00, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'syztnl0\x00', r2, 0x29, 0x0, 0x20, 0x7, 0x10, @private2={0xfc, 0x2, '\x00', 0x80}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x1, 0x9, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r2 = syz_io_uring_complete(0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000300)=0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000140)) r3 = open(&(0x7f0000000100)='./file1\x00', 0x6a0840, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r4 = syz_io_uring_complete(0x0) r5 = dup(r3) write$binfmt_aout(r5, &(0x7f00000003c0)={{0xcc, 0x40, 0x8c, 0x3ab, 0x16c, 0x0, 0x361, 0x2}, "6c7b0a45581cd93f80506df435413d524e600bf4fe2a5cb9bf65ce4b585eda83346e87f66e3d263091a14a0458bc82d62212c3631412fdd5736e5fe33ace80b9c9642086f5a6625e3a6543dca4da47a7c339ec54d3b409565c4a45cdf25399a6d5cb28c9404cfcda35252bbc5b4fee9c30e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa92) pread64(r2, &(0x7f0000000e80)=""/223, 0xdf, 0x40) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r4, 0x4b36) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x6, 0x3a, 0x0, 0x1, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x830000, 0x1, @perf_bp={&(0x7f0000000180), 0x5}, 0x40020, 0x80000001, 0x81, 0x6, 0x3f, 0x7ff, 0xbd, 0x0, 0x1ff, 0x0, 0x4}, 0x0, 0xf, r4, 0x0) 05:44:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:44:51 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2188.608173] loop5: detected capacity change from 0 to 40 [ 2188.744413] syz-executor.5: attempt to access beyond end of device [ 2188.744413] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2188.745969] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:06 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r2}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000001500)={'ip6gre0\x00', r2, 0x4, 0x0, 0x3, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:06 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x1, 0x5e, 0x3f, 0x0, 0x20, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2cf, 0x0, @perf_config_ext={0xac, 0x5}, 0x10000, 0x4, 0x3, 0x3, 0x2, 0x4, 0x8001, 0x0, 0x6, 0x0, 0xfe}, 0xffffffffffffffff, 0xd, r0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x7) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x7, 0x4, 0x0, 0x0, 0x5, 0x2410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x53, 0x100}, 0x148, 0x0, 0xa0000000, 0x5, 0x9, 0x2, 0x1, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) r1 = getpgid(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) syz_open_procfs(r1, &(0x7f0000000000)='net/nfsfs\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x48402, 0x2a) [ 2203.203464] loop5: detected capacity change from 0 to 40 05:45:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x34b3, &(0x7f0000000140)={0x0, 0xb0e4, 0x0, 0x2, 0x13f, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:06 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/22, 0x16, 0x604) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0xfd, 0x8, 0x7f, 0x0, 0x80, 0x4d0c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x1}, 0x1, 0x2, 0x401, 0x0, 0x4e8, 0x1ff, 0x8, 0x0, 0x5, 0x0, 0xdb41}, 0x0, 0xd, r2, 0x8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20001, 0x38) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 2203.394774] syz-executor.5: attempt to access beyond end of device [ 2203.394774] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2203.397476] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000000}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x400940, 0x40) r3 = open(&(0x7f0000000140)='./file1\x00', 0x20080, 0x120) move_mount(r3, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x40) 05:45:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @local, 0x7, 0x7, 0x6, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r4}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r4}, 0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xc0, 0x0, 0x1, 0x70bd28, 0x4, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24004840}, 0x4081) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x8, 0x8, 0xffffff81, 0x1, {{0x10, 0x4, 0x1, 0x29, 0x40, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0x13, 0xb1, [@multicast2, @private=0xa010102, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0x17, 0xf2, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @rand_addr=0x64010102]}]}}}}}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev, r7}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r7}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x2f, 0x2, 0x4, 0x7, 0xc, @remote, @mcast2, 0x7, 0x40, 0x8, 0x2f5b8777}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3dc, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18a079c3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'net/if_inet6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.},-]-.)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '))&@]^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-}/-:..(,\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff1f1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x57, 0x3, "01d2d5928c98e6b4bdddf15c7444f0db29ca77b81948f9586dd2f78cf547c83c7f00a0d301de1b10c888a64607295a2549186da0ca7d15d04d2f692b747e50e50f06113e1c632591c0ab2b347014eead38ff34"}, @ETHTOOL_A_WOL_MODES={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "b855a7cff18289d821b52c017215e657d586adad9f52d70868ceef7be0359dbf09f0504aaf0e9d7b9f3b1c24bd46e4e01bbb87c5fde4da0b0ac2a09a76358a8a6fe05d8ef640ad30bcc0934e1700ebb9dc3885c8a020ebc38834c65b962eb91602e86388b4f8250eef03e1b7bc886ef2cdbabcd64cfef04b17239503313cf181a31a4467031ec442f4ac88edc59c256fec4dc5bc511bae54c0825c5d2beda2518e0fe71bd84928c68bf8"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "defb4b63e14aea01"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "f65eceb5d3943ff3df79a1dba08f1353"}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0x94, 0x3, "3bc16cf6f29798715be1e11747336f281103344977a859dd674f1662b52f10217b8884aae384c3e0d02a34b897db85b1cde4097b744b78447d92079652d4a49c5659f4fa2864152c8911162472e3bb408f92b72e3ea294af3e75657e36e03a52b5505306fa588e8506c898655d5fb49cdd3c5a0187132b878c429c7e033c1470fa80051d27f3932cacc43cc505a28378"}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 2218.954493] loop5: detected capacity change from 0 to 40 05:45:22 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2219.060792] syz-executor.5: attempt to access beyond end of device [ 2219.060792] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2219.062099] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:22 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7, 0x3, 0xf8, 0xc0, 0x0, 0xc54, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0x2}, 0x10080, 0x2, 0x800, 0x5, 0x401, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) clock_gettime(0x2, &(0x7f0000000300)={0x0, 0x0}) futimesat(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={{r3, r4/1000+60000}}) 05:45:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:22 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) mknodat$loop(r1, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x8, &(0x7f0000000740)=[{&(0x7f0000000bc0)="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", 0x1000, 0x6}, {&(0x7f00000000c0)="10751e1547d6ef7841a7c1cfae613acf04c53f17585687686aaacacad9f7cfbcc2bfcb7abaf5941ba5849c25f23925d9211afc68c07bdcf435dae700ea4705992f793ba93962d4388b23c8f9381261227e7471c9308d5657862e5e3c31afab387a071944048c0dc5e8988b9964a638c5c259548cc0887c6ac6b8bf2d4444f1d46d8ceec76495c001c992c6f8d6a98674ee1407a4d80ad237a0c035cfbda36848e2c3ce7e59e129d63251885bbd078e06394249596daf583f7d1ca7db07630fc12931e5672e4f536c", 0xc8, 0x9e}, {&(0x7f00000001c0)="c27ab61ff141fae1c796df22e4b031e07d1c922513aa290719e40e6ac9cdfb04295578421a71ef95b60aef63a9c6028a7679c810bbdf58ebefc098632f6fec02b675e19357c7a80909901f97ca78abcdcaf08f3a4235c79aa7db70c74dfc28496db5f9c13968565e76a0b6aee3fd92db80c93ba7aa58b821c83f889325ac7a532746094bbb009b930fdddf6056cb864b1ae33d220f0837732e05cf4c860c0173da6e064744fcfede0e36036c413b56cd26b1fd8aca4f9afff6c7884cae8adc1c3e77a6a1812e85358a959b", 0xcb, 0x5}, {&(0x7f00000002c0)="7e2f7df221e9733c5693c2c661dd8b950cf97ec8ee319cc67ff108c364a40fced571d2569acc64250b19eb92bbaa79017da825d8e745b0d38fc7c5fc435123ae02c86f53128066bf34ecb1b622424f2b371d59c432c6e9e6cebe724623d0ed7cf1e0d330b62346b57213d5dc88dcfa40d63a3c7a0741848cd09e851feb32138b53691d1a9d5b91605960b74d3ee9593f930c68ea606da8713d53244db04d8df08fe5759893d2edab0f2d55e585133e5c457762d949", 0xb5, 0x7}, {&(0x7f0000000380)="bdef723d8ddf3b34414355de8b419b25cf4c8a323c93a97772e23df9dfc71c42cfc03f5529fcdb60a2837a34293c911a5c71c98f727966be8475e6f6b1cf5248ba5658e7b00976b9b9a8fe84cead88884d5c3815e50c86d4794f48af6d053ffa4068f7cf9a990643b187bc352a252acd86bef99c8e5ded3d1d538c9269500abf0047984166136926a1790ba9a9384d39eb5759c8860d9ba7f3d3b6357dd854f998e510cd85194630f6844e45a4d64d787f651a46eaa03912add2cb21bdd5229705b9c1626f268da9435eab520df3b234ebaeadc9aa45ab17fc65f270823d10e82dbb06ec65a7b692f27951b6dc06", 0xee, 0x1f}, {&(0x7f0000000480)="652d49dddd0eb8f45870fc8d066c0057bac539901d6cd2d164f1736553d1e5a6e33d4bd3757656ba47f39a3c1a6c7ec970121abdaec02dc3448c3c763816626431be192330e20c3a24f6dd3a04361dd11fe04db46f8a", 0x56, 0x7e}, {&(0x7f0000000500)="09114dc986dde424780ed3673f7538f414be47a75517fcf412416e1bd7fe16df950521bfbdbfa26c61809bad70f62759ad883c131a14df17dae7db3ebe3fe2e741ee5b2c0fa7d00f073500380cd8f80300bc9166100cc93f9fb6d7237b1dc603e13561934bcd36ac9ab21d8f", 0x6c, 0x8}, {&(0x7f0000000580)="11f8d73aa868dd417fbb3f0b94fe74eef4323b19d3eff5860f5cb0911a98bd986325275c33f3322b7de73e09be6ce958db6020754e4c44f03f5695e606d90d8974fe50f0e4957c346b3c6340a97b5efc49c561bcf1f2bc9604feb9bcee00443fceab2cd52da4f8304cd9d026d56929deba8bfb01e47b73921a2c051d8cfbf804acc4335e38f2bf3734397f7c98f61bef665658d001c639bb0d1f29426ea04b54a3a7111f8049485b5e9a7b09e26c87a084a035de1837e102ad7101faf23f37889cf4e6fc3487bdf2643ce26f8e1831fe230acce43160943d34266f4859a1fb", 0xdf, 0x8}], 0x2000400, &(0x7f0000000980)={[{@uid={'uid', 0x3d, r2}}, {}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, ')<\x11\x83\x7fF\xe7\xca\x95T\n~\xf0\xc6\x15\xcd\xab\xe2\x852\x94)\xe2\xb7]\bpM\xa5\x03\x1b\xcb\x9b\xfe\xba\xdcZ\xbff\xd1`\xa0\xa9\x06\xa3\x1b\x1a\x03\x864y\xa3nl\xfb\xb8\\\xbcTh[\x19Ly\x1bT\xc0\x88\x16\x0e?\x8f\xa1\xe3|\xb1\xeb\xb9\xb0\x88\x02\x0e\xa72-\xb6\xab\xe1d\xabh4\xfb7\f\x15\x85S\xfd\x1b\x92\xfd\x90\xb1S\xfci\xfc\xac\xa8\xc7`.\xd9p\xe9-\x8e\x85\x05\xe6_\x86\x1f\xa5\xff\xbaK\x93]\xe3\xef\x8fs-\x19\x8e.\xfc\xbe\xfcks\xc0\x17?