching corpus: 1150, signal 114373/136247 (executing program) 2022/09/28 04:02:32 fetching corpus: 1200, signal 115672/138150 (executing program) 2022/09/28 04:02:33 fetching corpus: 1250, signal 117106/140113 (executing program) 2022/09/28 04:02:33 fetching corpus: 1300, signal 118301/141870 (executing program) 2022/09/28 04:02:33 fetching corpus: 1350, signal 120778/144565 (executing program) 2022/09/28 04:02:33 fetching corpus: 1400, signal 121864/146190 (executing program) 2022/09/28 04:02:33 fetching corpus: 1450, signal 123254/148042 (executing program) 2022/09/28 04:02:33 fetching corpus: 1500, signal 125400/150410 (executing program) 2022/09/28 04:02:33 fetching corpus: 1550, signal 126723/152150 (executing program) 2022/09/28 04:02:33 fetching corpus: 1600, signal 128596/154205 (executing program) 2022/09/28 04:02:34 fetching corpus: 1650, signal 129690/155702 (executing program) 2022/09/28 04:02:34 fetching corpus: 1700, signal 133435/158910 (executing program) 2022/09/28 04:02:34 fetching corpus: 1750, signal 135081/160749 (executing program) 2022/09/28 04:02:34 fetching corpus: 1800, signal 136698/162476 (executing program) 2022/09/28 04:02:34 fetching corpus: 1850, signal 138417/164261 (executing program) 2022/09/28 04:02:34 fetching corpus: 1900, signal 139636/165691 (executing program) 2022/09/28 04:02:34 fetching corpus: 1950, signal 141124/167317 (executing program) 2022/09/28 04:02:34 fetching corpus: 2000, signal 142303/168689 (executing program) 2022/09/28 04:02:35 fetching corpus: 2050, signal 144063/170447 (executing program) 2022/09/28 04:02:35 fetching corpus: 2100, signal 144855/171505 (executing program) 2022/09/28 04:02:35 fetching corpus: 2150, signal 147018/173418 (executing program) 2022/09/28 04:02:35 fetching corpus: 2200, signal 147806/174486 (executing program) 2022/09/28 04:02:35 fetching corpus: 2250, signal 148940/175712 (executing program) 2022/09/28 04:02:35 fetching corpus: 2300, signal 150097/176904 (executing program) 2022/09/28 04:02:35 fetching corpus: 2350, signal 151097/178016 (executing program) 2022/09/28 04:02:35 fetching corpus: 2400, signal 152419/179273 (executing program) 2022/09/28 04:02:36 fetching corpus: 2450, signal 153696/180515 (executing program) 2022/09/28 04:02:36 fetching corpus: 2500, signal 154794/181611 (executing program) 2022/09/28 04:02:36 fetching corpus: 2550, signal 156391/182956 (executing program) 2022/09/28 04:02:36 fetching corpus: 2600, signal 157946/184202 (executing program) 2022/09/28 04:02:36 fetching corpus: 2650, signal 159246/185334 (executing program) 2022/09/28 04:02:36 fetching corpus: 2700, signal 160882/186563 (executing program) 2022/09/28 04:02:36 fetching corpus: 2750, signal 162063/187617 (executing program) 2022/09/28 04:02:37 fetching corpus: 2800, signal 163484/188716 (executing program) 2022/09/28 04:02:37 fetching corpus: 2850, signal 164436/189594 (executing program) 2022/09/28 04:02:37 fetching corpus: 2900, signal 165637/190515 (executing program) 2022/09/28 04:02:37 fetching corpus: 2950, signal 167019/191481 (executing program) 2022/09/28 04:02:37 fetching corpus: 3000, signal 167523/192095 (executing program) 2022/09/28 04:02:37 fetching corpus: 3050, signal 168397/192909 (executing program) 2022/09/28 04:02:37 fetching corpus: 3100, signal 169045/193546 (executing program) 2022/09/28 04:02:37 fetching corpus: 3150, signal 170045/194292 (executing program) 2022/09/28 04:02:37 fetching corpus: 3200, signal 171001/195000 (executing program) 2022/09/28 04:02:38 fetching corpus: 3250, signal 171760/195655 (executing program) 2022/09/28 04:02:38 fetching corpus: 3300, signal 172412/196291 (executing program) 2022/09/28 04:02:38 fetching corpus: 3350, signal 173093/196877 (executing program) 2022/09/28 04:02:38 fetching corpus: 3400, signal 173747/197417 (executing program) 2022/09/28 04:02:38 fetching corpus: 3450, signal 174249/197927 (executing program) 2022/09/28 04:02:38 fetching corpus: 3500, signal 174997/198539 (executing program) 2022/09/28 04:02:38 fetching corpus: 3550, signal 175846/199110 (executing program) 2022/09/28 04:02:38 fetching corpus: 3600, signal 176729/199705 (executing program) 2022/09/28 04:02:39 fetching corpus: 3650, signal 177540/200389 (executing program) 2022/09/28 04:02:39 fetching corpus: 3700, signal 178192/200897 (executing program) 2022/09/28 04:02:39 fetching corpus: 3750, signal 178913/201382 (executing program) 2022/09/28 04:02:39 fetching corpus: 3800, signal 179553/201901 (executing program) 2022/09/28 04:02:39 fetching corpus: 3850, signal 180475/202439 (executing program) 2022/09/28 04:02:39 fetching corpus: 3900, signal 181059/202940 (executing program) 2022/09/28 04:02:39 fetching corpus: 3950, signal 181407/203283 (executing program) 2022/09/28 04:02:39 fetching corpus: 4000, signal 182024/203685 (executing program) 2022/09/28 04:02:39 fetching corpus: 4050, signal 182752/204119 (executing program) 2022/09/28 04:02:40 fetching corpus: 4100, signal 183344/204487 (executing program) 2022/09/28 04:02:40 fetching corpus: 4150, signal 184207/204902 (executing program) 2022/09/28 04:02:40 fetching corpus: 4200, signal 184954/205303 (executing program) 2022/09/28 04:02:40 fetching corpus: 4250, signal 185664/205676 (executing program) 2022/09/28 04:02:40 fetching corpus: 4300, signal 186181/205996 (executing program) 2022/09/28 04:02:40 fetching corpus: 4350, signal 187118/206373 (executing program) 2022/09/28 04:02:40 fetching corpus: 4400, signal 188162/206749 (executing program) 2022/09/28 04:02:40 fetching corpus: 4450, signal 188899/207055 (executing program) 2022/09/28 04:02:41 fetching corpus: 4500, signal 189518/207307 (executing program) 2022/09/28 04:02:41 fetching corpus: 4550, signal 190319/207601 (executing program) 2022/09/28 04:02:41 fetching corpus: 4600, signal 191609/207919 (executing program) 2022/09/28 04:02:41 fetching corpus: 4650, signal 193127/208205 (executing program) 2022/09/28 04:02:41 fetching corpus: 4700, signal 193818/208398 (executing program) 2022/09/28 04:02:41 fetching corpus: 4750, signal 194598/208606 (executing program) 2022/09/28 04:02:41 fetching corpus: 4800, signal 194953/208813 (executing program) 2022/09/28 04:02:41 fetching corpus: 4850, signal 195702/209008 (executing program) 2022/09/28 04:02:42 fetching corpus: 4900, signal 196294/209161 (executing program) 2022/09/28 04:02:42 fetching corpus: 4950, signal 196618/209318 (executing program) 2022/09/28 04:02:42 fetching corpus: 5000, signal 197752/209483 (executing program) 2022/09/28 04:02:42 fetching corpus: 5050, signal 198857/209604 (executing program) 2022/09/28 04:02:42 fetching corpus: 5100, signal 199491/209679 (executing program) 2022/09/28 04:02:42 fetching corpus: 5150, signal 200819/209684 (executing program) 2022/09/28 04:02:42 fetching corpus: 5200, signal 202022/209697 (executing program) 2022/09/28 04:02:43 fetching corpus: 5250, signal 203069/209699 (executing program) 2022/09/28 04:02:43 fetching corpus: 5300, signal 203485/209713 (executing program) 2022/09/28 04:02:43 fetching corpus: 5335, signal 203756/209713 (executing program) 2022/09/28 04:02:43 fetching corpus: 5335, signal 203756/209713 (executing program) 2022/09/28 04:02:45 starting 8 fuzzer processes 04:02:45 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffc) 04:02:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000840)=@caif, 0x80, 0x0, 0x0, &(0x7f00000009c0)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 04:02:45 executing program 1: getrusage(0x1, &(0x7f0000000000)) 04:02:45 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x2080, 0x0) io_cancel(0x0, 0x0, 0x0) 04:02:45 executing program 7: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 04:02:45 executing program 4: syz_io_uring_setup(0x5bf3, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6260, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) 04:02:45 executing program 5: syz_emit_ethernet(0xfe, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0xc8, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}, {0x1, 0x1, "bab165646f81"}]}}}}}}, 0x0) [ 64.774143] audit: type=1400 audit(1664337765.252:6): avc: denied { execmem } for pid=288 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:02:45 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) [ 