\x7f{\xf6\xdbGU~|\x81\xa9x8\xda\x82[u\xf8\x15+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x36, 0x66, 0x38, 0x37, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x35, 0x33, 0x36], 0x2d, [0x32, 0x62, 0x36, 0x65], 0x2d, [0x63, 0x64, 0x31, 0x65], 0x2d, [0x6073c767a31b8e81, 0x37, 0x64, 0x63, 0x39, 0x33, 0x32, 0x36]}}}, {@dont_hash}]}) 05:45:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6}, 0x8038, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x80, 0xcb, 0x7, 0x1, 0x0, 0xffff, 0x80, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x40408, 0x7, 0x3c, 0x5, 0x1, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x7fff}, 0x0, 0xf, r1, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 2219.470804] loop5: detected capacity change from 0 to 40 [ 2219.680432] syz-executor.5: attempt to access beyond end of device [ 2219.680432] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2219.682592] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x1, 0x6, 0x1, 0x0, 0x1a2ea0000000000, 0x0, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x60380, 0x0, 0x40, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100000000}, r0, 0x7, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='[+\x00', 0x0, r3) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x30011, r2, 0x66467000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/136) dup(r0) r1 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) finit_module(r1, &(0x7f0000000000)='net/if_inet6\x00', 0x0) 05:45:39 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) close(r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:39 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) mknodat$loop(r1, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x8, &(0x7f0000000740)=[{&(0x7f0000000bc0)="2147efc9132da9c775e7c4d0b12958988e700ac72fd685ae5cf6678ee747b2bde24a42a8680ac19e227a66f53fb3410466905495f0286e1009d2ff8617bb071a3c976ee466c52699ef820499831a8ce4741fa02e661b2822b288b21d33fe26d51fd99129f70d88633caf37ac4ee7c346ddb4a46ff3cb04ea34fcd562d5e1062016109a3fa1540cee0afa45dd48c2551c5b43703fc901ee046ec297875a0e382979346ea3ed821047d24f00c47dd576b2a926cb4b9e4a31f7c0a69d67d311085051ee4d30d58fe7d82e2929e7966a9f824cefa2f010d79d47709cef06c518849d5b88ed02e216eeaf22d57128707c0a7c05fdf11e4b3e2e059e144e10e2f2979ffda49b72aebdc5a1b003b0bb8e1002ea3bae0d50b2b9e01c8ca8dc4054fd5121b590a9aa9139e7876c2e9cfc9fe045382ec4e69e12731b779f9c039f040152113a5a8be7686456582fe12ce6b5f7b1c16ee348f9745a61ae2acaac6eeb6d79d5b44f84dd84114da1ea1090b537f531fd1a5e475686ea3ea1b2186d5690cf71ecde50e78cd39107a62ba394eeda2c4d7557f84a769c0500abca66aef5782f9b8341ab05cb547ea12249f7247246f3e55aed77a4cc689115a5db90c79f342623ec6df3f9cd618d8bf34d3295aa271a70db9e1c0fb60e1a3ddeba2728d1b8750d4d3f37f5ee692454e732bc6903ccba7bbd0accfe99c50ee356bff9b9ee81bd1a363ea59c6fda382ab20ae2d727b4aa03129f646809a143a82ea903180eb74585640de31be1b6c6b71985ebe73b9ee1eba0700204281147e944653d2e3eed2a3f1efb58189d95b78e11148be2734f6aa3bde00e8bf18dd0815a5cd06b0e328debd3085dac5c271e22d695ee9a5e9843060745bf17b3b309c0a998519e78fceab313485d07b0614788601b180dac09d1d4d77d33e6d8b441a111792b29abaae146890dc5ddb03bc39ff02dceff310f05140fa3e2d96ce67da153aafc1558706dc904347fa19bd9f1f45254133d1587f76c01a11262ed986577bff022956b8b2e3a87ec385cb00b1b0948d9000571940e926990af77bff05728c2aac943c41105e4f4f2796feb1bd555b6a6bfbe36c4f870c35d09f03ab90c2feb59a749ab38bdfa5500ec953e99891bd658d3ebae7956c7d253afd42bb8540d27b674f1ad54227f46295e04e73f00f60b19d6669ebbf7a6451cec7764dcc4bd2d25639cc566e709a1627c803aaf5371315e0c8bf91f3478278116ae5e16073aaf7e712eef5cea65bb98ef69a9ed9a912dd7344d3e594223e1d82ffb19237cbf28fd1fb812ad5ce30e31081b4e3d0b9ad1f2a611dfa35ba3b46d56bf510b9c71c9bada3deb9e88dac85f27bf5e7e331e8b643bb14c4da26ae3627cd527861892a66ac16acee5f8e44b52899e357ea00ca26385106f97d8a3917f36aef9b60cc7d3af87f57ea03092d315967bcb3d917972b9ce3b8ab8f660d16c9645d87d317a31466e5ff25de8e5deb656d752c744ff7d1def5271c5a998987210a3a458d767d6fe80a5a42487a30709499d3d4f0c3b40e41f77be67cfe0891328f7caf52356b605d2c5e75cd52ee5eab85b529c0676c80ffd8a506f6af9a906ca86217d57811a35761b423ea498850b9cf86525cd21bf9a66adcdd1488ad5bd9c187bf1d6dff66a06723a6998601e39f0cc91d1b28dd3b3df93087c511ac41dbdfaa81ebe66f6a15db4446d8e2fab121ab2e66f2d7307b85538d62ea590208877da73683eddb6dc03b3ae3701b5b241692c366f0f78aebf786e749fb9d0617e3861537720b286ce8c31bb51dd62b1575ce7eabc55fdf5a2aeb80483b43f35b6ef036148dfe5246ece26acf881fb94510d321fc97284cf458483e6eac9e986f0184470b83f03f09fb35ade9fff3085d1cec0afc0611f41d603f239b2b6f034b780088d9578cee50a27e389c44cc4d2028214139f4bdafd76c30989e0cc998befdbf2145eccf1d07059a8c30d6ac0fa969b081faa992edaed212594990676ec35dfc8b0ba32f5d7348c1301ef508fb433c283587be7e2f8cdd1a42e320fdd7c0bb054a8558fdfb3364fa4faef86f37c409df7a9fb8ff0c4032d57d478e5b6b1c2c179c8eeaadcf279e64595c09360280ff220c80ef96cb5ea2a420cf05ae28de13c8350b22f3775ce788a1cd083c8026a99879e5e11f2a52cdf6cd416f492cf0716aef2862d1fb7d0e09a578d5d7d9f5c754d8294676a4a5f1f1b744e62655d102635b8375c18ee91af5268dfce153c0f8f4ec310c4e26675b023f2b74391b0bc7fc776bb8735cec8cc81926a448a05cb324c461f0feb88b446b29b7f241e3068485a91441a7d206bd5b66671c5aa4fe2c62dba595e490fbfc2ca6d6ca602320a394061f6126f2c5b93c5491c3d0d8036d21c18bdf673d9f7ab4b7ad1cfd9a2dc2a8c797cd29ee7cb92b8010460f5c8346602f0afcc57efb0c19f1464e92ff947c6be74017daa263b1e709678116bc14eba269e961069775827b316dd4b691ec4286d129fedf0d6bb5d65aba550791c7daecd55024003eb556180076dea48e5c06442a55dc5089302e124d96346a0a5e9b9fc1e20fa35d70d09b6c8fc1d7e051637e8b5c0711d474d13ce53750415a6c73d5da5c8b00bd867ff24f222b02f947471e2c5e3c24bb0f3a66b75d019f4e80da36983ccb87dd77d81d00547aa7940f4ce93952505335957dbf2aa1d7ab86f3e9a672403c9eac2a4efbca02f5b4c9a682636e5f95d4ee8c31aa16a6d9d2cd400cbe800c2165346304dcd77000c71c4013e60b2918cdb7d01db350fc795a2dc24f03e2cc456cf14abd41c99cd9debe4a4277b61bda09cc7485984ad7e25e4c5954fe6690e2f58984760b3099ceffea0a0166be1d18be79d036b29a3666cff9ce14881e9fa81e6bda7608c97ba82cd84cdd25623e4e2f33a3afa5b708e60678882b70e3e354d8a0bc15ab59cbf19f763666382eac8fdecafbe529e775c5d468ef837fff7af2d2708718f20bead5891f6e24b8d0fd40025d950f11bf575eab29a2efb1041d7d56777905f7a826963e9fcffbb96f0b1ec704db717d95e63c449d6b6425027fc8f4f9379734f410c82d8c99573539f801cb77b72f6579b6f45975c2ab7e947aadbc4c399e60d58adff4de853c742a487f8e51c13b2e037bc8a123cf64d857fc17c1490c4b377b433e5c60b247f81834741773be9613a8d5f77edcdabd1e2d5bf06b05c8a13c7f1548057efffd5b1dd7b7e5cb42b0caacf46aa6f3473bd2f28d74465df494ee6fa73400fdcc76ec1fdbb9868b150606190f8b04b02ebd0c305ef3bd1a4fbda0ec05abe59ae4f412c0fbcdf73c52a31f02eae2adb451e8c0119fa327445d771697cc2c67c0bb666499ee49f04e265d63ac50f27750fa5b0a09050d8eb7b3bd1f989e0bdd072fe71a16d07df696a59b438dec80a08d3b6fbdab6ebe7c37e566ee0d67ce1ca5f0d9ff7119919d79da748c6c5452228a007f2191c4f8bf41e7b96e8794b9ed90ccd0c7ccd0af58cb76a045bde72a2e85a8bbd4b0e5d04cf629ee4b727e136cb070b89e3aa84f5d66c6bb75e942fec5404a58ca3844c32041c2aa6016ae9ab1256f4e2b7db320eef73772b7d348e805457bae8d574f3cfc58c02f884aadcb76e7172d36fc1b4b3c266ba7e5ead90151c34cc059b86538bac13866cfa2f2ee494ef2a673180a68b021afe80888ce53e83effe36ab3a3e1578bb25dd3a8d1eaccb7b5c896dd2a5e2d078b00014cfe9c2635e53374f431fca5dab43f26ef548ddab42e1fbd3847243122675964187ea4746522a0cafd6ba91ea2ac50e50f8f8c06e6e3638e6a3b3d79681d0f4e53d33c26fc2960c96a63ec022482dc706741ed7190beb9402ee1c75644510978b5e64fe390808dd4e53a2726d1c17e587c5415c9ee71622aefcface52877a77421beb2a0c81495bb1df3ad48850dfbbf86b1608b5ea78f92b23a003ad7613824170af81073c0ddd2962b7f6d2885a84842b34dc68a81ffc8d5d6cd8ecd83fe2304135eff465bef853313ec943861a32339192572041b34e88e3c7cac69675c0fa59a71bb240c10c3cf18657e88d2ec571dc0d3d2d83c4af1326b99ac9a4c7cfad80378ee03f398cb245170ac219c797fb8810f89e2acc15350bdb887cad0ca58266a693df9712a501c3c044e80d0183579b4544f69694561b6cb62e56145bb63dfe22d3068cfb3752e1d5281d6df33970a703b0cd2628e0ab7a4642a3881f678c169b93e7bebb8b2552c608f09f160a206b1c34713779aa4b55320cddc6d050c350d0492f54e3f1d899e3be4ca8f65a4dbefcb68a1a20416d4bf912712f98a6813e8d3ea8bcdc92157aaf9522280dfbfc8d0f898dd5498aaa335843ae3c8db662f7cd1c36f4666a0beb613b3b8bbcf609117701f6ffefa1a3d8261536af3d78c6637de75cc6cd56d2d415cce6f13c762be304b972a62279e86fff76ca5fb8abfa005c6194e86b992307f67e27cb9d4c7a8a38a6ff5312a94d67f8da717d9825458c9d2c2c6a30689b8896889c021a07d4b14a3b8209fe4425a84ec25fe68e890f3ddac933f4cd3f915a812fe97bf296435babee4f6316690af7c4a5a0ce6e08095a69660e215e7724cb45a4eee67a8d5dd4f347d6c9ba8f109796d82e653657920ab363879b43288105e61d36a2d52148bb103eb7658dca948c717a401d9cdb9881816c782126b6e8ac0b1b5a9ef79f1aa016a6499351df8032f014da33c0995a608c489196b298dd4da6c560c521157ca3536c044d16156606b9b3c3b503fe12f53c8482405ba081deacae66156a36e3dc6b33d1d5c0f87a73d8c242f9737ee7db640cf67f844cdb9f65d1ff25e43dd72edcc50ab3e5f9f68fe0e35666aecd8eaf792d0cbe4b66da8c313b608bafccb6d8e3be6ddfb8b94b63535d1e11c314607bcdfd7b43153a35acff37508dab00651c7b084df7a3e0664af44bd3b14ba0177bea8b2d89efc9ae220287bf6765699019520891db3693830054c252fb8bfdf40467d2dee96ebb52d0dc7ee62fe98ef3d84ea9f91bf25f9537343d32925812206b8f17cbb29ddfac69b48ee733570d839b314e92a001d2312feeaea37a0683b5b634fd64051f7632463be0b3f03ee0057795fd800a40fded1059838c3015e5654ced82c1e73eefae4ac5055cb91051bd0eabc69ea381c9eb7af01ddefebbec75711b13f0ae67d6732908fbeb4ff56f0cf764f2e140092f7f34e3130d8ddb4734a54b13b9711ef1e458cb1b6e125db8de06b0702dfb60ee3e01a167eb9e04753034bf40853b368b8e602f394e5b88eef865353fa39dbdfda93422ca970839a500c27e0ff1b990c7e85dc81c1670fec52a4f22e9de40323d30a6fc7304588caaf62d467f72c243d11b1a88f0c46c025fae3f3feadcdc2d9364a1933b6574b9f8cccda2819dc65b84b916671db925289c6ecb59de7ae11ba8d7700f555d553b6067ed02406ff118259e77d3dd951d076458a9fd0ac61e942f0ec81e6a46ea48d0eab8da1c98c433c103d42e902561515da0768ba4e84eb2d27c20c40523f995a8d23e7a24e7c55a6a75f7954bbcd59ed68c8b1765a7428de709633de32fabe950cf9840f68894d8e77c25fa43d92fa257eb87114f61d08684f79d0c8ed172106fae1b8a33b0889ce1cdeab0077d55d4e8529b6890154534b1fe67237133c2d970c95c712cbf27e9999d0f0622f07b4610d4dd8789c3d6b28756c8411f82c53d8c75a37d2ea72aa60dc961e25dffb3254382daecb45e2a7c8e346f77a702888163db7b3cba2ef1", 0x1000, 0x6}, {&(0x7f00000000c0)="10751e1547d6ef7841a7c1cfae613acf04c53f17585687686aaacacad9f7cfbcc2bfcb7abaf5941ba5849c25f23925d9211afc68c07bdcf435dae700ea4705992f793ba93962d4388b23c8f9381261227e7471c9308d5657862e5e3c31afab387a071944048c0dc5e8988b9964a638c5c259548cc0887c6ac6b8bf2d4444f1d46d8ceec76495c001c992c6f8d6a98674ee1407a4d80ad237a0c035cfbda36848e2c3ce7e59e129d63251885bbd078e06394249596daf583f7d1ca7db07630fc12931e5672e4f536c", 0xc8, 0x9e}, {&(0x7f00000001c0)="c27ab61ff141fae1c796df22e4b031e07d1c922513aa290719e40e6ac9cdfb04295578421a71ef95b60aef63a9c6028a7679c810bbdf58ebefc098632f6fec02b675e19357c7a80909901f97ca78abcdcaf08f3a4235c79aa7db70c74dfc28496db5f9c13968565e76a0b6aee3fd92db80c93ba7aa58b821c83f889325ac7a532746094bbb009b930fdddf6056cb864b1ae33d220f0837732e05cf4c860c0173da6e064744fcfede0e36036c413b56cd26b1fd8aca4f9afff6c7884cae8adc1c3e77a6a1812e85358a959b", 0xcb, 0x5}, {&(0x7f00000002c0)="7e2f7df221e9733c5693c2c661dd8b950cf97ec8ee319cc67ff108c364a40fced571d2569acc64250b19eb92bbaa79017da825d8e745b0d38fc7c5fc435123ae02c86f53128066bf34ecb1b622424f2b371d59c432c6e9e6cebe724623d0ed7cf1e0d330b62346b57213d5dc88dcfa40d63a3c7a0741848cd09e851feb32138b53691d1a9d5b91605960b74d3ee9593f930c68ea606da8713d53244db04d8df08fe5759893d2edab0f2d55e585133e5c457762d949", 0xb5, 0x7}, {&(0x7f0000000380)="bdef723d8ddf3b34414355de8b419b25cf4c8a323c93a97772e23df9dfc71c42cfc03f5529fcdb60a2837a34293c911a5c71c98f727966be8475e6f6b1cf5248ba5658e7b00976b9b9a8fe84cead88884d5c3815e50c86d4794f48af6d053ffa4068f7cf9a990643b187bc352a252acd86bef99c8e5ded3d1d538c9269500abf0047984166136926a1790ba9a9384d39eb5759c8860d9ba7f3d3b6357dd854f998e510cd85194630f6844e45a4d64d787f651a46eaa03912add2cb21bdd5229705b9c1626f268da9435eab520df3b234ebaeadc9aa45ab17fc65f270823d10e82dbb06ec65a7b692f27951b6dc06", 0xee, 0x1f}, {&(0x7f0000000480)="652d49dddd0eb8f45870fc8d066c0057bac539901d6cd2d164f1736553d1e5a6e33d4bd3757656ba47f39a3c1a6c7ec970121abdaec02dc3448c3c763816626431be192330e20c3a24f6dd3a04361dd11fe04db46f8a", 0x56, 0x7e}, {&(0x7f0000000500)="09114dc986dde424780ed3673f7538f414be47a75517fcf412416e1bd7fe16df950521bfbdbfa26c61809bad70f62759ad883c131a14df17dae7db3ebe3fe2e741ee5b2c0fa7d00f073500380cd8f80300bc9166100cc93f9fb6d7237b1dc603e13561934bcd36ac9ab21d8f", 0x6c, 0x8}, {&(0x7f0000000580)="11f8d73aa868dd417fbb3f0b94fe74eef4323b19d3eff5860f5cb0911a98bd986325275c33f3322b7de73e09be6ce958db6020754e4c44f03f5695e606d90d8974fe50f0e4957c346b3c6340a97b5efc49c561bcf1f2bc9604feb9bcee00443fceab2cd52da4f8304cd9d026d56929deba8bfb01e47b73921a2c051d8cfbf804acc4335e38f2bf3734397f7c98f61bef665658d001c639bb0d1f29426ea04b54a3a7111f8049485b5e9a7b09e26c87a084a035de1837e102ad7101faf23f37889cf4e6fc3487bdf2643ce26f8e1831fe230acce43160943d34266f4859a1fb", 0xdf, 0x8}], 0x2000400, &(0x7f0000000980)={[{@uid={'uid', 0x3d, r2}}, {}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, ')<\x11\x83\x7fF\xe7\xca\x95T\n~\xf0\xc6\x15\xcd\xab\xe2\x852\x94)\xe2\xb7]\bpM\xa5\x03\x1b\xcb\x9b\xfe\xba\xdcZ\xbff\xd1`\xa0\xa9\x06\xa3\x1b\x1a\x03\x864y\xa3nl\xfb\xb8\\\xbcTh[\x19Ly\x1bT\xc0\x88\x16\x0e?\x8f\xa1\xe3|\xb1\xeb\xb9\xb0\x88\x02\x0e\xa72-\xb6\xab\xe1d\xabh4\xfb7\f\x15\x85S\xfd\x1b\x92\xfd\x90\xb1S\xfci\xfc\xac\xa8\xc7`.\xd9p\xe9-\x8e\x85\x05\xe6_\x86\x1f\xa5\xff\xbaK\x93]\xe3\xef\x8fs-\x19\x8e.\xfc\xbe\xfcks\xc0\x17?\x7f{\xf6\xdbGU~|\x81\xa9x8\xda\x82[u\xf8\x15+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x36, 0x66, 0x38, 0x37, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x35, 0x33, 0x36], 0x2d, [0x32, 0x62, 0x36, 0x65], 0x2d, [0x63, 0x64, 0x31, 0x65], 0x2d, [0x6073c767a31b8e81, 0x37, 0x64, 0x63, 0x39, 0x33, 0x32, 0x36]}}}, {@dont_hash}]}) 05:45:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 2236.656601] loop5: detected capacity change from 0 to 40 [ 2236.729439] syz-executor.5: attempt to access beyond end of device [ 2236.729439] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2236.730509] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:40 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2236.861639] loop5: detected capacity change from 0 to 40 [ 2236.941505] syz-executor.5: attempt to access beyond end of device [ 2236.941505] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2236.943494] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2251.586125] loop5: detected capacity change from 0 to 40 05:45:54 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) mknodat$loop(r1, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x8, &(0x7f0000000740)=[{&(0x7f0000000bc0)="2147efc9132da9c775e7c4d0b12958988e700ac72fd685ae5cf6678ee747b2bde24a42a8680ac19e227a66f53fb3410466905495f0286e1009d2ff8617bb071a3c976ee466c52699ef820499831a8ce4741fa02e661b2822b288b21d33fe26d51fd99129f70d88633caf37ac4ee7c346ddb4a46ff3cb04ea34fcd562d5e1062016109a3fa1540cee0afa45dd48c2551c5b43703fc901ee046ec297875a0e382979346ea3ed821047d24f00c47dd576b2a926cb4b9e4a31f7c0a69d67d311085051ee4d30d58fe7d82e2929e7966a9f824cefa2f010d79d47709cef06c518849d5b88ed02e216eeaf22d57128707c0a7c05fdf11e4b3e2e059e144e10e2f2979ffda49b72aebdc5a1b003b0bb8e1002ea3bae0d50b2b9e01c8ca8dc4054fd5121b590a9aa9139e7876c2e9cfc9fe045382ec4e69e12731b779f9c039f040152113a5a8be7686456582fe12ce6b5f7b1c16ee348f9745a61ae2acaac6eeb6d79d5b44f84dd84114da1ea1090b537f531fd1a5e475686ea3ea1b2186d5690cf71ecde50e78cd39107a62ba394eeda2c4d7557f84a769c0500abca66aef5782f9b8341ab05cb547ea12249f7247246f3e55aed77a4cc689115a5db90c79f342623ec6df3f9cd618d8bf34d3295aa271a70db9e1c0fb60e1a3ddeba2728d1b8750d4d3f37f5ee692454e732bc6903ccba7bbd0accfe99c50ee356bff9b9ee81bd1a363ea59c6fda382ab20ae2d727b4aa03129f646809a143a82ea903180eb74585640de31be1b6c6b71985ebe73b9ee1eba0700204281147e944653d2e3eed2a3f1efb58189d95b78e11148be2734f6aa3bde00e8bf18dd0815a5cd06b0e328debd3085dac5c271e22d695ee9a5e9843060745bf17b3b309c0a998519e78fceab313485d07b0614788601b180dac09d1d4d77d33e6d8b441a111792b29abaae146890dc5ddb03bc39ff02dceff310f05140fa3e2d96ce67da153aafc1558706dc904347fa19bd9f1f45254133d1587f76c01a11262ed986577bff022956b8b2e3a87ec385cb00b1b0948d9000571940e926990af77bff05728c2aac943c41105e4f4f2796feb1bd555b6a6bfbe36c4f870c35d09f03ab90c2feb59a749ab38bdfa5500ec953e99891bd658d3ebae7956c7d253afd42bb8540d27b674f1ad54227f46295e04e73f00f60b19d6669ebbf7a6451cec7764dcc4bd2d25639cc566e709a1627c803aaf5371315e0c8bf91f3478278116ae5e16073aaf7e712eef5cea65bb98ef69a9ed9a912dd7344d3e594223e1d82ffb19237cbf28fd1fb812ad5ce30e31081b4e3d0b9ad1f2a611dfa35ba3b46d56bf510b9c71c9bada3deb9e88dac85f27bf5e7e331e8b643bb14c4da26ae3627cd527861892a66ac16acee5f8e44b52899e357ea00ca26385106f97d8a3917f36aef9b60cc7d3af87f57ea03092d315967bcb3d917972b9ce3b8ab8f660d16c9645d87d317a31466e5ff25de8e5deb656d752c744ff7d1def5271c5a998987210a3a458d767d6fe80a5a42487a30709499d3d4f0c3b40e41f77be67cfe0891328f7caf52356b605d2c5e75cd52ee5eab85b529c0676c80ffd8a506f6af9a906ca86217d57811a35761b423ea498850b9cf86525cd21bf9a66adcdd1488ad5bd9c187bf1d6dff66a06723a6998601e39f0cc91d1b28dd3b3df93087c511ac41dbdfaa81ebe66f6a15db4446d8e2fab121ab2e66f2d7307b85538d62ea590208877da73683eddb6dc03b3ae3701b5b241692c366f0f78aebf786e749fb9d0617e3861537720b286ce8c31bb51dd62b1575ce7eabc55fdf5a2aeb80483b43f35b6ef036148dfe5246ece26acf881fb94510d321fc97284cf458483e6eac9e986f0184470b83f03f09fb35ade9fff3085d1cec0afc0611f41d603f239b2b6f034b780088d9578cee50a27e389c44cc4d2028214139f4bdafd76c30989e0cc998befdbf2145eccf1d07059a8c30d6ac0fa969b081faa992edaed212594990676ec35dfc8b0ba32f5d7348c1301ef508fb433c283587be7e2f8cdd1a42e320fdd7c0bb054a8558fdfb3364fa4faef86f37c409df7a9fb8ff0c4032d57d478e5b6b1c2c179c8eeaadcf279e64595c09360280ff220c80ef96cb5ea2a420cf05ae28de13c8350b22f3775ce788a1cd083c8026a99879e5e11f2a52cdf6cd416f492cf0716aef2862d1fb7d0e09a578d5d7d9f5c754d8294676a4a5f1f1b744e62655d102635b8375c18ee91af5268dfce153c0f8f4ec310c4e26675b023f2b74391b0bc7fc776bb8735cec8cc81926a448a05cb324c461f0feb88b446b29b7f241e3068485a91441a7d206bd5b66671c5aa4fe2c62dba595e490fbfc2ca6d6ca602320a394061f6126f2c5b93c5491c3d0d8036d21c18bdf673d9f7ab4b7ad1cfd9a2dc2a8c797cd29ee7cb92b8010460f5c8346602f0afcc57efb0c19f1464e92ff947c6be74017daa263b1e709678116bc14eba269e961069775827b316dd4b691ec4286d129fedf0d6bb5d65aba550791c7daecd55024003eb556180076dea48e5c06442a55dc5089302e124d96346a0a5e9b9fc1e20fa35d70d09b6c8fc1d7e051637e8b5c0711d474d13ce53750415a6c73d5da5c8b00bd867ff24f222b02f947471e2c5e3c24bb0f3a66b75d019f4e80da36983ccb87dd77d81d00547aa7940f4ce93952505335957dbf2aa1d7ab86f3e9a672403c9eac2a4efbca02f5b4c9a682636e5f95d4ee8c31aa16a6d9d2cd400cbe800c2165346304dcd77000c71c4013e60b2918cdb7d01db350fc795a2dc24f03e2cc456cf14abd41c99cd9debe4a4277b61bda09cc7485984ad7e25e4c5954fe6690e2f58984760b3099ceffea0a0166be1d18be79d036b29a3666cff9ce14881e9fa81e6bda7608c97ba82cd84cdd25623e4e2f33a3afa5b708e60678882b70e3e354d8a0bc15ab59cbf19f763666382eac8fdecafbe529e775c5d468ef837fff7af2d2708718f20bead5891f6e24b8d0fd40025d950f11bf575eab29a2efb1041d7d56777905f7a826963e9fcffbb96f0b1ec704db717d95e63c449d6b6425027fc8f4f9379734f410c82d8c99573539f801cb77b72f6579b6f45975c2ab7e947aadbc4c399e60d58adff4de853c742a487f8e51c13b2e037bc8a123cf64d857fc17c1490c4b377b433e5c60b247f81834741773be9613a8d5f77edcdabd1e2d5bf06b05c8a13c7f1548057efffd5b1dd7b7e5cb42b0caacf46aa6f3473bd2f28d74465df494ee6fa73400fdcc76ec1fdbb9868b150606190f8b04b02ebd0c305ef3bd1a4fbda0ec05abe59ae4f412c0fbcdf73c52a31f02eae2adb451e8c0119fa327445d771697cc2c67c0bb666499ee49f04e265d63ac50f27750fa5b0a09050d8eb7b3bd1f989e0bdd072fe71a16d07df696a59b438dec80a08d3b6fbdab6ebe7c37e566ee0d67ce1ca5f0d9ff7119919d79da748c6c5452228a007f2191c4f8bf41e7b96e8794b9ed90ccd0c7ccd0af58cb76a045bde72a2e85a8bbd4b0e5d04cf629ee4b727e136cb070b89e3aa84f5d66c6bb75e942fec5404a58ca3844c32041c2aa6016ae9ab1256f4e2b7db320eef73772b7d348e805457bae8d574f3cfc58c02f884aadcb76e7172d36fc1b4b3c266ba7e5ead90151c34cc059b86538bac13866cfa2f2ee494ef2a673180a68b021afe80888ce53e83effe36ab3a3e1578bb25dd3a8d1eaccb7b5c896dd2a5e2d078b00014cfe9c2635e53374f431fca5dab43f26ef548ddab42e1fbd3847243122675964187ea4746522a0cafd6ba91ea2ac50e50f8f8c06e6e3638e6a3b3d79681d0f4e53d33c26fc2960c96a63ec022482dc706741ed7190beb9402ee1c75644510978b5e64fe390808dd4e53a2726d1c17e587c5415c9ee71622aefcface52877a77421beb2a0c81495bb1df3ad48850dfbbf86b1608b5ea78f92b23a003ad7613824170af81073c0ddd2962b7f6d2885a84842b34dc68a81ffc8d5d6cd8ecd83fe2304135eff465bef853313ec943861a32339192572041b34e88e3c7cac69675c0fa59a71bb240c10c3cf18657e88d2ec571dc0d3d2d83c4af1326b99ac9a4c7cfad80378ee03f398cb245170ac219c797fb8810f89e2acc15350bdb887cad0ca58266a693df9712a501c3c044e80d0183579b4544f69694561b6cb62e56145bb63dfe22d3068cfb3752e1d5281d6df33970a703b0cd2628e0ab7a4642a3881f678c169b93e7bebb8b2552c608f09f160a206b1c34713779aa4b55320cddc6d050c350d0492f54e3f1d899e3be4ca8f65a4dbefcb68a1a20416d4bf912712f98a6813e8d3ea8bcdc92157aaf9522280dfbfc8d0f898dd5498aaa335843ae3c8db662f7cd1c36f4666a0beb613b3b8bbcf609117701f6ffefa1a3d8261536af3d78c6637de75cc6cd56d2d415cce6f13c762be304b972a62279e86fff76ca5fb8abfa005c6194e86b992307f67e27cb9d4c7a8a38a6ff5312a94d67f8da717d9825458c9d2c2c6a30689b8896889c021a07d4b14a3b8209fe4425a84ec25fe68e890f3ddac933f4cd3f915a812fe97bf296435babee4f6316690af7c4a5a0ce6e08095a69660e215e7724cb45a4eee67a8d5dd4f347d6c9ba8f109796d82e653657920ab363879b43288105e61d36a2d52148bb103eb7658dca948c717a401d9cdb9881816c782126b6e8ac0b1b5a9ef79f1aa016a6499351df8032f014da33c0995a608c489196b298dd4da6c560c521157ca3536c044d16156606b9b3c3b503fe12f53c8482405ba081deacae66156a36e3dc6b33d1d5c0f87a73d8c242f9737ee7db640cf67f844cdb9f65d1ff25e43dd72edcc50ab3e5f9f68fe0e35666aecd8eaf792d0cbe4b66da8c313b608bafccb6d8e3be6ddfb8b94b63535d1e11c314607bcdfd7b43153a35acff37508dab00651c7b084df7a3e0664af44bd3b14ba0177bea8b2d89efc9ae220287bf6765699019520891db3693830054c252fb8bfdf40467d2dee96ebb52d0dc7ee62fe98ef3d84ea9f91bf25f9537343d32925812206b8f17cbb29ddfac69b48ee733570d839b314e92a001d2312feeaea37a0683b5b634fd64051f7632463be0b3f03ee0057795fd800a40fded1059838c3015e5654ced82c1e73eefae4ac5055cb91051bd0eabc69ea381c9eb7af01ddefebbec75711b13f0ae67d6732908fbeb4ff56f0cf764f2e140092f7f34e3130d8ddb4734a54b13b9711ef1e458cb1b6e125db8de06b0702dfb60ee3e01a167eb9e04753034bf40853b368b8e602f394e5b88eef865353fa39dbdfda93422ca970839a500c27e0ff1b990c7e85dc81c1670fec52a4f22e9de40323d30a6fc7304588caaf62d467f72c243d11b1a88f0c46c025fae3f3feadcdc2d9364a1933b6574b9f8cccda2819dc65b84b916671db925289c6ecb59de7ae11ba8d7700f555d553b6067ed02406ff118259e77d3dd951d076458a9fd0ac61e942f0ec81e6a46ea48d0eab8da1c98c433c103d42e902561515da0768ba4e84eb2d27c20c40523f995a8d23e7a24e7c55a6a75f7954bbcd59ed68c8b1765a7428de709633de32fabe950cf9840f68894d8e77c25fa43d92fa257eb87114f61d08684f79d0c8ed172106fae1b8a33b0889ce1cdeab0077d55d4e8529b6890154534b1fe67237133c2d970c95c712cbf27e9999d0f0622f07b4610d4dd8789c3d6b28756c8411f82c53d8c75a37d2ea72aa60dc961e25dffb3254382daecb45e2a7c8e346f77a702888163db7b3cba2ef1", 0x1000, 0x6}, {&(0x7f00000000c0)="10751e1547d6ef7841a7c1cfae613acf04c53f17585687686aaacacad9f7cfbcc2bfcb7abaf5941ba5849c25f23925d9211afc68c07bdcf435dae700ea4705992f793ba93962d4388b23c8f9381261227e7471c9308d5657862e5e3c31afab387a071944048c0dc5e8988b9964a638c5c259548cc0887c6ac6b8bf2d4444f1d46d8ceec76495c001c992c6f8d6a98674ee1407a4d80ad237a0c035cfbda36848e2c3ce7e59e129d63251885bbd078e06394249596daf583f7d1ca7db07630fc12931e5672e4f536c", 0xc8, 0x9e}, {&(0x7f00000001c0)="c27ab61ff141fae1c796df22e4b031e07d1c922513aa290719e40e6ac9cdfb04295578421a71ef95b60aef63a9c6028a7679c810bbdf58ebefc098632f6fec02b675e19357c7a80909901f97ca78abcdcaf08f3a4235c79aa7db70c74dfc28496db5f9c13968565e76a0b6aee3fd92db80c93ba7aa58b821c83f889325ac7a532746094bbb009b930fdddf6056cb864b1ae33d220f0837732e05cf4c860c0173da6e064744fcfede0e36036c413b56cd26b1fd8aca4f9afff6c7884cae8adc1c3e77a6a1812e85358a959b", 0xcb, 0x5}, {&(0x7f00000002c0)="7e2f7df221e9733c5693c2c661dd8b950cf97ec8ee319cc67ff108c364a40fced571d2569acc64250b19eb92bbaa79017da825d8e745b0d38fc7c5fc435123ae02c86f53128066bf34ecb1b622424f2b371d59c432c6e9e6cebe724623d0ed7cf1e0d330b62346b57213d5dc88dcfa40d63a3c7a0741848cd09e851feb32138b53691d1a9d5b91605960b74d3ee9593f930c68ea606da8713d53244db04d8df08fe5759893d2edab0f2d55e585133e5c457762d949", 0xb5, 0x7}, {&(0x7f0000000380)="bdef723d8ddf3b34414355de8b419b25cf4c8a323c93a97772e23df9dfc71c42cfc03f5529fcdb60a2837a34293c911a5c71c98f727966be8475e6f6b1cf5248ba5658e7b00976b9b9a8fe84cead88884d5c3815e50c86d4794f48af6d053ffa4068f7cf9a990643b187bc352a252acd86bef99c8e5ded3d1d538c9269500abf0047984166136926a1790ba9a9384d39eb5759c8860d9ba7f3d3b6357dd854f998e510cd85194630f6844e45a4d64d787f651a46eaa03912add2cb21bdd5229705b9c1626f268da9435eab520df3b234ebaeadc9aa45ab17fc65f270823d10e82dbb06ec65a7b692f27951b6dc06", 0xee, 0x1f}, {&(0x7f0000000480)="652d49dddd0eb8f45870fc8d066c0057bac539901d6cd2d164f1736553d1e5a6e33d4bd3757656ba47f39a3c1a6c7ec970121abdaec02dc3448c3c763816626431be192330e20c3a24f6dd3a04361dd11fe04db46f8a", 0x56, 0x7e}, {&(0x7f0000000500)="09114dc986dde424780ed3673f7538f414be47a75517fcf412416e1bd7fe16df950521bfbdbfa26c61809bad70f62759ad883c131a14df17dae7db3ebe3fe2e741ee5b2c0fa7d00f073500380cd8f80300bc9166100cc93f9fb6d7237b1dc603e13561934bcd36ac9ab21d8f", 0x6c, 0x8}, {&(0x7f0000000580)="11f8d73aa868dd417fbb3f0b94fe74eef4323b19d3eff5860f5cb0911a98bd986325275c33f3322b7de73e09be6ce958db6020754e4c44f03f5695e606d90d8974fe50f0e4957c346b3c6340a97b5efc49c561bcf1f2bc9604feb9bcee00443fceab2cd52da4f8304cd9d026d56929deba8bfb01e47b73921a2c051d8cfbf804acc4335e38f2bf3734397f7c98f61bef665658d001c639bb0d1f29426ea04b54a3a7111f8049485b5e9a7b09e26c87a084a035de1837e102ad7101faf23f37889cf4e6fc3487bdf2643ce26f8e1831fe230acce43160943d34266f4859a1fb", 0xdf, 0x8}], 0x2000400, &(0x7f0000000980)={[{@uid={'uid', 0x3d, r2}}, {}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, ')<\x11\x83\x7fF\xe7\xca\x95T\n~\xf0\xc6\x15\xcd\xab\xe2\x852\x94)\xe2\xb7]\bpM\xa5\x03\x1b\xcb\x9b\xfe\xba\xdcZ\xbff\xd1`\xa0\xa9\x06\xa3\x1b\x1a\x03\x864y\xa3nl\xfb\xb8\\\xbcTh[\x19Ly\x1bT\xc0\x88\x16\x0e?