66.031343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.033472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.035332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.040220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.041880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.043008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.047666] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.080880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.082233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.084463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.086693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.089803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.090794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.093698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.095382] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.097643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.099926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.100916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.101929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.103444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.106208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.107699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.108674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.112534] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.114515] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.115431] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.118950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.120550] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.121460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.132241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.135470] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.136694] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.138604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.140213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.144347] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.167961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.169268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.170926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.184053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.188991] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.190097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.191954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.193655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.194719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.196880] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.205623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.207612] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.209090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.219529] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.294257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.301321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.303895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.311609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.316996] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.319383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.335344] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.104969] Bluetooth: hci0: command 0x0409 tx timeout [ 68.168153] Bluetooth: hci4: command 0x0409 tx timeout [ 68.168255] Bluetooth: hci7: command 0x0409 tx timeout [ 68.169352] Bluetooth: hci6: command 0x0409 tx timeout [ 68.170335] Bluetooth: hci3: command 0x0409 tx timeout [ 68.231536] Bluetooth: hci5: command 0x0409 tx timeout [ 68.231798] Bluetooth: hci1: command 0x0409 tx timeout [ 68.359584] Bluetooth: hci2: command 0x0409 tx timeout [ 70.151468] Bluetooth: hci0: command 0x041b tx timeout [ 70.215504] Bluetooth: hci3: command 0x041b tx timeout [ 70.215540] Bluetooth: hci6: command 0x041b tx timeout [ 70.215893] Bluetooth: hci7: command 0x041b tx timeout [ 70.216328] Bluetooth: hci4: command 0x041b tx timeout [ 70.279584] Bluetooth: hci5: command 0x041b tx timeout [ 70.279608] Bluetooth: hci1: command 0x041b tx timeout [ 70.408481] Bluetooth: hci2: command 0x041b tx timeout [ 72.200529] Bluetooth: hci0: command 0x040f tx timeout [ 72.263636] Bluetooth: hci7: command 0x040f tx timeout [ 72.264479] Bluetooth: hci4: command 0x040f tx timeout [ 72.265201] Bluetooth: hci6: command 0x040f tx timeout [ 72.265963] Bluetooth: hci3: command 0x040f tx timeout [ 72.327682] Bluetooth: hci5: command 0x040f tx timeout [ 72.328504] Bluetooth: hci1: command 0x040f tx timeout [ 72.455505] Bluetooth: hci2: command 0x040f tx timeout [ 74.247458] Bluetooth: hci0: command 0x0419 tx timeout [ 74.311492] Bluetooth: hci3: command 0x0419 tx timeout [ 74.311957] Bluetooth: hci6: command 0x0419 tx timeout [ 74.312343] Bluetooth: hci4: command 0x0419 tx timeout [ 74.312796] Bluetooth: hci7: command 0x0419 tx timeout [ 74.375471] Bluetooth: hci1: command 0x0419 tx timeout [ 74.375944] Bluetooth: hci5: command 0x0419 tx timeout [ 74.503480] Bluetooth: hci2: command 0x0419 tx timeout 04:03:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 04:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 04:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) [ 121.137201] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 04:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 04:03:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000840)=@caif, 0x80, 0x0, 0x0, &(0x7f00000009c0)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 04:03:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000840)=@caif, 0x80, 0x0, 0x0, &(0x7f00000009c0)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 04:03:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000840)=@caif, 0x80, 0x0, 0x0, &(0x7f00000009c0)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 04:03:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) [ 122.643247] audit: type=1400 audit(1664337823.122:7): avc: denied { open } for pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.644923] audit: type=1400 audit(1664337823.122:8): avc: denied { kernel } for pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.656062] ------------[ cut here ]------------ [ 122.657016] WARNING: CPU: 0 PID: 3917 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 122.658247] Modules linked in: [ 122.658683] CPU: 0 PID: 3917 Comm: modprobe Not tainted 6.0.0-rc7-next-20220927 #1 [ 122.659663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.661661] RIP: 0010:event_filter_match+0x422/0x660 [ 122.662737] Code: 00 00 00 e9 7c fc ff ff e8 bb 2e f1 ff 65 8b 2d 30 94 ad 7e 31 ff 89 ee e8 5b 2b f1 ff 85 ed 0f 84 ef 00 00 00 e8 9e 2e f1 ff <0f> 0b eb 9f e8 45 a5 23 00 e9 17 fc ff ff e8 8b 2e f1 ff 48 8d 7b [ 122.665077] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 [ 122.665800] RAX: 0000000080010001 RBX: ffff88801c358000 RCX: 0000000000000000 [ 122.666767] RDX: ffff888018525040 RSI: ffffffff8154e1a2 RDI: 0000000000000005 [ 122.667722] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 122.668677] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88801c358220 [ 122.669636] R13: 0000000000000000 R14: ffff88801c3580a8 R15: ffff88801c358220 [ 122.670601] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.671677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.672464] CR2: 00007fb4b63618e0 CR3: 000000003e7ba000 CR4: 0000000000350ef0 [ 122.673434] Call Trace: [ 122.673799] [ 122.674117] merge_sched_in+0x107/0x1110 [ 122.674689] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 122.675509] ? merge_sched_in+0x1110/0x1110 [ 122.676096] ? lock_is_held_type+0xd7/0x130 [ 122.676704] ctx_sched_in+0x2e6/0x770 [ 122.677226] ? lock_acquire+0x1b2/0x530 [ 122.677796] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 122.678638] ? lock_is_held_type+0xd7/0x130 [ 122.679241] perf_event_sched_in+0x75/0x80 [ 122.679820] ctx_resched+0x1ce/0x390 [ 122.680347] __perf_install_in_context+0x285/0x9c0 [ 122.681030] ? ctx_resched+0x390/0x390 [ 122.681572] remote_function+0x125/0x1b0 [ 122.682159] __flush_smp_call_function_queue+0x1df/0x5a0 [ 122.682898] ? perf_duration_warn+0x40/0x40 [ 122.683487] __sysvec_call_function_single+0x92/0x3a0 [ 122.684174] sysvec_call_function_single+0x89/0xc0 [ 122.684835] [ 122.685141] [ 122.685451] asm_sysvec_call_function_single+0x16/0x20 [ 122.686152] RIP: 0010:lock_acquire+0x1db/0x530 [ 122.686774] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 122.689114] RSP: 0018:ffff88803e97f860 EFLAGS: 00000206 [ 122.689828] RAX: dffffc0000000000 RBX: 1ffff11007d2ff0e RCX: 00000000b406faae [ 122.690752] RDX: 1ffff110030a4b36 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.691683] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7 [ 122.692641] R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002 [ 122.693588] R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000 [ 122.694590] ? lock_release+0x750/0x750 [ 122.695149] ? __is_insn_slot_addr+0x122/0x250 [ 122.695790] ? lock_downgrade+0x6d0/0x6d0 [ 122.696367] ? vm_mmap_pgoff+0x1af/0x270 [ 122.696935] ? unwind_next_frame+0xe06/0x20b0 [ 122.697556] ? arch_stack_walk+0x5f/0xf0 [ 122.698126] __is_insn_slot_addr+0x3d/0x250 [ 122.698701] ? __free_insn_slot+0x520/0x520 [ 122.699283] kernel_text_address+0x57/0xb0 [ 122.699848] __kernel_text_address+0x9/0x40 [ 