\x8f\xa1\xe3|\xb1\xeb\xb9\xb0\x88\x02\x0e\xa72-\xb6\xab\xe1d\xabh4\xfb7\f\x15\x85S\xfd\x1b\x92\xfd\x90\xb1S\xfci\xfc\xac\xa8\xc7`.\xd9p\xe9-\x8e\x85\x05\xe6_\x86\x1f\xa5\xff\xbaK\x93]\xe3\xef\x8fs-\x19\x8e.\xfc\xbe\xfcks\xc0\x17?\x7f{\xf6\xdbGU~|\x81\xa9x8\xda\x82[u\xf8\x15+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x36, 0x66, 0x38, 0x37, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x35, 0x33, 0x36], 0x2d, [0x32, 0x62, 0x36, 0x65], 0x2d, [0x63, 0x64, 0x31, 0x65], 0x2d, [0x6073c767a31b8e81, 0x37, 0x64, 0x63, 0x39, 0x33, 0x32, 0x36]}}}, {@dont_hash}]}) 05:45:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xa8, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) 05:45:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) (fail_nth: 1) 05:45:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:45:54 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x9) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000eb8b0102ab27a99d00d00c7dbbd2eb3bc05ac1228b34724ef27734f2053316879ea2c7648fde3c7f4730ade725fecc304ccfc13365d031635dcc90ab755cd8eb8cc7105a538646bbe010c9411310d818bec7bb77b607608d56d3035714d137e1", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 05:45:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 2251.666388] syz-executor.5: attempt to access beyond end of device [ 2251.666388] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2251.667587] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:45:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:45:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r0, &(0x7f0000000040)=""/38, 0x26) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1948], 0x79c) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x26415a4e6f4b4303, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "dfae17459d401125953418f111f9231f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x40001) 05:45:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000e700002e2f6669"]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/snd_seq', 0x0, 0x0) close(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="0100"/12, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:45:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) (fail_nth: 2) 05:45:55 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) mknodat$loop(r1, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) 05:45:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 05:45:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2251.842814] loop5: detected capacity change from 0 to 40 05:45:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:45:55 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) mknodat$loop(r1, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:45:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2252.028575] syz-executor.5: attempt to access beyond end of device [ 2252.028575] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2252.030623] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) (fail_nth: 3) 05:46:09 executing program 1: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r0 = getuid() lchown(&(0x7f0000000040)='./file0/file0\x00', r0, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0/file0\x00') 05:46:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:46:09 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r0, 0x4b36) mknodat$loop(r0, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:09 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 2266.566479] FAULT_INJECTION: forcing a failure. [ 2266.566479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.568254] CPU: 1 PID: 12436 Comm: syz-executor.0 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2266.569067] loop5: detected capacity change from 0 to 40 [ 2266.569347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2266.571633] Call Trace: [ 2266.572005] [ 2266.572341] dump_stack_lvl+0x8b/0xb3 [ 2266.572917] should_fail.cold+0x5/0xa [ 2266.573470] copyout+0x19/0x120 [ 2266.573957] _copy_to_iter+0x576/0x1430 [ 2266.574526] ? find_held_lock+0x2c/0x110 [ 2266.575101] ? csum_and_copy_to_iter+0x17b0/0x17b0 [ 2266.575791] ? lock_release+0x3b2/0x750 [ 2266.576386] ? if6_seq_stop+0x1a/0xa0 [ 2266.576974] ? lock_downgrade+0x6d0/0x6d0 [ 2266.577571] ? __virt_addr_valid+0xfe/0x340 [ 2266.578205] ? __check_object_size+0x380/0x800 [ 2266.578876] seq_read_iter+0xdcb/0x12b0 [ 2266.579477] seq_read+0x16d/0x210 [ 2266.579990] ? seq_read_iter+0x12b0/0x12b0 [ 2266.580614] ? lock_is_held_type+0xd7/0x130 [ 2266.581278] ? fsnotify_perm.part.0+0x221/0x610 [ 2266.581970] ? seq_read_iter+0x12b0/0x12b0 [ 2266.582578] proc_reg_read+0x22a/0x300 [ 2266.583154] vfs_read+0x253/0x930 [ 2266.583669] ? proc_reg_unlocked_ioctl+0x2f0/0x2f0 [ 2266.584369] ? kernel_read+0x1c0/0x1c0 [ 2266.584963] ? __fget_files+0x270/0x450 [ 2266.585572] ksys_read+0x127/0x250 [ 2266.586102] ? __ia32_sys_pwrite64+0x220/0x220 [ 2266.586769] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2266.587479] do_syscall_64+0x3b/0x90 [ 2266.588023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2266.588777] RIP: 0033:0x7ff8a1dd2b19 [ 2266.589309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2266.591773] RSP: 002b:00007ff89f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2266.592835] RAX: ffffffffffffffda RBX: 00007ff8a1ee5f60 RCX: 00007ff8a1dd2b19 [ 2266.593827] RDX: 00000000200000e9 RSI: 0000000020000040 RDI: 0000000000000005 [ 2266.594826] RBP: 00007ff89f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 2266.595805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.596808] R13: 00007fff3750b76f R14: 00007ff89f348300 R15: 0000000000022000 [ 2266.597818] 05:46:09 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:46:10 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r0, 0x4b36) mknodat$loop(r0, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) (fail_nth: 4) 05:46:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x1ff}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000480)=0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x48, 0x0, 0x0, 0x8, 0x0, 0x1, 0x24008, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f00000003c0), 0x8}, 0x10040, 0x644, 0x1ff, 0x0, 0x401, 0x7bfe, 0x0, 0x0, 0x67d, 0x0, 0x8001}, r2, 0x3, 0xffffffffffffffff, 0xb) fallocate(r1, 0x0, 0x0, 0x87ffffc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r3, 0x3, 0x80000}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) [ 2266.850568] syz-executor.5: attempt to access beyond end of device [ 2266.850568] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2266.852548] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:10 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000300)={0x0, 0x1df4, 0x4, 0x2, 0x285}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r5, r6], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r7, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000480)=0x2c) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xda, 0x0, 0x80, 0x81, 0x0, 0x3, 0x8010, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x16a727d1}, 0x202c, 0x0, 0x0, 0x6, 0x4, 0x0, 0x472, 0x0, 0x6af, 0x0, 0x101}, 0x0, 0x6, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 2266.963750] FAULT_INJECTION: forcing a failure. [ 2266.963750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.965728] CPU: 0 PID: 12460 Comm: syz-executor.0 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2266.966844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2266.968341] Call Trace: [ 2266.968727] [ 2266.969044] dump_stack_lvl+0x8b/0xb3 [ 2266.969602] should_fail.cold+0x5/0xa [ 2266.970129] _copy_to_user+0x2a/0x140 [ 2266.970686] simple_read_from_buffer+0xcc/0x160 [ 2266.971339] proc_fail_nth_read+0x198/0x230 [ 2266.971950] ? proc_exe_link+0x1e0/0x1e0 [ 2266.972544] ? security_file_permission+0xb1/0xe0 [ 2266.973221] vfs_read+0x253/0x930 [ 2266.973726] ? proc_exe_link+0x1e0/0x1e0 [ 2266.974283] ? kernel_read+0x1c0/0x1c0 [ 2266.974863] ? __fget_files+0x270/0x450 [ 2266.975428] ksys_read+0x127/0x250 [ 2266.975944] ? __ia32_sys_pwrite64+0x220/0x220 [ 2266.976610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2266.977318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2266.978046] do_syscall_64+0x3b/0x90 [ 2266.978584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2266.979292] RIP: 0033:0x7ff8a1d8569c [ 2266.979815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2266.982177] RSP: 002b:00007ff89f348170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2266.983221] RAX: ffffffffffffffda RBX: 000000000000017a RCX: 00007ff8a1d8569c [ 2266.984176] RDX: 000000000000000f RSI: 00007ff89f3481e0 RDI: 0000000000000007 [ 2266.985174] RBP: 00007ff89f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 2266.986138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.987100] R13: 00007fff3750b76f R14: 00007ff89f348300 R15: 0000000000022000 [ 2266.988082] 05:46:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2267.123683] loop5: detected capacity change from 0 to 40 [ 2267.220442] syz-executor.5: attempt to access beyond end of device [ 2267.220442] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2267.222070] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:24 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:24 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r0 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r0, 0x4b36) mknodat$loop(r0, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:46:24 executing program 1: r0 = syz_io_uring_setup(0x2eb9, &(0x7f0000000940), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x40010, r1, 0x0) 05:46:24 executing program 3: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x2, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}]}, 0x48}}, 0x0) 05:46:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:46:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x36) [ 2281.507570] loop5: detected capacity change from 0 to 40 [ 2281.579505] syz-executor.5: attempt to access beyond end of device [ 2281.579505] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2281.580706] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:24 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:46:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:25 executing program 3: syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0x20, 0x22, 0x0, 0x1608, 0x30e, 0xcf0f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) 05:46:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0xf, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) clone3(&(0x7f0000000940)={0x2000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/110, 0x6e, &(0x7f00000018c0)=""/4096, &(0x7f0000000300)=[r4, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) recvfrom$unix(r2, &(0x7f0000000380)=""/100, 0x64, 