122.700422] unwind_get_return_address+0x55/0xa0 [ 122.701065] ? write_profile+0x3a0/0x3a0 [ 122.701616] arch_stack_walk+0x99/0xf0 [ 122.702195] stack_trace_save+0x8c/0xc0 [ 122.702739] ? filter_irq_stacks+0x90/0x90 [ 122.703317] ? lockdep_init_map_type+0x21a/0x7e0 [ 122.703975] ? __raw_spin_lock_init+0x36/0x110 [ 122.704608] __create_object+0x389/0xc10 [ 122.705164] ? kasan_set_track+0x21/0x30 [ 122.705729] kmem_cache_alloc_bulk+0x414/0x7d0 [ 122.706372] mas_alloc_nodes+0x2ff/0x800 [ 122.706935] mas_preallocate+0x1bb/0x360 [ 122.707496] mmap_region+0x774/0x1a00 [ 122.708041] ? do_munmap+0x100/0x100 [ 122.708566] ? security_mmap_addr+0x79/0xa0 [ 122.709161] ? get_unmapped_area+0x1e5/0x3e0 [ 122.709773] do_mmap+0x828/0xf40 [ 122.710282] vm_mmap_pgoff+0x1af/0x270 [ 122.710826] ? randomize_page+0xb0/0xb0 [ 122.711395] ksys_mmap_pgoff+0x3d0/0x4f0 [ 122.711970] do_syscall_64+0x3b/0x90 [ 122.712480] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.713182] RIP: 0033:0x7fb4b6665d82 [ 122.713686] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00 [ 122.716077] RSP: 002b:00007ffd165b40b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.717084] RAX: ffffffffffffffda RBX: 0000000000000802 RCX: 00007fb4b6665d82 [ 122.718029] RDX: 0000000000000001 RSI: 00000000001c4508 RDI: 0000000000000000 [ 122.718971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.719917] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fb4b6644a20 [ 122.720861] R13: 00007ffd165b40d0 R14: 0000000000000000 R15: 00007ffd165b44f0 [ 122.721849] [ 122.722175] irq event stamp: 6456 [ 122.722641] hardirqs last enabled at (6455): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 122.723885] hardirqs last disabled at (6456): [] sysvec_call_function_single+0xb/0xc0 [ 122.725110] softirqs last enabled at (6298): [] __irq_exit_rcu+0x11b/0x180 [ 122.726247] softirqs last disabled at (5905): [] __irq_exit_rcu+0x11b/0x180 [ 122.727386] ---[ end trace 0000000000000000 ]--- [ 122.728066] ------------[ cut here ]------------ [ 122.728699] WARNING: CPU: 0 PID: 3917 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 122.729857] Modules linked in: [ 122.730301] CPU: 0 PID: 3917 Comm: modprobe Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 122.731488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.732969] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 122.733628] Code: ff ff e8 e8 08 ef ff 65 8b 05 5d 6e ab 7e 31 ff 89 c6 89 04 24 e8 85 05 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 c5 08 ef ff <0f> 0b e9 c4 fb ff ff e8 b9 08 ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 122.736028] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 [ 122.736754] RAX: 0000000080010001 RBX: ffff88806ce3d140 RCX: 0000000000000000 [ 122.737714] RDX: ffff888018525040 RSI: ffffffff8157077b RDI: 0000000000000005 [ 122.738692] RBP: ffff88801c358000 R08: 0000000000000005 R09: 0000000000000001 [ 122.739658] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140 [ 122.740624] R13: ffff88806ce00000 R14: ffff88801c3580a8 R15: ffff88801c358220 [ 122.741593] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.742685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.743474] CR2: 00007fb4b63618e0 CR3: 000000003e7ba000 CR4: 0000000000350ef0 [ 122.744438] Call Trace: [ 122.744799] [ 122.745121] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 122.745961] ? merge_sched_in+0x1110/0x1110 [ 122.746558] ? lock_is_held_type+0xd7/0x130 [ 122.747176] ctx_sched_in+0x2e6/0x770 [ 122.747712] ? lock_acquire+0x1b2/0x530 [ 122.748275] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 122.749102] ? lock_is_held_type+0xd7/0x130 [ 122.749717] perf_event_sched_in+0x75/0x80 [ 122.750327] ctx_resched+0x1ce/0x390 [ 122.750850] __perf_install_in_context+0x285/0x9c0 [ 122.751531] ? ctx_resched+0x390/0x390 [ 122.752079] remote_function+0x125/0x1b0 [ 122.752648] __flush_smp_call_function_queue+0x1df/0x5a0 [ 122.753380] ? perf_duration_warn+0x40/0x40 [ 122.753993] __sysvec_call_function_single+0x92/0x3a0 [ 122.754706] sysvec_call_function_single+0x89/0xc0 [ 122.755378] [ 122.755693] [ 122.756011] asm_sysvec_call_function_single+0x16/0x20 [ 122.756721] RIP: 0010:lock_acquire+0x1db/0x530 [ 122.757353] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 122.759756] RSP: 0018:ffff88803e97f860 EFLAGS: 00000206 [ 122.760477] RAX: dffffc0000000000 RBX: 1ffff11007d2ff0e RCX: 00000000b406faae [ 122.761432] RDX: 1ffff110030a4b36 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.762398] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7 [ 122.763355] R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002 [ 122.764312] R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000 [ 122.765295] ? lock_release+0x750/0x750 [ 122.765860] ? __is_insn_slot_addr+0x122/0x250 [ 122.766493] ? lock_downgrade+0x6d0/0x6d0 [ 122.767072] ? vm_mmap_pgoff+0x1af/0x270 [ 122.767637] ? unwind_next_frame+0xe06/0x20b0 [ 122.768261] ? arch_stack_walk+0x5f/0xf0 [ 122.768835] __is_insn_slot_addr+0x3d/0x250 [ 122.769421] ? __free_insn_slot+0x520/0x520 [ 122.770022] kernel_text_address+0x57/0xb0 [ 122.770607] __kernel_text_address+0x9/0x40 [ 122.771196] unwind_get_return_address+0x55/0xa0 [ 122.771847] ? write_profile+0x3a0/0x3a0 [ 122.772410] arch_stack_walk+0x99/0xf0 [ 122.772980] stack_trace_save+0x8c/0xc0 [ 122.773529] ? filter_irq_stacks+0x90/0x90 [ 122.774124] ? lockdep_init_map_type+0x21a/0x7e0 [ 122.774798] ? __raw_spin_lock_init+0x36/0x110 [ 122.775437] __create_object+0x389/0xc10 [ 122.775996] ? kasan_set_track+0x21/0x30 [ 122.776563] kmem_cache_alloc_bulk+0x414/0x7d0 [ 122.777209] mas_alloc_nodes+0x2ff/0x800 [ 122.777784] mas_preallocate+0x1bb/0x360 [ 122.778356] mmap_region+0x774/0x1a00 [ 122.778905] ? do_munmap+0x100/0x100 [ 122.779441] ? security_mmap_addr+0x79/0xa0 [ 122.780035] ? get_unmapped_area+0x1e5/0x3e0 [ 122.780652] do_mmap+0x828/0xf40 [ 122.781145] vm_mmap_pgoff+0x1af/0x270 [ 122.781688] ? randomize_page+0xb0/0xb0 [ 122.782278] ksys_mmap_pgoff+0x3d0/0x4f0 [ 122.782851] do_syscall_64+0x3b/0x90 [ 122.783367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.784066] RIP: 0033:0x7fb4b6665d82 [ 122.784572] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00 [ 122.786946] RSP: 002b:00007ffd165b40b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.787925] RAX: ffffffffffffffda RBX: 0000000000000802 RCX: 00007fb4b6665d82 [ 122.788847] RDX: 0000000000000001 RSI: 00000000001c4508 RDI: 0000000000000000 [ 122.789766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.790713] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fb4b6644a20 [ 122.791665] R13: 00007ffd165b40d0 R14: 0000000000000000 R15: 00007ffd165b44f0 [ 122.792649] [ 122.792974] irq event stamp: 6456 [ 122.793440] hardirqs last enabled at (6455): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 122.794702] hardirqs last disabled at (6456): [] sysvec_call_function_single+0xb/0xc0 [ 122.795954] softirqs last enabled at (6298): [] __irq_exit_rcu+0x11b/0x180 [ 122.797101] softirqs last disabled at (5905): [] __irq_exit_rcu+0x11b/0x180 [ 122.798265] ---[ end trace 0000000000000000 ]--- [ 122.878347] ------------[ cut here ]------------ [ 122.879067] WARNING: CPU: 0 PID: 3923 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 122.880229] Modules linked in: [ 122.880662] CPU: 0 PID: 3923 Comm: kworker/u4:3 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 122.881871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.883315] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 122.883987] Code: 85 d5 f8 ff ff e8 92 49 ee ff 65 44 8b 25 06 af aa 7e 31 ff 44 89 e6 e8 30 46 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 72 49 ee ff <0f> 0b e9 a9 f8 ff ff e8 66 49 ee ff 65 8b 1d db ae aa 7e 31 ff 89 [ 122.886333] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 122.887046] RAX: 0000000080010002 RBX: ffff88801c358000 RCX: 0000000000000000 [ 122.887980] RDX: ffff88802040d040 RSI: ffffffff8157c6ce RDI: 0000000000000005 [ 122.888908] RBP: ffff88801c358000 R08: 0000000000000005 R09: 0000000000000001 [ 122.889854] R10: 0000000000000000 R11: ffffffff865b401b R12: 0000000000000000 [ 122.890797] R13: ffff88801c358090 R14: ffff88806ce3d140 R15: ffff88801c358000 [ 122.891724] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.892763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.893512] CR2: 00007fbddc4a4c48 CR3: 000000000ec20000 CR4: 0000000000350ef0 [ 122.894450] Call Trace: [ 122.894801] [ 122.895102] ? perf_event_idx_default+0x10/0x10 [ 122.895729] ? event_sched_out+0x71c/0xcd0 [ 122.896311] __perf_remove_from_context+0x71e/0xb20 [ 122.896998] event_function+0x297/0x3d0 [ 122.897543] ? perf_output_sample_regs+0x150/0x150 [ 122.898242] remote_function+0x125/0x1b0 [ 122.898806] __flush_smp_call_function_queue+0x1df/0x5a0 [ 122.899545] ? perf_duration_warn+0x40/0x40 [ 122.900138] __sysvec_call_function_single+0x92/0x3a0 [ 122.900843] sysvec_call_function_single+0x89/0xc0 [ 122.901509] [ 122.901824] [ 122.902139] asm_sysvec_call_function_single+0x16/0x20 [ 122.902840] RIP: 0010:___slab_alloc+0x1d4/0x1080 [ 122.903486] Code: 75 28 0f 85 22 04 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 82 09 78 81 4c 89 ef e8 77 12 b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 122.905843] RSP: 0018:ffff88801873f990 EFLAGS: 00000202 [ 122.906550] RAX: 00000000000000df RBX: ffff88806ce3c300 RCX: ffffffff81297e7f [ 122.907483] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 122.908416] RBP: ffff888007c4f780 R08: 0000000000000001 R09: ffffffff86cd381f [ 122.909359] R10: fffffbfff0d9a703 R11: 0000000000000001 R12: 00000000ffffffff [ 122.910312] R13: ffff88806ce3c320 R14: ffff88802040d040 R15: 0000000000000000 [ 122.911258] ? mark_lock.part.0+0xef/0x2f70 [ 122.911861] ? __create_object+0x3d/0xc10 [ 122.912428] ? lock_release+0x3b2/0x750 [ 122.913007] ? __create_object+0x3d/0xc10 [ 122.913564] __slab_alloc.constprop.0+0x4d/0x90 [ 122.914204] ? __create_object+0x3d/0xc10 [ 122.914762] kmem_cache_alloc+0x2ed/0x3e0 [ 122.915338] __create_object+0x3d/0xc10 [ 122.915880] ? kasan_unpoison+0x23/0x50 [ 122.916427] __kmem_cache_alloc_node+0x22f/0x3d0 [ 122.917084] __kmalloc+0x39/0xb0 [ 122.917555] load_elf_phdrs+0x103/0x210 [ 122.918104] ? set_brk+0x180/0x180 [ 122.918598] ? kernel_read+0xc7/0x1c0 [ 122.919134] load_elf_binary+0x178b/0x4ef0 [ 122.919719] ? lock_is_held_type+0xd7/0x130 [ 122.920309] ? find_held_lock+0x2c/0x110 [ 122.920875] ? lock_release+0x3b2/0x750 [ 122.921425] ? bprm_execve+0x7d4/0x1920 [ 122.921976] ? elf_map+0x2b0/0x2b0 [ 122.922464] ? do_raw_read_unlock+0x3b/0x70 [ 122.923056] ? _raw_read_unlock+0x24/0x40 [ 122.923613] ? load_misc_binary+0x666/0xb40 [ 122.924209] bprm_execve+0x7f5/0x1920 [ 122.924753] ? open_exec+0x70/0x70 [ 122.925267] ? copy_strings_kernel+0x151/0x190 [ 122.925924] kernel_execve+0x3ea/0x500 [ 122.926479] call_usermodehelper_exec_async+0x2e6/0x580 [ 122.927201] ? umh_complete+0x90/0x90 [ 122.927726] ret_from_fork+0x22/0x30 [ 122.928264] [ 122.928587] irq event stamp: 224 [ 122.929038] hardirqs last enabled at (223): [] ___slab_alloc+0x32c/0x1080 [ 122.930153] hardirqs last disabled at (224): [] sysvec_call_function_single+0xb/0xc0 [ 122.931369] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 122.932459] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 122.933282] ---[ end trace 0000000000000000 ]--- [ 122.933973] ------------[ cut here ]------------ [ 122.934597] WARNING: CPU: 0 PID: 3923 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 122.935763] Modules linked in: [ 122.936201] CPU: 0 PID: 3923 Comm: kworker/u4:3 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 122.937425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.938910] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 122.939603] Code: ff 0f 0b e9 a9 f8 ff ff e8 66 49 ee ff 65 8b 1d db ae aa 7e 31 ff 89 de e8 06 46 ee ff 85 db 0f 84 86 04 00 00 e8 49 49 ee ff <0f> 0b e9 0e fa ff ff e8 3d 49 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 122.941963] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 122.942673] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.943607] RDX: ffff88802040d040 RSI: ffffffff8157c6f7 RDI: 0000000000000005 [ 122.944535] RBP: ffff88801c358000 R08: 0000000000000005 R09: 0000000000000001 [ 122.945452] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88801c358000 [ 122.946393] R13: ffff88801c358000 R14: ffff88806ce3d140 R15: ffff88801c358000 [ 122.947319] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.948397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.949178] CR2: 00007fbddc4a4c48 CR3: 000000000ec20000 CR4: 0000000000350ef0 [ 122.950132] Call Trace: [ 122.950486] [ 122.950789] ? perf_event_idx_default+0x10/0x10 [ 122.951431] ? event_sched_out+0x71c/0xcd0 [ 122.952012] __perf_remove_from_context+0x71e/0xb20 [ 122.952704] event_function+0x297/0x3d0 [ 122.953256] ? perf_output_sample_regs+0x150/0x150 [ 122.953948] remote_function+0x125/0x1b0 [ 122.954516] __flush_smp_call_function_queue+0x1df/0x5a0 [ 122.955260] ? perf_duration_warn+0x40/0x40 [ 122.955863] __sysvec_call_function_single+0x92/0x3a0 [ 122.956570] sysvec_call_function_single+0x89/0xc0 [ 122.957241] [ 122.957555] [ 122.957880] asm_sysvec_call_function_single+0x16/0x20 [ 122.958599] RIP: 0010:___slab_alloc+0x1d4/0x1080 [ 122.959248] Code: 75 28 0f 85 22 04 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 82 09 78 81 4c 89 ef e8 77 12 b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 122.961643] RSP: 0018:ffff88801873f990 EFLAGS: 00000202 [ 122.962362] RAX: 00000000000000df RBX: ffff88806ce3c300 RCX: ffffffff81297e7f [ 122.963307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 122.964253] RBP: ffff888007c4f780 R08: 0000000000000001 R09: ffffffff86cd381f [ 122.965197] R10: fffffbfff0d9a703 R11: 0000000000000001 R12: 00000000ffffffff [ 122.966166] R13: ffff88806ce3c320 R14: ffff88802040d040 R15: 0000000000000000 [ 122.967138] ? mark_lock.part.0+0xef/0x2f70 [ 122.967762] ? __create_object+0x3d/0xc10 [ 122.968326] ? lock_release+0x3b2/0x750 [ 122.968880] ? __create_object+0x3d/0xc10 [ 122.969429] __slab_alloc.constprop.0+0x4d/0x90 [ 122.970062] ? __create_object+0x3d/0xc10 [ 122.970633] kmem_cache_alloc+0x2ed/0x3e0 [ 122.971209] __create_object+0x3d/0xc10 [ 122.971758] ? kasan_unpoison+0x23/0x50 [ 122.972304] __kmem_cache_alloc_node+0x22f/0x3d0 [ 122.972969] __kmalloc+0x39/0xb0 [ 122.973447] load_elf_phdrs+0x103/0x210 [ 122.974011] ? set_brk+0x180/0x180 [ 122.974515] ? kernel_read+0xc7/0x1c0 [ 122.975060] load_elf_binary+0x178b/0x4ef0 [ 122.975660] ? lock_is_held_type+0xd7/0x130 [ 122.976254] ? find_held_lock+0x2c/0x110 [ 122.976824] ? lock_release+0x3b2/0x750 [ 122.977381] ? bprm_execve+0x7d4/0x1920 [ 122.977952] ? elf_map+0x2b0/0x2b0 [ 122.978447] ? do_raw_read_unlock+0x3b/0x70 [ 122.979050] ? _raw_read_unlock+0x24/0x40 [ 122.979612] ? load_misc_binary+0x666/0xb40 [ 122.980202] bprm_execve+0x7f5/0x1920 [ 122.980750] ? open_exec+0x70/0x70 [ 122.981255] ? copy_strings_kernel+0x151/0x190 [ 122.981896] kernel_execve+0x3ea/0x500 [ 122.982449] call_usermodehelper_exec_async+0x2e6/0x580 [ 122.983169] ? umh_complete+0x90/0x90 [ 122.983694] ret_from_fork+0x22/0x30 [ 122.984231] [ 122.984565] irq event stamp: 224 [ 122.985019] hardirqs last enabled at (223): [] ___slab_alloc+0x32c/0x1080 [ 122.986166] hardirqs last disabled at (224): [] sysvec_call_function_single+0xb/0xc0 [ 122.987393] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 122.988489] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 122.989324] ---[ end trace 0000000000000000 ]--- [ 122.990014] ------------[ cut here ]------------ [ 122.990644] WARNING: CPU: 0 PID: 3923 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 122.991941] Modules linked in: [ 122.992368] CPU: 0 PID: 3923 Comm: kworker/u4:3 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 122.993554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.995017] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 122.995817] Code: 5e 41 5f e9 4d eb f0 ff e8 48 eb f0 ff 65 8b 1d bd 50 ad 7e 31 ff 89 de e8 e8 e7 f0 ff 85 db 0f 84 d3 02 00 00 e8 2b eb f0 ff <0f> 0b eb 97 e8 22 eb f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 122.998123] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 [ 122.998807] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.999720] RDX: ffff88802040d040 RSI: ffffffff81552515 RDI: 0000000000000005 [ 123.000629] RBP: ffff88801c358000 R08: 0000000000000005 R09: 0000000000000001 [ 123.001544] R10: 0000000000000000 R11: ffffffff865b401b R12: 0000000000000000 [ 123.002471] R13: ffff88801c3580a8 R14: 0000000000000001 R15: 0000000000000001 [ 123.003423] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 123.004489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.005262] CR2: 00007fbddc4a4c48 CR3: 000000000ec20000 CR4: 0000000000350ef0 [ 123.006221] Call Trace: [ 123.006576] [ 123.006878] ? lock_is_held_type+0xd7/0x130 [ 123.007459] ? perf_event_update_time+0x285/0x380 [ 123.008121] list_del_event+0x524/0x860 [ 123.008680] __perf_remove_from_context+0xd2/0xb20 [ 123.009352] event_function+0x297/0x3d0 [ 123.009913] ? perf_output_sample_regs+0x150/0x150 [ 123.010583] remote_function+0x125/0x1b0 [ 123.011142] __flush_smp_call_function_queue+0x1df/0x5a0 [ 123.011866] ? perf_duration_warn+0x40/0x40 [ 123.012462] __sysvec_call_function_single+0x92/0x3a0 [ 123.013164] sysvec_call_function_single+0x89/0xc0 [ 123.013845] [ 123.014162] [ 123.014480] asm_sysvec_call_function_single+0x16/0x20 [ 123.015193] RIP: 0010:___slab_alloc+0x1d4/0x1080 [ 123.015835] Code: 75 28 0f 85 22 04 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 82 09 78 81 4c 89 ef e8 77 12 b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 