0x2100, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0400000105010800000000000000000a00000254020100010000000800000081010400ff071d0073797a3100000000000000000000000000000000000000000000000000000000dd6dd6976561d689af695a29cd624923ad284655f061044bf4ec23d80289ef1ea36723405a0ba3e8d8288b55be16359c6e340dfab72980c59ea0e334166615815600f800010000002411000020000200010000001f0000000300800001000000f9ffffffff0700000100000000000100ff0001000100000003000000070004000300000000800000a8030500030000000900115f35bafda72b8c00000200dd0c03000000020000000800010401000000ffffffff0700ff0101000000090000000400040002000000810000000500800001000000060000002f03090003000000000000004000060002000000000000000800bed70300000006000000080020000000000001000000a80603000200000008000000aa59040001000000ff0700000000200002000000070000000300ff0f02000000030000000500ffff000000000000000008001f0002000000090000000500ff0700000000800000000700080000000000000400002b0898f4000000001f0000000400000203000000ff0300000300215800000000ffffffff0a00000000000000ffffffff9b9cfdff0100000005000000070001fc020000000400000007008f00020000000000000009000001030000000400000004e206000300000008000000030009000000000000000000ff07ff0000000000190e00006d09040003000000090000000200b900010000004d8c00000100018000000000080000000000040002000000000000000500400203000000fdffffff540201000300000003000000010000022000070073797a3100000000000000000000000000000000000000000000000000000000e412925be4269bf0b8946cd43fec9e6cc6cf338d6e6e3212a043ffc99dd4b602752c95c1f8363c3ac95cf33e3245224a6a50be2315670c0c43d2c76c413d9bbd040040000000000000080000070009000300000006000000010009000300000001f8ffff08000500030000000000000027e903000300000008000000ffff03000300000003000000ff017f000200000004d934380600030000000000ff03000004000700030000000800000002008000000000000400000008008f0803000000270500007f00c3b700000000cb0000000020000000000000400000000400070002000000ffff000091060400010000001d0e00000400020003000000ff010000080008000300000007000000030008000100000009000000babb0300030000000200000004000600020000000800000000fe00020100000005000000690103000200000080000000ec00ff0f03000000070000000200010002000000000000000700ff0002000000010400000900e40002000000001000008d080008010000008ce600002800001001000000020000000000000002000000070000000000060002000000f80200000104040003000000400000000200050000000000078a793e080001000200000009000000e3041f000100000004000000ff0f001000000000000001000008680401000000010000000101f3000000000008000000040003000300000005000000c671000801000000200000000100090002000000090000004e04ad6b87907550da36468b57d2e0af6f1a985d69b9d9f4dd3728c12c951abc777394c6b39ad71996a3d54f4a"], 0x4bc}}, 0x4c001) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) [ 2281.738191] loop5: detected capacity change from 0 to 40 05:46:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 2281.785882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.788276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.867954] syz-executor.5: attempt to access beyond end of device [ 2281.867954] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2281.869102] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2282.292347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.294278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 05:46:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wg1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) syz_open_procfs(r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)) 05:46:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0xf, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) clone3(&(0x7f0000000940)={0x2000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/110, 0x6e, &(0x7f00000018c0)=""/4096, &(0x7f0000000300)=[r4, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) recvfrom$unix(r2, &(0x7f0000000380)=""/100, 0x64, 0x2100, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x4bc}}, 0x4c001) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) 05:46:39 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 1) 05:46:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2295.861541] loop5: detected capacity change from 0 to 40 05:46:39 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x6c) [ 2295.904288] syz-executor.5: attempt to access beyond end of device [ 2295.904288] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2295.905382] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:39 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) syz_io_uring_complete(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) [ 2295.936303] socket: no more sockets 05:46:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x0, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2295.985485] blktrace: Concurrent blktraces are not allowed on sg0 05:46:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 2) 05:46:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0xa2) [ 2296.081683] loop5: detected capacity change from 0 to 40 05:46:39 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2296.169592] syz-executor.5: attempt to access beyond end of device [ 2296.169592] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2296.170584] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:55 executing program 2: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0xd8) 05:46:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x0, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:46:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x83) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000ade3d1533b6848d6050580454c1ea9f224e3eabb312207000800007e868872d8e8c0ddc9463e8092f8ba513ce30e2d662a718072009055e046d40fe52314eb225ea42bd7a6846bebcb142aacb89ded93ed4c79e0f952da56359088cfdd10ba9c86fa940000d6266f7c9a0190d22ea5e996aa081a1e00e648aece706ec433ac685ae9e4370ea4da76d14cc11e0e29fe0fc99604a4d8ae7f9e29317f2c77fdbcb272fcf5c5d66e34d223de242479232990dbe085b10f0496250787a7581f52afcfbe1d261d3030169e681762a0455f875d3dbf450b", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)=ANY=[@ANYBLOB="2a99f4bad69af0222817f2e9705d86809820614069d005a5316454211049e45e663c9252fd90ecb02500ec8040e8bd315fddbe4fa42633406418d358f6e5457da59577281098885e3d00e14a3763915301c215a90a3023003cb4c4672d6674e20b44eeb96d7d0000633f904cd17e274907ccd0359b70d84daf4160c1e7000000000000000000000000000000008287ef1fe42e69ae6daf30c5e05db04400c4cb442a68a40dd2cedb76d12d430fa2df7646e6a13c8a1d9266f9f1a4fa33227d00129ece95a94c7bba3ed732696106000000e8bbbaab2bf6f8f303", @ANYRES32]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) fcntl$getown(r1, 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) close_range(r2, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x31, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x90) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000240), &(0x7f0000000340)=0x4) 05:46:55 executing program 3: syz_emit_ethernet(0x2fe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 05:46:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 3) 05:46:55 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) perf_event_open(0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000013500)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/136) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x14000000000000, 0x7f, 0x10001}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 2312.030248] loop5: detected capacity change from 0 to 40 [ 2312.037651] socket: no more sockets 05:46:55 executing program 2: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x10e) 05:46:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:46:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:46:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 4) [ 2312.214535] syz-executor.5: attempt to access beyond end of device [ 2312.214535] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2312.215680] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:46:55 executing program 3: r0 = perf_event_open(&(0x7f0000000ec0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0400000000002affffffffffffff3000"]) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0xe4, 0x46, 0x3, 0x2, 0x0, 0x4739, 0x6051, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x6}, 0x4840a, 0x3, 0x0, 0x9, 0x3ff, 0xfffffffb, 0x5, 0x0, 0xfe7, 0x0, 0x1000}, 0xffffffffffffffff, 0xe, r1, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x7f, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffb2, 0x810, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000440), 0x1}, 0x10010, 0x602, 0xfffffff7, 0x3, 0x1, 0x2, 0x4d, 0x0, 0x10000, 0x0, 0x3}, r2, 0x7, r0, 0xb) r3 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x8, 0x6, 0x4, 0x0, 0x6f39, 0x28350, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf224, 0x2, @perf_config_ext={0x1ff, 0x1f}, 0x8000, 0x1ff, 0x1000, 0x3, 0xfff, 0x80000000, 0x400, 0x0, 0x7fff}, r2, 0xe, 0xffffffffffffffff, 0x3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x2ea, 0x80) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x20, 0xe5, 0x3a, 0x4, 0x0, 0x6, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x40, 0x6}, 0x100, 0x6, 0xe0ea0903, 0x5, 0x3, 0x9, 0x2, 0x0, 0x100, 0x0, 0x100000000}, r2, 0x8, r4, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x6, 0x1, 0x3f, 0x0, 0x80000000, 0x3050, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8, 0x80, 0x3, 0x6, 0x908, 0x7, 0x4a8, 0x0, 0x800, 0x0, 0x101}, r2, 0x2, r3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/locks\x00', 0x0, 0x0) dup(r5) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7, 0x1, 0x7, 0x76, 0x0, 0x6, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x20, 0x9, 0x1, 0x5, 0xffffffffffffff81, 0xffff, 0x9, 0x0, 0xfffffff8, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r6 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x8, 0x1f, 0x1, 0x9, 0x0, 0x94c, 0x40000, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc8, 0x2, @perf_config_ext={0x0, 0x3}, 0x4000, 0x8, 0x6, 0x9, 0x9, 0x8001, 0x8, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x80, 0x6, 0x0, 0x8, 0x4200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x8004, 0x6, 0x80, 0x1, 0x4, 0x7898, 0x4, 0x0, 0x1df, 0x0, 0x5}, 0x0, 0x7, r6, 0x1) 05:46:55 executing program 2: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:46:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x0, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:46:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 5) 05:46:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x144) [ 2312.413653] loop5: detected capacity change from 0 to 40 [ 2312.481187] syz-executor.5: attempt to access beyond end of device [ 2312.481187] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2312.482238] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 6) 05:47:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:47:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)={{0x107, 0x6, 0x0, 0x77, 0x2a7, 0x1, 0x2d6, 0x9}, "92b2773f4f4ed6b3c2605aadd83dadd24285e8b082aa1cf264f4d357cedb835856a5b97e8689f8562d53232f4b33c2c261edec6d746febd2a15adcbdf01e4d3e1c035f0fd380dd09d44192108f9c7998c10a99d3e0855ddce26e3dd7", ['\x00', '\x00', '\x00', '\x00']}, 0x47c) getgid() r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x44, 0x7, 0xf7, 0x3, 0x0, 0x9, 0x1010, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x400, 0x3ff, 0x3, 0x6, 0x5, 0x3, 0x4, 0x0, 0x1, 0x0, 0x353cf465}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000200)={0x6}) write(r2, &(0x7f0000000080)="01", 0x41030) 05:47:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:10 executing program 2: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:10 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={0x0, 0x1, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xdef6, 0x4000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0xffff, 0x47}, 0x42, 0xffffffffffffffe1, 0x9, 0x7, 0xfffffffffffffffb, 0x7f, 0x7ff, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xb, r2, 0x8) getsockopt$inet_int(r3, 0x0, 0xc, 0x0, &(0x7f0000003580)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendfile(r3, r0, &(0x7f0000000240)=0xfffffffffffffffd, 