123.018228] RSP: 0018:ffff88801873f990 EFLAGS: 00000202 [ 123.018948] RAX: 00000000000000df RBX: ffff88806ce3c300 RCX: ffffffff81297e7f [ 123.019898] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 123.020851] RBP: ffff888007c4f780 R08: 0000000000000001 R09: ffffffff86cd381f [ 123.021813] R10: fffffbfff0d9a703 R11: 0000000000000001 R12: 00000000ffffffff [ 123.022757] R13: ffff88806ce3c320 R14: ffff88802040d040 R15: 0000000000000000 [ 123.023717] ? mark_lock.part.0+0xef/0x2f70 [ 123.024336] ? __create_object+0x3d/0xc10 [ 123.024895] ? lock_release+0x3b2/0x750 [ 123.025463] ? __create_object+0x3d/0xc10 [ 123.026044] __slab_alloc.constprop.0+0x4d/0x90 [ 123.026686] ? __create_object+0x3d/0xc10 [ 123.027249] kmem_cache_alloc+0x2ed/0x3e0 [ 123.027819] __create_object+0x3d/0xc10 [ 123.028359] ? kasan_unpoison+0x23/0x50 [ 123.028903] __kmem_cache_alloc_node+0x22f/0x3d0 [ 123.029558] __kmalloc+0x39/0xb0 [ 123.030043] load_elf_phdrs+0x103/0x210 [ 123.030582] ? set_brk+0x180/0x180 [ 123.031079] ? kernel_read+0xc7/0x1c0 [ 123.031609] load_elf_binary+0x178b/0x4ef0 [ 123.032196] ? lock_is_held_type+0xd7/0x130 [ 123.032782] ? find_held_lock+0x2c/0x110 [ 123.033341] ? lock_release+0x3b2/0x750 [ 123.033899] ? bprm_execve+0x7d4/0x1920 [ 123.034444] ? elf_map+0x2b0/0x2b0 [ 123.034930] ? do_raw_read_unlock+0x3b/0x70 [ 123.035516] ? _raw_read_unlock+0x24/0x40 [ 123.036075] ? load_misc_binary+0x666/0xb40 [ 123.036675] bprm_execve+0x7f5/0x1920 [ 123.037210] ? open_exec+0x70/0x70 [ 123.037709] ? copy_strings_kernel+0x151/0x190 [ 123.038351] kernel_execve+0x3ea/0x500 [ 123.038899] call_usermodehelper_exec_async+0x2e6/0x580 [ 123.039613] ? umh_complete+0x90/0x90 [ 123.040140] ret_from_fork+0x22/0x30 [ 123.040679] [ 123.040997] irq event stamp: 224 [ 123.041446] hardirqs last enabled at (223): [] ___slab_alloc+0x32c/0x1080 [ 123.042571] hardirqs last disabled at (224): [] sysvec_call_function_single+0xb/0xc0 [ 123.043791] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 123.044869] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 123.045697] ---[ end trace 0000000000000000 ]--- [ 123.196207] audit: type=1400 audit(1664337823.675:9): avc: denied { write } for pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 04:03:44 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffc) 04:03:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lgetxattr(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=@known='security.selinux\x00', &(0x7f0000000400)=""/165, 0xa5) 04:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1b, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 04:03:44 executing program 1: getrusage(0x1, &(0x7f0000000000)) 04:03:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 04:03:44 executing program 7: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 04:03:44 executing program 6: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [ 124.404374] ------------[ cut here ]------------ [ 124.404400] [ 124.404404] ====================================================== [ 124.404408] WARNING: possible circular locking dependency detected [ 124.404413] 6.0.0-rc7-next-20220927 #1 Tainted: G W [ 124.404420] ------------------------------------------------------ [ 124.404423] syz-executor.5/3981 is trying to acquire lock: [ 124.404430] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 124.404474] [ 124.404474] but task is already holding lock: [ 124.404477] ffff88803e208c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.404506] [ 124.404506] which lock already depends on the new lock. [ 124.404506] [ 124.404509] [ 124.404509] the existing dependency chain (in reverse order) is: [ 124.404513] [ 124.404513] -> #3 (&ctx->lock){....}-{2:2}: [ 124.404526] _raw_spin_lock+0x2a/0x40 [ 124.404540] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.404553] __schedule+0xedd/0x2470 [ 124.404568] schedule+0xda/0x1b0 [ 124.404583] futex_wait_queue+0xf5/0x1e0 [ 124.404597] futex_wait+0x28e/0x690 [ 124.404607] do_futex+0x2ff/0x380 [ 124.404617] __x64_sys_futex+0x1c6/0x4d0 [ 124.404627] do_syscall_64+0x3b/0x90 [ 124.404637] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.404652] [ 124.404652] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.404665] _raw_spin_lock_nested+0x30/0x40 [ 124.404678] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.404691] task_fork_fair+0x63/0x4d0 [ 124.404708] sched_cgroup_fork+0x3d0/0x540 [ 124.404722] copy_process+0x4183/0x6e20 [ 124.404733] kernel_clone+0xe7/0x890 [ 124.404743] user_mode_thread+0xad/0xf0 [ 124.404753] rest_init+0x24/0x250 [ 124.404766] arch_call_rest_init+0xf/0x14 [ 124.404781] start_kernel+0x4c6/0x4eb [ 124.404792] secondary_startup_64_no_verify+0xe0/0xeb [ 124.404806] [ 124.404806] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.404820] _raw_spin_lock_irqsave+0x39/0x60 [ 124.404832] try_to_wake_up+0xab/0x1930 [ 124.404845] up+0x75/0xb0 [ 124.404860] __up_console_sem+0x6e/0x80 [ 124.404876] console_unlock+0x46a/0x590 [ 124.404892] do_con_write+0xc05/0x1d50 [ 124.404905] con_write+0x21/0x40 [ 124.404915] n_tty_write+0x4d4/0xfe0 [ 124.404929] file_tty_write.constprop.0+0x455/0x8a0 [ 124.404943] vfs_write+0x9c3/0xd90 [ 124.404962] ksys_write+0x127/0x250 [ 124.404970] do_syscall_64+0x3b/0x90 [ 124.404981] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.404995] [ 124.404995] -> #0 ((console_sem).lock){-...}-{2:2}: [ 124.405008] __lock_acquire+0x2a02/0x5e70 [ 124.405025] lock_acquire+0x1a2/0x530 [ 124.405041] _raw_spin_lock_irqsave+0x39/0x60 [ 124.405053] down_trylock+0xe/0x70 [ 124.405069] __down_trylock_console_sem+0x3b/0xd0 [ 124.405085] vprintk_emit+0x16b/0x560 [ 124.405101] vprintk+0x84/0xa0 [ 124.405117] _printk+0xba/0xf1 [ 124.405130] report_bug.cold+0x72/0xab [ 124.405140] handle_bug+0x3c/0x70 [ 124.405150] exc_invalid_op+0x14/0x50 [ 124.405160] asm_exc_invalid_op+0x16/0x20 [ 124.405174] group_sched_out.part.0+0x2c7/0x460 [ 124.405185] ctx_sched_out+0x8f1/0xc10 [ 124.405195] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.405208] __schedule+0xedd/0x2470 [ 124.405223] schedule+0xda/0x1b0 [ 124.405237] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.405249] syscall_exit_to_user_mode+0x19/0x40 [ 124.405264] do_syscall_64+0x48/0x90 [ 124.405274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.405288] [ 124.405288] other info that might help us debug this: [ 124.405288] [ 124.405290] Chain exists of: [ 124.405290] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.405290] [ 124.405305] Possible unsafe locking scenario: [ 124.405305] [ 124.405308] CPU0 CPU1 [ 124.405310] ---- ---- [ 124.405312] lock(&ctx->lock); [ 124.405318] lock(&rq->__lock); [ 124.405325] lock(&ctx->lock); 04:03:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x48) [ 124.405331] lock((console_sem).lock); [ 124.405337] [ 124.405337] *** DEADLOCK *** [ 124.405337] [ 124.405339] 2 locks held by syz-executor.5/3981: [ 124.405346] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.405376] #1: ffff88803e208c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.405404] [ 124.405404] stack backtrace: [ 124.405408] CPU: 1 PID: 3981 Comm: syz-executor.5 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 124.405421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.405429] Call Trace: [ 124.405433] [ 124.405437] dump_stack_lvl+0x8b/0xb3 [ 124.405449] check_noncircular+0x263/0x2e0 [ 124.405465] ? format_decode+0x26c/0xb50 [ 124.405484] ? print_circular_bug+0x450/0x450 [ 124.405501] ? enable_ptr_key_workfn+0x20/0x20 [ 124.405520] ? format_decode+0x26c/0xb50 [ 124.405538] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.405556] __lock_acquire+0x2a02/0x5e70 [ 124.405578] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.405600] lock_acquire+0x1a2/0x530 [ 124.405617] ? down_trylock+0xe/0x70 [ 124.405635] ? lock_release+0x750/0x750 [ 124.405654] ? __lock_acquire+0x164d/0x5e70 [ 124.405672] ? vprintk+0x84/0xa0 [ 124.405690] _raw_spin_lock_irqsave+0x39/0x60 [ 124.405702] ? down_trylock+0xe/0x70 [ 124.405720] down_trylock+0xe/0x70 [ 124.405737] ? vprintk+0x84/0xa0 [ 124.405754] __down_trylock_console_sem+0x3b/0xd0 [ 124.405773] vprintk_emit+0x16b/0x560 [ 124.405795] vprintk+0x84/0xa0 [ 124.405820] _printk+0xba/0xf1 [ 124.405833] ? record_print_text.cold+0x16/0x16 [ 124.405850] ? report_bug.cold+0x66/0xab [ 124.405862] ? group_sched_out.part.0+0x2c7/0x460 [ 124.405874] report_bug.cold+0x72/0xab [ 124.405886] handle_bug+0x3c/0x70 [ 124.405897] exc_invalid_op+0x14/0x50 [ 124.405908] asm_exc_invalid_op+0x16/0x20 [ 124.405923] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.405937] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.405949] RSP: 0018:ffff88803ebb7c48 EFLAGS: 00010006 [ 124.405958] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.405966] RDX: ffff88801bde1ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 124.405974] RBP: ffff88801c358b90 