0x6) 05:47:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x17a) [ 2327.540605] loop5: detected capacity change from 0 to 40 [ 2327.625136] syz-executor.5: attempt to access beyond end of device [ 2327.625136] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2327.626293] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 7) 05:47:10 executing program 2: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000b00)='./file1\x00', 0x30200, 0xc0) readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/135, 0x9e}, {&(0x7f0000000200)=""/101, 0xffffffffffffffea}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r5 = gettid() rt_tgsigqueueinfo(r4, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADMODE1(r6, 0x40081271, &(0x7f0000000080)={0x0, 0x4}) ptrace(0x8, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(r5) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 05:47:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x7ffffffff000) 05:47:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:47:11 executing program 2: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:11 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2327.817093] loop5: detected capacity change from 0 to 40 [ 2327.895281] syz-executor.5: attempt to access beyond end of device [ 2327.895281] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2327.896355] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 8) 05:47:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)={{0x107, 0x6, 0x0, 0x77, 0x2a7, 0x1, 0x2d6, 0x9}, "92b2773f4f4ed6b3c2605aadd83dadd24285e8b082aa1cf264f4d357cedb835856a5b97e8689f8562d53232f4b33c2c261edec6d746febd2a15adcbdf01e4d3e1c035f0fd380dd09d44192108f9c7998c10a99d3e0855ddce26e3dd7", ['\x00', '\x00', '\x00', '\x00']}, 0x47c) getgid() r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x44, 0x7, 0xf7, 0x3, 0x0, 0x9, 0x1010, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x400, 0x3ff, 0x3, 0x6, 0x5, 0x3, 0x4, 0x0, 0x1, 0x0, 0x353cf465}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000200)={0x6}) write(r2, &(0x7f0000000080)="01", 0x41030) 05:47:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x13301}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x84, 0x5, 0x2d, 0x0, 0x9, 0x8013, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x7bc39bb3f88feff6, 0x9, 0x8000, 0x1, 0x9, 0x1, 0x8, 0x0, 0x200, 0x0, 0x4}, 0x0, 0xb, r0, 0xa) 05:47:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66b58c93638bf36f6e906c5a96f4fabcc4696c74657200000000000000000000000000000000000000000000000000000400"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2342.006166] loop5: detected capacity change from 0 to 40 05:47:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 9) 05:47:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) [ 2342.161349] syz-executor.5: attempt to access beyond end of device [ 2342.161349] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2342.163428] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = fork() perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x6, 0x9, 0x9, 0x1, 0x0, 0x3ff, 0x30060, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x10001, 0x3, 0x2, 0x8, 0x5, 0x9, 0x9d0, 0x0, 0x200, 0x0, 0xfb4d}, r2, 0x8, r1, 0x1) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:25 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x42) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10000) [ 2342.292808] socket: no more sockets 05:47:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2342.537570] loop5: detected capacity change from 0 to 40 [ 2342.628665] syz-executor.5: attempt to access beyond end of device [ 2342.628665] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2342.631354] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 10) 05:47:41 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026eb90f6e091cf39bdd96ef5d570576dda06ff03355752fb06836e94eed0772e7a472cadda236d5980cebe7b0061ae61d11912211805e00f9db97a162968"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000002880)=""/122) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x16, 0x1, 0x3}, {{}, 0x14, 0x3bcc, 0x12000}, {{0x77359400}, 0x1f, 0xfff, 0x4ea7}, {{0x77359400}, 0x5, 0x8, 0x277}, {{0x0, 0xea60}, 0x5, 0x6187, 0x9}, {{r4, r5/1000+60000}, 0x1, 0x800, 0xffff0001}, {{0x77359400}, 0x3, 0xffff, 0x9}, {{r6, r7/1000+10000}, 0x14, 0xfd, 0x39f}, {{0x0, 0x2710}, 0x16, 0x9, 0x5}], 0xd8) 05:47:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000240)={{0x66, 0x6}, 0x100, './file0\x00'}) eventfd2(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x3, 0x1f, 0x8, 0x0, 0x7805, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x10900, 0x75d, 0x40, 0x3, 0x7, 0xeb86, 0x81, 0x0, 0xed9, 0x0, 0x99}, r0, 0x2, 0xffffffffffffffff, 0x0) 05:47:41 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) [ 2357.854578] loop5: detected capacity change from 0 to 40 05:47:41 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 11) 05:47:41 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x11c07, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r2, 0x6, r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') perf_event_open(&(0x7f0000001200)={0x0, 0x80, 0x80, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x800, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x10001, 0x101}, 0x8c03, 0x9, 0x4, 0x9, 0x5, 0x371, 0x6, 0x0, 0x7, 0x0, 0x7ff}, r2, 0xb, 0xffffffffffffffff, 0x9) preadv(r4, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendfile(r0, r4, &(0x7f0000000140)=0x8, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) inotify_init1(0x0) 05:47:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:41 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2358.039183] syz-executor.5: attempt to access beyond end of device [ 2358.039183] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2358.041311] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = getpid() perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x51402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, r1, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000300)='net/tcp\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r5, 0x3, r2, 0x0, 0x80000}) 05:47:41 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syncfs(r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1f, 0x2}}, './file0\x00'}) r3 = pidfd_getfd(r2, r2, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000008) r4 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="8100ff7937b28c79eb7e6bc4f64888eb46d6fff57519be3fa018a7e08512e9490b2cb48a31d0fd665d810c39c1ecd29300d1d8ac3e1dddd4c21dd7ab59ae05f3494e1192d169840a41ae6e090a8947c21226295a8110d1a8cb4042be4c41459c159761f3168be6735b7c2fbf9fdf7dbeba560257ee6cb634e37b45cd6ed1f3fcbb6fb461cfb28193b8b3d7695196f50a4d0edb0cfb561242ac078abed877502f43e056236cb23f18d981cde7e5b59abf566f15650345385ae471b9a49e88b45167a0f4e36ce568ac65e67d01fb82c94c74c238101e352450e612195e1c10b42155287f84e363545da5cd176551a1a29d89a851405dd807f578eff67f14f26ef470d11c01129ac1c657580626cabf621667a4c6cfe5a2d424a056e94573b24ad3dee9ae74d7ea3a7447aa0e64e4c485829807c0e8df339eaa094c06f91a45b1390dceebd7e78394e26e0f23a278b79f4661441336f1f00226333d468a0ef9de70da5134b667b189b7f1fa92136c9d23e8a027f2b558a758af31d39d4309de4e3e6baaf0a22c6df21b0de69143be05cd7dcfe8e0ac1fc7d0dcf0383afd8252eb5a0f71733d4db91df51b77081e9953c6e16e4b71d86ffe944238963cb2c27dde897282c7235283db274b4ef9a14804c637e8b6c7bc830b93727c5a3822837a28ce60369692148cca5f314ba62a0956e8a6ada7f98b66dc9e278ec73cbcd8fc78bf03f91867835ab901722bb48254beedf8ad7b130eb5641d02e1f46ea710c488953f481c6e7180477a41a7411541054292df608abafc3194c1ee1966b50fa9b2e1822d904b9a004e9460212209916f2248fa047a76ce59725b626099e7a7e656214660bd4ae87e6aeda59f013cd297e42447da47a9cf26f12ad098da172656e72e1555b12385550eb6313e0d5e30dc724e0f43572ebf0a41b538e591ebf2c4f816cbe07bb216a3d1128a5e424586c914fe8138cbf54e1e61e8365d365460dff0dc78d03e87645671f0be6855dc92403b98e075dab68f08b7bfa2901c68723b0182a79d18966e049e4c2554c48ab8788575dd3b4292e926cf7767bb097ea159852b8704ca653ea5f477a85caf227172bccf2e185e1badbcb49d732bcf520b08105498a25f7ff31e1182e85ff66a2ada10fd5878583aa495d02d8c5b055d25f62798bb5ee46e1d518f398e067fb857b1463c89d46eed23a1f6c78356a037fc0063931916068c10901fcab3688664a609fcbec50d30a2edbda20a448ee575ef1d6bc30df64e1e930a9a38d5defdbedcacd88035d63e905624001802383828a3e1167f1cfb1a3eb154ecafc55b8709a2910a595bdf166ca318ca054fd1e9513f653aef50b5ef33a7d7d553e2c871a2f283c891036a85962fbd06a3c45bac5fbae17ea742d01707238224c5a534d3da6d3fb9d06a874a375e3fe08f85605246dca4d394e750798f4b061ceaef6fdaa3d2683af476f9dd3a63d3e82d0de50e71a04ffc2f51f53cb09f89e300eb6ccd1856d140f90b605ee28b87908ddd21817ae552a87133ee0a6dc76ef5017833850eb30d9dd43fb4ea4a4abc781d01cbc257b4d0704a35a13cf147dca268f237d8f4f6e9f8110f2d24bbf12d9201bf221097282f9f3b06e17ca2223437e4b285a4267a31b04a2398b04a5027cc89523b940d678f8d5badc521d891a5b860392542ca97c62910849771e99824af4e105f432ef0f9b350ba1829ffea0d056fa4510ebbe9248a81ca975fbe599801a5ecbde098f8d9b2dde7b48e0aec3d7338e1d1badc3c2c308eeb9afed71164385daa3620c59e665684b1e63a60db30526bedc7a5d90ff1a355cdb346c7aeadef534825c33a82c244b2c4b5804190d5c3a69663c1a1b2dce7dca42cabcbb95748869008d43f535853e79724f7cde62ad3b6e2a1ab39f26ac885ad7681f39496e65cbd82b12768393825d80a1a28f03e33217ab0ee34ca719f9f6394bdeaaefc7a1594c28ae4fd073e90b46ead18d902b07a60b68c3a71382cf7b45f1c2038f361c440b8e3c91ca1ca6ba90706ce9ce0615b90d1f4ecbeaecc162f1cb34479886c3cb7d95d3ecafb5943278a248279b8ee63b796c3ea38ecb7785eebbb16bd8d1849fe89c6fdd954e7987819b6f2c9f3d0d684ea7bbc44d159e7b32545e42fec55767019f95ebd52ac4d8a06d9af2cfe14fdb83140c357a8bfb164c852dd78a535a23dd619e43e4ae1f30bbce6ed9f8300d21cbac8b6be4a54471d494baffe9678870242c37c8331832aacbc33cf4edd1cedba64e2417f0c28be6fe15b550dc7b9581634e787dec6ffb0d62606ccfab181d5cb97258390a32daf1eb5447dfbd86c410688228e84c6a0f0949f455c7391fc658161dbe1b53d0049f1125138a06a908d9ce130718d19aa60e6becce38e2df4d9f7c5c797d6ba7509209352518b15fe62275329a9bc2ff801b86c0efa201cf05f7390ce5427c20c68714c4615b00cb9ae85c72deb19d728bd5ada8dde4bf572cacfa2b0412f899f0a302964071a967d231219f7e34cd12d07add4fdd78ae74d8e9cb3e49024e76230e4fcef71d4dc4d245cfc6031bc0af97aca8dc83deb7e15d9f34b920208c8cbac8a6a7b3f85a129ed8ffc53c08f70283bfcab5438ed72ce5a59bc1fffa8b3bf6ec5aa934534863ac724db2a81a7d691d9a4a94237855f32a620bc0df779811bcc631ceeb47ae904cafb8fd2a846d555f2649ef7d553bf7f02a5c82ad46a6ca2451d406bfeb3bb178c6e56a12e390924976de8e038627420722e471b22dc559e57d767b26079758ab15ca9ed2fd00fdf4e143abc438fbe3678131587f31a5bcf5c967556bcf69a328522fe74cb5b6553c1d71e64201760861a6411029f2446cfdc1c76fac5d1acb9b283b26bcde2f9f5491236f700e77cf10df40605b59118e85c246019775ff6230568f9f2ae8c7e2b89ba087e6929c23f04bb20e6981d7383576585a485cb03c81363ba496c57f06044c5415d45335678add70ab99792e957dc604290832442e83f74531add5154004a749e5ac0434884f3f8659e81296788f5a2f787bbddbb026f7d39a14b415b74268949098e377bbb2084c34590f39a1d733baf4ef66ccb4682456844ad06ed974f01510fb9dcd0a9d2f15097213b61c79379c93eedff1ccd36a616cff9e9db05747edd33ac11fa4b5549812c7dd2febefd0459b8b81cfc003d0135a30cb9ba4c63fbdbd1c94ef300b4e7fddf2a085baf44d32857058aa7ed22fb94838fb8cea7b59be85989f3c686b1784a494287580316dc65878215e6df18601dafc2e58a1aa1c9325b3a9450569795364d1a7199e69cd6011d2f75e371c4cce90b00704530dd32f264ef7a3ece97b613fb79f6f6fa916d294878dbb0798ac6ceed0569bff105b15e1a1a6b72d185f358e43fc4b484e44664102e9c916de0f059965a8c23e152836a357239f294f6bb103ca9140d07ff9105898f2f61684a1dd884d5011bd5191f90e83b683b26a03e6467ed61c65c5cfa959643401797cead1bd13ff8cd3b6c3dbb01c44d32c3edf3b40d487b04a869916c92ae9615c446e51c2a735228f0229bfc2e0b779bfea5052c0a0e785c0069a467da8585667f6e0a892c18332df31d2db460ba79aa1a1b6a17b75fe557267f1c4d49d2fe7d78e25a65791a5166a7185099a817414c5ef22de810ca1db4e6b0161fee52d5c6d679950a01a980c45abebb3b21358ffcfdd5d6ce8830463f224d532cb8359b34f1514a21e0de73eb400dc765292ff4ccbd6d91cc847f1e521c1566cad579118e77397fe50770bdf03e3fedc5cd39f1db952900d6f2b3cd107b46d727ef00760205f7b0057c939a7551cc40ee4abce5a70e3f55d67016be59f7365caf130c7e517b9af35941b9426110d0fb5455da8cc40b90334c9dfba680c3dd64c476de7f4fa2402794004fa4ef2b31b29bfaca295236490a2bad1d0d6f9b2cd2eaf29bd7be1d440e4ad910fc0fac02bbb421b7552f3870bfa2ab6879fbc06de76ba160d646e1c0323911a03bebcca45c50fa5acd49d3c26487e34c181063ab710851c51442896027d1f4ca856a18e28ce8e93c45d67abd76743409052f082de61340abdd7c1ff96a5a5e41feeef4bd36acb5abfb22e5699c9464673677011c724fe83f16d3e51e8b418e6a0938f3e547c1046aca68260c70cdff7809a48c14400af4421c62a061120cd662f9feedad393c176a3e449abb0bac7f738a9406bef58866256c5f32d50d43dcd9d5b05ea89476ca7e7e50d76ef3d799066dc74657340b83f26bf9a5fbe9caa6291f88d246489936b0d013455d51633e145cabefbc363c2a2a2b919d53218e00ae38e389babcba265bd6fd5e5ca875373bd6586ba69751f761ceecfde68c91e1a335b568fe28e82fef929934d47540828ca5e3545d10effe91709190b8de8efa36740932ffa7a013c86012e88f8c32df6c2785d4bd4a676d6fa2c5458447a38c6836f84d36e247cdba56f798891021b94398246d110b7f7fb429740440cf15afb5cddd8f52b51b67298b74c613069c0bac1ef0e909043613da30a0e1bc177176803c6362484f6240833e1a3876309b3c1da21b4b41d9f271b29e2f96e5ddeb8af25ecaa2ce231fb85bf22acdc4a191c2fa2cf2c5c5736af0dc0df68a5654fa4856f6ac06331d024475cd0023a6d1db7e74399acfaa6e3899adb2d60bf662cef6d889ae772fab81f810d139d0f22a91a5bf083019e66ad0c7a4ad529852b6ea2f799de72966fbed2b8426d97c3032298d8823f893ccc29fc7ae3e34da5c68758f267cd11507f80bb927e3a7db9ae38cac08a6103505e99a3beb867e57f6da6642dc7bd3878f716b1fc39edb350426f20b0663f76535a183a7a40137b8cac222c2f52e64c9ca6106da4cfefc3669c7b362c8c63089005a06e07b6c15d5eee5fa66901637d376f2ee7358b0aa5e57304c7b7baf4591485b900d1d005e13a2d08edc3b0c96d981ee8f9e6dd5849932794153c16960e7141e0b5ece2ed848580630fbcc331fd70d8678d4ba443403fa24547251fb83c1473e124461d86d6235b2a83e7772274709e685a2d8f14d9217a3e141816c906d6db812a7646f040fdd36076b7b6f67d8ae5d344e46f584c08b2a50f19d40e33e5e727ee0967ecbd566fbd953ac10f53edb65f94f97c284922cbfa78aecd16c8d4c432235e4b880fbfc29e43be4eb2fcbf1c00ff512e8e5db006c12a11934e77a1fe069cdeeaf9bc2c296089540bbccf68e1ed1723a3e350c2d0a45ae68d983c1d9b95f974ade8eb414f7c2e9d6d1f83031a16ecf418e54a56120c5668e16eaf41edd605d161df62fa5fbbdb4b274fd7b7390294a641598e724c48ad2756079a7e4006d43c8e2d9c4694829f7209ff9b39c308535e943f5eb4ef412dc1abd1c29dc449a52055a25f01a6c9ad4aeb55dcc10a97f96837c10e493d1efc6e193be6821fc58374108883270022dd4a04b0f5e908c706d998e3cc8b16ff902976d352c4c194d105c3c7fdb158572a7e84947175b60b7f4ad97a171a642794e8d46e0a0ac13fea6026ece7bf4fab67f149b499b39ce3b33071e8973258ecfa44315051635c187b4a365813792ea9b8b3e005d4e750d0cedf3c82cccf5eb2390b9384e98b82de57fb16e199175a39a6b2b39ef8abae573877af2b92998a0a3ca8fe707fe19cbdd5a55c0e54b7fc763a1e2629d7a6689fd23fbf253fb569706c318a9da321df737ce4b9bcd63aa46868000da294409eadbba41c418428c1caaf1bd5128fa0ea31101a2ff18e3d0485ba3f25291921b", 0x1000, 0x483e}, {&(0x7f00000016c0)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xf791}}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@uid_eq}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) ftruncate(r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff, 0x5}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001680)={r0, 0x101, 0x2, 0x778d}) r5 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x2) fcntl$addseals(r5, 0x409, 0xd) close(0xffffffffffffffff) [ 2358.139931] socket: no more sockets 05:47:41 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2358.313547] loop5: detected capacity change from 0 to 40 [ 2358.444554] syz-executor.5: attempt to access beyond end of device [ 2358.444554] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2358.446383] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 12) [ 2371.559264] loop5: detected capacity change from 0 to 40 05:47:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:47:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x4811) ioctl$GIO_SCRNMAP(r1, 0x4b66, &(0x7f0000000000)=""/136) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) 05:47:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, 0x0, 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001580)=ANY=[@ANYBLOB="af556c74657200000000000000000000000000000000000000000050c60e75000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000758488d23bc45f431eaabdbc5286f4b504bbae4e16a5c327e3ff3683cfd2428300e933227a6fc80c39a31a1d8b263a8d05280f1d4fa41514fc45a9a515fef5ffe6d1916f5763601c9584252c69be9ed38dd9084426e27971166cde79ad6988a7db8fe749c45ad0bc148482ec50ee2c340862460339a391138bc6529d706530476c97cd538e3001acec7051c370209a3d0e"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x30, 0xffffffffffffffff, 0x8000000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5591, &(0x7f0000000340)={0x0, 0x4846, 0x20, 0x1, 0x306, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x1010, r2, 0x10000000) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x3, 0x80, 0xff, 0x3f, 0xe1, 0x0, 0x0, 0x8, 0x20000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0xe}, 0x10010, 0x0, 0x81, 0x5, 0x6, 0x7bda, 0x401, 0x0, 0xfffffff9, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x6) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, 0xc0000, 0x0, {0x0, r6}}, 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r7, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:54 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:54 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000018, r0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 05:47:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:55 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:47:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6fa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5d70, &(0x7f0000000680)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) [ 2371.737757] syz-executor.5: attempt to access beyond end of device [ 2371.737757] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2371.740102] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:47:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001480), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f0000000300)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x3) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fb000200000008000100"/30, @ANYRES32=r1, @ANYBLOB="0800030002000000200001801400020076657423d9000000000000616d000000082c8800", @ANYRES32=0x0, @ANYBLOB="1c000180080003000000000008000300030000000800030003000000600001800800030001000000140002006e657470636930000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3000"/20], 0xcc}, 0x1, 0x0, 0x0, 0x1890}, 0x40000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, r1}, 0x14) r5 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) pwrite64(r5, &(0x7f0000000200)="2529b86c56eeb95856b29d8c094d3f9176857302ec126f04b70ffedf88f986b8c308a7dd456ee57643c555881a2225c16d386ad02c1bd1ab4951dfca", 0x3c, 0x1) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:47:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, 0x0, 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:47:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 13) [ 2371.802170] audit: type=1400 audit(1662270475.151:15): avc: denied { associate } for pid=12762 comm="syz-executor.0" name="tty20" dev="devtmpfs" ino=40 scontext=system_u:object_r:getty_conf_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 05:47:55 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) fcntl$getflags(r0, 0x40b) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000100)="f95fb19f5583d25958b3dcbcb23bce690785208b56f1fbd248d3ebf544", 0x1d) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) close_range(r2, r3, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',access=client,version=9p2000.u,\x00']) 05:48:10 executing program 2: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, 0x0, 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:48:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 14) 05:48:10 executing program 1: perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xc2, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x13600, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x2) getpid() ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) syz_io_uring_setup(0x2971, &(0x7f0000000200)={0x0, 0xe47a, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000004c0)) clone3(&(0x7f0000000440)={0xa0212200, &(0x7f0000000000), &(0x7f0000000400), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xfffffffffffffff9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x7, 0x0, 0x1f, 0x2, 0x1}, 0xc) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x382, 0x0) 05:48:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2387.370726] loop5: detected capacity change from 0 to 40 [ 2387.385282] 9pnet_fd: Insufficient options for proto=fd [ 2387.400750] 9pnet_fd: Insufficient options for proto=fd 05:48:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 15) 05:48:10 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f0000000000ecb20100000001000000004000000040000020000000d9414b5fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b2f73797a2d696d61676567656e313938374937333530000000000000000000000000000000000000000000000000000000000000f9fb8ef9d38e2a92a9346e131e0cfd1bea90492af232fd1370c464bb5656a8ab", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x620}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x0, 0x7}, 0x100, './file0\x00'}) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x42) 05:48:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140), 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2387.553850] syz-executor.5: attempt to access beyond end of device [ 2387.553850] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2387.555739] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:48:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657240feffffff007cd90000000000000000000000000000000000000400000000ffff0000000000000000000000000400"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:48:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 16) 05:48:11 executing program 1: perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xc2, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x13600, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x2) getpid() ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) syz_io_uring_setup(0x2971, &(0x7f0000000200)={0x0, 0xe47a, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000004c0)) clone3(&(0x7f0000000440)={0xa0212200, &(0x7f0000000000), &(0x7f0000000400), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xfffffffffffffff9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x7, 0x0, 0x1f, 0x2, 0x1}, 0xc) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x382, 0x0) 05:48:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) r3 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @val={0xc, 0x135}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x34, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x16c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x1}, {0x1f}, {0x2, 0x6}, {0x2, 0x6}, {0x56, 0x5}, {0x4, 0x5}, {0x4, 0x1}, {0x8, 0x5}, {0x40, 0x4}, {0x1f, 0x1}, {0x6, 0x1}, {0x8, 0x3}, {0x81, 0x6}, {0xb9, 0x6}, {0x40, 0x2}, {0x4, 0x7}], "1fd344aa59b821c3"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xac, 0x6}, {0xff, 0x5}, {0x8, 0x6}, {0x0, 0x1}, {0x8, 0x2}, {0x73, 0x6}, {0x80, 0x2}, {0x0, 0x1}, {0xe1, 0x5}, {0xdf, 0x3}, {0x0, 0x7}, {0x20, 0x6}, {0xc1, 0x6}, {0x5, 0x6}, {0xf2, 0x2}, {0x20, 0x2}, {0x8, 0x6}, {0xf9}, {0x1f, 0x6}, {0x3, 0x1}, {0x6}], "5db9037940eb15a4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x4, 0x1}, {0x80, 0x5}, {0x8e, 0x4}, {0x7, 0x7}], "57a406a50840d3f9"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0xd8, 0x6}, {0x20}, {0x80, 0x1}, {0x5, 0x3}, {0x5, 0x4}, {0xff, 0x1f}, {0x0, 