R08: 0000000000000005 R09: 0000000000000001 [ 124.405981] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88803e208c00 [ 124.405989] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 124.406000] ? group_sched_out.part.0+0x2c7/0x460 [ 124.406014] ? group_sched_out.part.0+0x2c7/0x460 [ 124.406027] ctx_sched_out+0x8f1/0xc10 [ 124.406040] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.406056] ? lock_is_held_type+0xd7/0x130 [ 124.406071] ? __perf_cgroup_move+0x160/0x160 [ 124.406084] ? set_next_entity+0x304/0x550 [ 124.406101] ? update_curr+0x267/0x740 [ 124.406119] ? lock_is_held_type+0xd7/0x130 [ 124.406135] __schedule+0xedd/0x2470 [ 124.406154] ? io_schedule_timeout+0x150/0x150 [ 124.406172] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.406192] schedule+0xda/0x1b0 [ 124.406209] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.406221] syscall_exit_to_user_mode+0x19/0x40 [ 124.406236] do_syscall_64+0x48/0x90 [ 124.406248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.406263] RIP: 0033:0x7ff5eac23b19 [ 124.406271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.406282] RSP: 002b:00007ff5e8199218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.406293] RAX: 0000000000000001 RBX: 00007ff5ead36f68 RCX: 00007ff5eac23b19 [ 124.406300] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5ead36f6c [ 124.406307] RBP: 00007ff5ead36f60 R08: 000000000000000e R09: 0000000000000000 [ 124.406314] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff5ead36f6c [ 124.406322] R13: 00007ffd4aea7e8f R14: 00007ff5e8199300 R15: 0000000000022000 [ 124.406335] [ 124.463710] WARNING: CPU: 1 PID: 3981 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.464397] Modules linked in: [ 124.464643] CPU: 1 PID: 3981 Comm: syz-executor.5 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 124.465346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.466188] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.466601] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.467966] RSP: 0018:ffff88803ebb7c48 EFLAGS: 00010006 [ 124.468365] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.468900] RDX: ffff88801bde1ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 124.469430] RBP: ffff88801c358b90 R08: 0000000000000005 R09: 0000000000000001 [ 124.469979] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88803e208c00 [ 124.470512] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 124.471055] FS: 00007ff5e8199700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 124.471656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.472095] CR2: 00007f8d7cea3018 CR3: 000000003e5ce000 CR4: 0000000000350ee0 [ 124.472619] Call Trace: [ 124.472815] [ 124.472988] ctx_sched_out+0x8f1/0xc10 [ 124.473288] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.473679] ? lock_is_held_type+0xd7/0x130 [ 124.474022] ? __perf_cgroup_move+0x160/0x160 [ 124.474364] ? set_next_entity+0x304/0x550 [ 124.474691] ? update_curr+0x267/0x740 [ 124.474998] ? lock_is_held_type+0xd7/0x130 [ 124.475326] __schedule+0xedd/0x2470 [ 124.475615] ? io_schedule_timeout+0x150/0x150 [ 124.475968] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.476340] schedule+0xda/0x1b0 [ 124.476606] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.476976] syscall_exit_to_user_mode+0x19/0x40 [ 124.477335] do_syscall_64+0x48/0x90 [ 124.477617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.478016] RIP: 0033:0x7ff5eac23b19 [ 124.478297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.479659] RSP: 002b:00007ff5e8199218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.480227] RAX: 0000000000000001 RBX: 00007ff5ead36f68 RCX: 00007ff5eac23b19 [ 124.480760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5ead36f6c [ 124.481293] RBP: 00007ff5ead36f60 R08: 000000000000000e R09: 0000000000000000 [ 124.481845] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff5ead36f6c [ 124.482377] R13: 00007ffd4aea7e8f R14: 00007ff5e8199300 R15: 0000000000022000 [ 124.482914] [ 124.483093] irq event stamp: 412 [ 124.483344] hardirqs last enabled at (411): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.484036] hardirqs last disabled at (412): [] __schedule+0x1225/0x2470 [ 124.484660] softirqs last enabled at (234): [] __irq_exit_rcu+0x11b/0x180 [ 124.485293] softirqs last disabled at (173): [] __irq_exit_rcu+0x11b/0x180 [ 124.485940] ---[ end trace 0000000000000000 ]--- 04:03:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 04:03:45 executing program 7: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 04:03:45 executing program 1: getrusage(0x1, &(0x7f0000000000)) 04:03:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) [ 124.555207] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 124.555943] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 124.556459] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 124.556944] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 02 00 [ 124.557506] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.558873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.559287] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.559914] Buffer I/O error on dev sr0, logical block 256, async page read [ 124.560633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.561049] I/O error, dev sr0, sector 257 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.561951] Buffer I/O error on dev sr0, logical block 257, async page read [ 124.562686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.563089] I/O error, dev sr0, sector 258 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.563932] Buffer I/O error on dev sr0, logical block 258, async page read [ 124.564663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.565067] I/O error, dev sr0, sector 259 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.565809] Buffer I/O error on dev sr0, logical block 259, async page read [ 124.566683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.567094] I/O error, dev sr0, sector 260 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.567733] Buffer I/O error on dev sr0, logical block 260, async page read [ 124.568549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.569190] I/O error, dev sr0, sector 261 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.569859] Buffer I/O error on dev sr0, logical block 261, async page read [ 124.570700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.571103] I/O error, dev sr0, sector 262 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.571749] Buffer I/O error on dev sr0, logical block 262, async page read [ 124.572458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.572851] I/O error, dev sr0, sector 263 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.573487] Buffer I/O error on dev sr0, logical block 263, async page read 04:03:45 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000feb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 04:03:45 executing program 1: getrusage(0x1, &(0x7f0000000000)) 04:03:45 executing program 6: syz_io_uring_setup(0x7498, &(0x7f0000000200), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 124.621756] 9p: Unknown Cache mode n [ 124.635110] 9p: Unknown Cache mode n 04:03:45 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffc) 04:03:45 executing program 7: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 04:03:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) 04:03:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000feb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 04:03:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) [ 124.831730] 9p: Unknown Cache mode n 04:03:45 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000feb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 04:03:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) 04:03:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) [ 124.867232] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 124.867960] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 124.868501] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 124.868999] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 02 00 [ 124.869569] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.884977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.885458] Buffer I/O error on dev sr0, logical block 256, async page read [ 124.886095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.886908] Buffer I/O error on dev sr0, logical block 257, async page read [ 124.887672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.901501] 9p: Unknown Cache mode n [ 124.905621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.940984] 9p: Unknown Cache mode n 04:03:45 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffc) 04:03:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) 04:03:45 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000feb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 04:03:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) 04:03:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) [ 125.045989] 9p: Unknown Cache mode n [ 125.081989] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 125.083493] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 125.084508] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 125.085460] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 02 00 04:03:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=n']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) [ 125.097919] 9p: Unknown Cache mode n [ 125.104840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.109794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.110371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.123150] 9p: Unknown Cache mode n [ 125.131032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:03:45 executing program 0: clone3(&(0x7f0000002000)={0x20820000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 125.148742] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 125.150376] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 125.151350] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 125.152267] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 41 00 00 01 00 04:03:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) [ 125.169671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.170227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.188819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.202410] hrtimer: interrupt took 17893 ns 04:03:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1, 0x20000}]) 04:03:46 executing program 4: eventfd2(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) 04:03:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='.\x00', 0x808) dup2(r0, r1) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:03:46 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x5) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:03:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r0 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:03:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:46 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 04:03:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:46 executing program 7: syz_open_dev$sg(&(0x7f00000026c0), 0x0, 0x20000) 04:03:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='.\x00', 0x808) dup2(r0, r1) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 126.158421] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.159722] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 126.160659] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 126.161541] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 02 00 [ 126.164182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.165146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.166136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.167042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.168186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.169046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.169985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.170931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:03:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) 04:03:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/249, 0xf9}], 0x1) 04:03:46 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 04:03:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='.\x00', 0x808) dup2(r0, r1) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:03:46 executing program 6: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 04:03:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/249, 0xf9}], 0x1) [ 126.553508] Process accounting resumed [ 126.594788] Process accounting resumed 04:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 04:03:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/249, 0xf9}], 0x1) 04:03:47 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="411a10ee2a38c2381b6f9672518ff35c03b4ef877e1b9e93c9f012d4e5b1ba6d117fc3ceeb8162528bbf4a1a55cc061c4fee6836174c7dcb36b0943b39e4549e11bdb058a8bfb5f2a41dcdf81d118149c1142431c6314f323682bebdebaeb9740ffb3b6060f267b1b45c4ec3fc044dcf94c843a4e73c9ad78066df62bd84685ad12fffe3cc7fde00864a466d0be8d15caeb705a3ec0424172bab9cf3b313138d48cc9015879b7def7231dae05f3acdff6ebae366ae3a7571d6e9a18240aa0c126715e20e59fdca3418fd782c4317e3e7ab2e7261ddf1", 0xd6}, {&(0x7f0000000200)="8a10cd95ac92acf11e0607393ebdc033b805bbcf5d7dc5cd944143f14628cadba64af5b09176a253460fabef60537deaa83f9561af309b252562e8b52d97e100ac98a0000000e6ff00"/82, 0x52}, {&(0x7f0000000280)="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", 0x47e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000900)="95b3b581d05dfa", 0x7}], 0x1, &(0x7f0000001bc0)=ANY=[], 0x10a8}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 04:03:47 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='.\x00', 0x808) dup2(r0, r1) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 126.700927] loop5: detected capacity change from 0 to 256 04:03:47 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 126.713258] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.743129] Process accounting resumed 04:03:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/249, 0xf9}], 0x1) 04:03:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:47 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 126.811447] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 126.851556] Process accounting resumed [ 126.886990] Process accounting resumed 04:03:47 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 126.996600] loop1: detected capacity change from 0 to 256 04:03:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 04:03:47 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 04:03:47 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.011788] Process accounting resumed [ 127.014152] loop5: detected capacity change from 0 to 256 [ 127.017462] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.019926] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.022065] Process accounting resumed [ 127.024155] Process accounting resumed 04:03:47 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.047667] Process accounting resumed [ 127.071951] Process accounting resumed 04:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 127.092025] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.116105] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:03:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 04:03:47 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:47 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.155985] loop5: detected capacity change from 0 to 256 [ 127.166465] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:03:47 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.176056] loop1: detected capacity change from 0 to 256 04:03:47 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.186566] Process accounting resumed [ 127.189268] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.197241] Process accounting resumed [ 127.202987] Process accounting resumed [ 127.228550] Process accounting resumed [ 127.232507] Process accounting resumed [ 127.234351] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:03:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 04:03:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) [ 127.269871] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:03:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 04:03:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) [ 127.292087] loop5: detected capacity change from 0 to 256 04:03:47 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 127.301336] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.324221] loop1: detected capacity change from 0 to 256 [ 127.368698] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.372123] Process accounting resumed [ 127.395330] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.421204] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 127.476625] Process accounting resumed 04:03:47 executing program 4: syz_io_uring_setup(0x6ddc, &(0x7f0000000c80)={0x0, 0x5eb4, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 04:03:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:47 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000000068"], 0x3c, 0x0) lseek(0xffffffffffffffff, 0x2000005, 0x0) 04:03:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='/', 0x1, r1) keyctl$read(0xb, r2, &(0x7f0000000600)=""/29, 0x1d) 04:03:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='/', 0x1, r1) keyctl$read(0xb, r2, &(0x7f0000000600)=""/29, 0x1d) 04:03:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 04:03:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 127.562791] audit: type=1326 audit(1664337828.042:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4212 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c8a37b19 code=0x0 04:03:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 04:03:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='%\x00') 04:03:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 04:03:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='/', 0x1, r1) keyctl$read(0xb, r2, &(0x7f0000000600)=""/29, 0x1d) 04:03:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 04:03:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/netpoll', 0x400002, 0x41) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 04:03:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 04:03:48 executing program 3: syz_mount_image$nfs4(&(0x7f0000000080), 0x0, 0x0, 0x1, &(0x7f0000001680)=[{&(0x7f0000000100)="d1", 0x1}], 0x0, &(0x7f0000001a00)=ANY=[]) 04:03:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='%\x00') [ 127.701991] Zero length message leads to an empty skb 04:03:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='%\x00') 04:03:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 04:03:48 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000bc0)=[{}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:03:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='/', 0x1, r1) keyctl$read(0xb, r2, &(0x7f0000000600)=""/29, 0x1d) 04:03:48 executing program 6: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 04:03:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 127.813063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.815618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:03:48 executing program 6: shmdt(0x0) 04:03:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='%\x00') 04:03:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 04:03:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f00000000c0)={@dev}, 0x20) 04:03:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1987) 04:03:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 2: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)="f9", 0x1}, {&(0x7f0000000140)="986ad5e151116c871885c27cafb03f07503b50cb4f3f00bfaea06d0faa0642d7848ba6c976664ca7b72c07c1941c8a95d86a02b95c8b04e292c4c5687f60b0f1229a8f3b8737365674da284348268b0e2ee046d437ffcb2af74367be3e9b927e74b5ad53781616cb9c7a895c6a3cddc3a729fcb85b12c55e0fe9ee78e806496ac979f906a7c2567abfda7104d151e33da74dede687fefc815f5e4655b96b3f15c64ec324bd04d4092a33db6ce3092e97a89385af6c8880a84314752af7342c1c70237243832c5711ad8aa7fab698ac853cd4cd4766126df9a669f0233af7885fd260d556a16232cd480702f90a8d174dda83d98f7c9267856b8e20449d8379d5b259d80ccf00951f166575672eb1619f67bf2f9ebf80edb62d167d49fc378424631edf620c8fb34d9bf071c3ade49f2ad5ca61b44b38ba01c0c7d99ad031204a7ab592dc6ac683e14bdad248507c54a8a21da234a966c19e4784a0e51cccc2eb5c1135ecbaa4f61c82c79641fe372c685924729a9b38d09348b47762d1eef822b1641889d6dcbf3d191aaddd2109248b14fd36c529814e92c73861ae92161750091e369fdf55e0b0ccfb3ad9b3cde78ee7308badf9accd7a2c38a2e88309d7491043284447b0c363f6854cd07edf883663b2026370856ba62a0766c582e117ee5b8651f570b854453f56edc05aab344739ca2aa67d402dc67bc0c7922a97eb66e090541f6a67f7da6cb1b90a9e7b6e76dbb93a0ff2cfd7ed3d9e7cf8fd6b9684ae55a700bbace0d01be69486bdbe5b1698b8bc3ed64d38412d0d80ab6bf4de5645dfff0e347bc7f75ea566a14adc0e62f466fd91f4b4eeca0524670d07b4ddec1278fff44516eed924090050955bd41226addc842bbb63a5bcf0d74148400eb0f400eee901e7df87bf4f760b7e5b84d18cb31e7514dabf5101df822c3dd2fa4726a339befc60d7c26def7baad51d24463150f36d9fab7fd8f434b97875464c5b43948303c3107769f5b5940c2460cd7e730cfc83570d0fd34de4fe35d7c74a52af5db9aa25c7002a809c0b3717661ebe3b486dd8f36c39b4a485aca62b9ac1fb96fcefe7aa514958fa562dab9c582e93f9663fc0a8eb0f3beee1dbb03ecb97df9a4dfcbd3c49e18577e4983291aaf0d3597b9c0d1328a6873a0b0acf7d461d2e766e0e5da1081a814830068b388242b8da1e6e7ba09c0132867fe90324c4b2c0bccc72cd928ad404307a8b95be695345ab4116be7432cc1bf0a253fc871a8037310610e914df08ff952db48525e76be47a55b53922bbe8a04e99ea463c9fa6ff861e90883b98bc0a2cd328d3a9917a9d65c8d8e224befe1e460dd5987697098157663cae1295c702a08b75b7b0a1aea680b62f1f3c94a3bf1e6c1766fa1d827fe38b96d25f164a29eefac11f3efc535e50e522e22c7459c862e24a9d4e2fb728dd71e74d2dd41c05afde5f5f731228a82b21a9e89377cb75919c3eb0b473a23ed622aa86716b4e05c13ab25a90c701fb919db16d43a7ef0c8cddaa1b13a8984b59aa710cc6686ee5dd27cc657bb28d56f8a1148b9dcfcf964110c3312223e923482e3ed9e298766de43f89887f933b8d7af6dc649d697712a2ac73890054ed029a5342d16b5503e701852810bbe33019f0ed45e6364d20360c15d81f79033eb0c37a64eab4e9b34746b53a35234b019a6584b0853d2a62c12e93e02f87877e8c1564bd1df813972328475d6af44aaa2f2e34eb6769763a83f377ccbdf8be52a2a66ea030061c1b630f947795c17eee0f320101abad1f684c087027fff13943790289a31f420336c7b8de8c20bb7375e878d0df87f8adac103a6857d5a5bf6e6b3daf246df90be1c02a26a8631081f2154bd2a50293803e9ceabf6f8922db19b1584b48d63543d16fa89815c2813167d393c7826579001c126b89cdf8ff3cad2453e788bedce727c9ed6fbb5f8a50b6e38988efe6c4f2d4644ebff0c8531672d6db77b418ad7fefeff73bde0434f127467e376156fa11dc3df30c54a657d811a787fe4ae6ee51ce696613a110a1bcbc18cf32f50586b51c39c630b85ff9d50bbd66d751420f122e933bba299f98dbcc2ace2c223250c52e88c57b44e4847482db363f1dff477175d0b1a7fdf1a564a3cdf85ba8c2eceebd6afcfadbb434687d752dc38a3c43692994203044d1916cd6a842da6cc8dd41227dd48d7602b7c4f4cc4fb47ef21dc0b04c9baf2007775466ee226cce61019cca002c418ca3819300d5a1e2a50518dea92c97acdfae8675396a977b2d744a8f0c3451f33563f1385a44457b14b0399506cbf1cae9410b27e5d945fcd01b36a85db9652c1f6fd32c8f8d05340e615213f7959f0019808f551204748ce5f8bf9d8b7ccca156f2adcc3c81f1ef4427be68f6ba64c071d058e52f09489b89e7b5bee810792a44c3348adf04470d0bd89efc23007850b837f2356285b4423ceeac8724d13fae442af386dd667d11fd8d8753ad300ded8cffc7b58d72c87b25544c67a882e68ac676f5e31466475c455dab9f36031f3730feff3502e3f9dd48c866a62b58280160cc580ff8ec0dfff865db75644bc431f76a4d61f423003a1ce7685844a3c4686d19c6caf70c5dc39cd47d1dffda95a4d74e226fa233d7a28d5324812ab29dbfabd0e7caef3cf43b9a70788156c413de13f1d66621d31425020d5ee6a6403448a08f0179932289696ac926186887df0e9030f1c542db60aa36a2e290b0e2550f8a3b5ba9066b4fbc631a3c910d3414e163d82414a0d0487354bd27da7b614432b8710c060982f0d15966cedd87d67f3589cf14eb6e688c36f4d0ca726171bf69180c4e650b3dfd695bea6d9b771b0d1eb3781b1acd5b9ede67f89f6491a13c6293e3d7d95d1571136114a61bd10e96879a6832b1fce4993c62cc12c8d8fc33d89729d30bf369ba4b2058da9539661251a0f9a82439c7182f32492b09fd2ac708167cdfd03c2a631e396459de28f54bc15a127d6997ef68058589c33a88fcd570590bb6a0e4d0f762ded0bd4d154be2e2903d3cbe723117600378b29afe2a518ae0cbb5cb337088921720cd0e3241ef555018e36768b68e57cb6c66f11895c96bb111c4f29be3bd06af4f818cbd478e34be10b195139de67d31aea948c65f274a4554117e58e64b5c248e532da66c2c2d74c398f2e04e7ec1ed900f2b97ed029fa45cfba478739d9b9746e3c2080071d9eaa861616a7fcae2611a87f91743bd64116044589cbe4be3052660951ef661", 0x909, 0x7575a6f9}], 0x882860, 0xfffffffffffffffd) syz_mount_image$iso9660(0x0, 0x0, 0x39e5, 0x1, &(0x7f0000001b80)=[{0x0, 0x0, 0xfffffffffffff907}], 0x60, 0x0) 04:03:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f00000000c0)={@dev}, 0x20) 04:03:48 executing program 4: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) [ 127.942134] loop2: detected capacity change from 0 to 264192 [ 127.950974] loop2: detected capacity change from 0 to 264192 [ 128.323063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.324177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:03:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180), 0x4) 04:03:48 executing program 0: add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 04:03:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:03:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0xffffffff, 0x4) 04:03:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f00000000c0)={@dev}, 0x20) 04:03:48 executing program 6: clone3(&(0x7f0000001600)={0x10080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:03:48 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 04:03:48 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x0) syz_io_uring_setup(0x16e0, &(0x7f0000001400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)=0x0) VM DIAGNOSIS: 04:03:43 Registers: info registers vcpu 0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88806ce09638 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000072 R11=0000000000000001 R12=0000000000000072 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb4b63618e0 CR3=000000003e7ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000002ff27 RBX=1ffff11003b73f84 RCX=ffffc900025a8000 RDX=0000000000040000 RSI=ffffffff813bb5b3 RDI=0000000000000005 RBP=ffff88801db9fcc8 RSP=ffff88801db9fc00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bb5b3 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8d7a305700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79f1613280 CR3=000000003e6c8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000