0x3}], "574e62c3d0e49de3"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "6956be91285e0103"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6, 0x6}, {0xa9, 0x6}, {0x9, 0x2}, {0x1, 0x6}, {0x3f, 0x3}, {0x3, 0x5}, {0x40, 0x6}, {0x1, 0x3}, {0x81, 0x6}, {0x4, 0x7}], "c57ddee688de01f2"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x1}, {0x80, 0x6}, {0xe1, 0x6}], "de0a4ba42fd7f015"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x6, 0x5}, {0xec}], "b52bf1a7a8fd3f26"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc0, 0x3}, {0x1f, 0x4}, {0x8, 0x1}], "1ece17459ca736de"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9, 0x3}, {0xf9, 0x4}, {0xc1, 0x3}, {0x9, 0x1}, {0x5, 0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x7b, 0x3}, {0xa7, 0x4}, {0x3}, {0x96}, {0x40, 0x1}, {0x5, 0x4}, {0x3, 0x3}, {0x8, 0x6}, {0x1, 0x2}, {0x40, 0x7}, {0xf7, 0x4}, {0x2, 0x2}, {0x8, 0x5}, {0x70, 0x3}], "2f53bcdf3e7ef9fc"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x810}, 0x840) 05:48:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140), 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2387.919897] loop5: detected capacity change from 0 to 40 [ 2388.016560] syz-executor.5: attempt to access beyond end of device [ 2388.016560] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2388.018414] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:48:26 executing program 1: perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xc2, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x13600, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x2) getpid() ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) syz_io_uring_setup(0x2971, &(0x7f0000000200)={0x0, 0xe47a, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000004c0)) clone3(&(0x7f0000000440)={0xa0212200, &(0x7f0000000000), &(0x7f0000000400), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xfffffffffffffff9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x7, 0x0, 0x1f, 0x2, 0x1}, 0xc) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x382, 0x0) 05:48:26 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x42218, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 17) 05:48:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:48:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000b40)="7aa5e9b9c95d7ef2b349b6fbabafd7952d876ace8f5d99ed98d88eaafcfb4e15e989ef85055aa28351617c91c9d7813272a1a2a32f4cf17a7b3d8bdc5c3d4c8773c290d9d803e807b2b3bcf375fff56583f4a693a226d1506f382d24c5e104fdbd14d19c0c6658dd733445e3b2d557aa52bb8139c6a803f9c8cebbea3584306f29eb4749886d92755baadf115f558000bad7f7", 0x93}, {&(0x7f0000000c00)="33302216e00e32f011c08e65f34e42416257d708bf2cd0e11ddcb788c096565d7bcc9b8898a0f99dfec98399b0d6d561b9eba66498c320b7c2673adb7d9d4a1094b92131658dfb53d6c74b6ee98341c85248f99e1ba6ec2d810b8362e0b10dfcc1481f28fccf314d4d8ba8866b9237f58cf6620321bd8362a1cf5a164c7fe5b0e98a4968c0595b37acdc1434b5a956873f9821bab641274090de060948a0bcdc9b3c38fb40ff2e738c406f51b1e2a75ba10036d5bc49a9e1a283974b51ec915674360156ec050369572ace7c88394a6d9aaae82f648e90b5b9919478eb94700c1cba", 0xe2}], 0x2, 0x3, 0x40) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADMODE1(r3, 0x40081271, &(0x7f0000000080)={0x0, 0x4}) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00F\x00', @ANYBLOB="20002717a500fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff5e8, 0x8000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3fffc0, 0x1}, 0x40004, 0x4, 0x1, 0x7, 0x9, 0x4d, 0x4, 0x0, 0x5, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0xb) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b66, &(0x7f0000000000)=""/136) dup(r4) r5 = getpgid(0x0) ptrace(0x8, r5) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000e372000008001a7074150b00"], 0x1c}}, 0x0) getpgid(r2) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 05:48:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140), 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2403.284873] loop5: detected capacity change from 0 to 40 05:48:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 18) 05:48:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2403.420614] syz-executor.5: attempt to access beyond end of device [ 2403.420614] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2403.422716] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:48:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:26 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140), 0x0, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:48:26 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], 0x68) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b66, &(0x7f0000000000)=""/136) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001680)={{r0}, "ce0c0885571a4bd5530b2dc0b7809d7aef7a91079a646404932fb02e76f486a6bfa8e8e375585789b6f491adf303288bc2313cacc717f24000aad1bd6a32d0e942a81eafc004e281ac84f54c0365ee49a9e6f1ddde4dd5c5c8dacba1c7f1a6d35e03d50d7e7acba4e4075dccc85ad1bf11ceb60944b777806f22694e5c1e3f311725ae2b39fb75bcf697a3920696611eb0f91c8ae919bcaa11ebd287a5f3ce2d2ce0e2f32cae05d05669dd34f6dbffd38e2b75da7e9bcc7895197479c4008ff9a4c1595b9bfd80d7ab239967102c736c52ba20c8a44ee52cae8d8497f6e803cc9cba6089f70717db4729db6dcdb1fb507d704cd6419cf978cad01f7bf297224b3df173e852ea027884b670866f26d7a9fc1f6c366f997bb915776cdd7d0fe4042fc7ff869fcd976c3fe5a185c6df54aec6dc93a840ad176cf62c786897a4ee21d7e806391a6148e92e4445e3501809c3b62563bd7611e4d5d91ba1b63b69f6a571a99b3645c4a612823d335ced8ee74c0f6eb437ed497623e53786675d4ee89ea2515c00052a328c0e0f14214866fa6becf71ab878b58c46b56e85e68ae7f6768b12b6ff4594a59bb126d0213e2ba7909bd6deb6054beb77cd1c1dc89cef4ab042c5df54070c909a71336fceb9e5865c2e10022e7f517a6f4cfd35de7b46316bdb4db67a9bc8a316be2d0f3487681f1401b38fcd9b1c4fee4325079b5ef28c3c930ed7098939cafa259cdcd33aa353116fac532ddf1e33e9db943b2eba8eb5cec7503e6641fda700c80c6645b1330d2138f3c9144feff6e288001eafc05bb57ff1fed24cc671f95d1112b8983ee5df3874b9f4c7cb70edbce71b48d6885de5d8d0beabbbd7c1e737e007dc5837d8e3e61f03b0359aa9c83942326ca9507434a7f5f7512a8f45d32c1876e57a6a85d9abcfdefe2418f86b3236dfcd7e54184f3d140aa7dbbd5a3738caabba884c7931a05c7df0944c1b596e767cc89712e4fe069370e45c30d1efd07e2ae9e6236daf5b7ff8cf230b7f8cffbcdb81ccedf9169e82dc3c3b2af40e7106f08f3c74dc65e165f8d7a0945772b40291b5b42756964cf5e4a6bc7ba0eda657205afe775dc51a6808e856a456b15f149915a0d4c99cf7d2c908ef2a60f5df0c75fb4c5b2efb0889e718e2b52729568e4da35d2eb500a9db997dc01b66cb3e0c646eeb60bbab33ef3ed413e8c0e9c32e318eaa2f61311c29e7a146b1cde8717257a1b7fd5f06e1f83cf51a55537bfcaf4de459681cdd12ad1e894f033116081ee4b83288a423fb83889f91d7a7b2c95890df7d1e59a7b193d618188561e199777bc31e965ddc066377c71deca12f10546c62f6f2421ea249f7b33558f22ddbaca9d8b526fa310d7448a8d1a6a6f4d508059147350c0b51acdcf9d54d3e0b9a0fd1fdc932e86403969c95b4f1b63ac3df8cd61a236b52f1f31cf71d3439f323dbd2b2f3dfcfe73122d49aab076717bac375e9f6edc20e08e0475df06235f023938468cf865b26ca08d5f88740a5cf41dc425376938c9ad6553f62b4aa583de8849d822bc64dca015c6b6618dd6b550f631400ccdeecf83e41c7475e4cb2ba0f600b05c84d8372a1c97d158164e5b7c405ad865b46b22ece3136a33718fc5444091693968d753d16067733d83ffa149e083d93788d3e2415fa56d46602d005c3dc10291e62fd911c6b879de389721dc8b5bf524b7b7c35acc50e339fdfd3d9101730c599cfd5293da5f92d4ddf202c6f0e1853292a5ba12605c57238167ad20d4bed7ffbcd0eb7db30ab0011cdb971417adc4f51e28225780d3d78530f28ef056f9a152393540bae6ee3b044398ea86aa0a36ac5d7ded57ba20630ca7cf73896e4ac5c0c639d1d8e01af6b696fef34adfe155055c89dfaa8a74511227c4e16d5316c7fc853f86d00ce2de0f60c1d0d40793951aa815c9abfe50327e2b9ca11ad30bd12772aa40660472a1decb4fe12cfa876acd991ea7a456ad16c3fe15ac4c33901f9e18a41bbb7b64a18585e4253e292ac73c14b8d1f19b083384e3f0b3820037728f43438711353ce6abd26ec9434f56abb597f9419bb040cce4fb172e3901f56774fab825d2de9ba2988f25ad0895efc8a2db5ace8d65c2f49307ef6284b54c64bdccd4e5625afa4564adfc8432b9e2a6a9d5474c04bb149c48673ae53e8bd3dfbe6afbe8889f0d55a64f53f394471d1910766b2f754a522180837666a5414795990c009ec49c34ad8d77171cc409b76f491186fefca6afb84b9a87b8a447efcde833e2da190453dfa02d9b712f5620887a233a5ea601cc64b1530ff41e9122c2c3179688dbd937fae2f4ad185d42219b4003939ade7a8a51a8021a422a55311463335b7b4831a6358ace4b09ca1068d788c6e241710f718fec3b19c2ad77f14d8390f158f7c84169c15b9951b9b35034307e02c77b2db9b2cb76fe1fbf43ffa3208dcf235e238198e33346836e93da6b2bd02d9518f648cf14285469ed99ff19217a3f3c3ee4e8f08892a93953188e73ed91af163507c840a581ae48c1f3cc748cd9ae5902bd34f2d4df9907708a810897762e56b4e9824743938ce505174366b60dd8fef9d4ed36ff82963d6786c67a284eb622ff10e3582ef51447f182e1a72c1a0d04a1f756b0d527219bc0421ce4dc10664a6aecdbd90092bc9bc8190772c1bf73e545944cc0a84a3d869e28d7df204104fe32fc4c44a2b2682676a817e26189d57c7ae96130e8a6f565220baa3670ed12f605cc82b85d4fbfa86ce0d8555cb85dc24e63ed80f0ae1bedca411d1be5a95a9d5747fabf956dfca424b59477a6eabe78dbfdcf888e1b581b0a46bebd4c4f25737a0b4a558708df92c70eb37883dffbd9107d97de55085d929308612b2dea5c20c737286de489563b498a8b0db72118b05b61fe6413145af18828af721c862b4a19438a19edebfdd21965e1f5f34f9c0135408c2ac67940957ae4dff64210dc5664ccd9703eeee52ae2a3eb8436fd24288df96648061b8956f1d4299b8c636601bfc6939f18001c5027a421cb4fd808eed968327218549640d2e53217e92cdee92fa7b5dd542ea0d2c7d5be70db20efc98a77a9c9bbc9cf3c303e075103f878d2231aa1bcdb605f99ad11c9927a53c72bfa599c22e5f8b0df0e8d6952889716f3d41ac89ed3f0922a8efd13d0337c2236768f42dda4427659f65640d48b4a858ce3664f778a986d72703b5b11f0a7ca7da51030c523d21299a33fe63c4f66117ce891fd74096ecb0b0a8445f4bc2f3343e918a0f9b98ddb0fee99becb7bc9f893de0524c9db11240a4587cbcfffdba9897daaec6d4d347f6c65e3d11dc620e4b4f77e1fa0432ae33e2f79fe0160714d0b4b4dcd5212e81838437127d915d6135920463a0bd9a4645b5ace58b6753acc78cef4c9687ea1178cdaa8acb9316e2ebdd86baf8615a5499b58264be825b21bd8ce0cdeb55fea5c18699e5fd6bf9153deda7ddfc8ced011b0bf11e5236b00fd2ad989db76d3fd0c2febb9f6a5a2d09e2208d622acc5929488e816003b020c7c5c8810db60d90177304356cc3421386a6522b2d3f5801c68fcf20e38a25e60b6f07654a7382e800d8f8e1a71dc0f039dc04a37d89e14d38a7f8a8b9532e49d386fd0c612fe22255c854c17a03b9e16bc8a8be3c84657b631ffb5831155b63a42d481ad9da2d5332c2e50f445181f254f2384b7f063662cc7367b296c54edc1fa05229f4c64a8a0bd763690952bebbc92144273aba1db691361b2ce7eef0a3e967ecb2eaa4d2034a5fc73fa30654c9074e5bc490eb7447c7320f2cc9eaff8dd7f640e548675ff663ac480381c8e08f21880a5978d1da435054ecc551296d3d3b9d1d830c5d5e448271384e8bd6196c112bcf16d28e376f05d23d40d85368dabcf779a4b584af16be3676e2a3df957e0f5abf44dee2f8f89e43f1601c797650101f4dccc8c9fcf5f48a92af95f4caad732ea1b180172988e29baa157bcec3fc62f9819d66abe96d5a2990ce3de2dc9fb910c7aa954f6eec45fdb825ff7d3b7b04d2319deb17c88ce00284606579ca03bb7363ad125284b32b5ac69bc0635bfd9a2f443c57d144578b67a765155abcb0f3ee297200355c373abc80a8c85514b2ef08b2ce36d552fa67901fb6199fab902d27483ffe8755e443eeb743fca3030e619e280a8a65bebc3e8e914c3da64c0ed8266d22e04d9a0d2946a3e7e398d0f560d63ce62f9aff5cc6d48bfe43e387cf73cda18024c9f8a58a371d1ed9f22ac6339d1a1bac597949e7d27dc70b6b6a4bc6997e339c17de04af74b9dba1253ab73b9b3b8c2f33e19eb925ddd75d87728b8efec62ac954b6fd11ff7bb102cba4d98020c63e68ee57fa4be0564980d5fccdde8386e3c7330512b5e9aaf1d1ee02a4658291d561a3e0865f4a3224e94291c22257fe5fdc44188f1baf2268eb8b5fd573c3d9ae20943b848c233b6eb8805394d99ed3c1c6391e7dff830f60b944a48f36f1fa8ba1e357b2008f7efaab8136807a98c6ef529c51b61963e850cc75034fbd754121192cda88a729fdfb957d9558019ae9a710c1c78b2fa54027118c826cae2a4f62e82bd7a6e48cafac3aa2549916a4fd76a04c519192e10173ed3486703660808c25f6cc42045177c0242dbc31148f61ab0621a1407bf6ff47b10bf84141077fc69bfc0d41b0f7773aa481b45c3f46f4b45d0a7732f3a6eb2e00cbc5ae28ab82d2882899396e4a4d06881c38b5054f3699cda05d5ccd88202e9de8b0b8c457273c677749c3492ccb4dd0676c11fe24c670b85a9b7fc951aa4f9e5f92a1e17024c628d83a0c19ae5fb75cb539d20415745ac54a1d1d203639b73d7b7cb58e5a3b396dafa678a690524d4296e45d9ffe9b90da10cf9dafb8b47d78e7fd3a53ac36b2061a2931b89ec34eca9679bfc3212354749ee005e26dc4be5ff07b308745d64179551953f3d70b5681ce3c755ad89d509745621163653578024f5444a2c972344cf347b821b2981b1398c4b4977e9f7f147bdb1030bc957363283c1dd03d99ec10c5dddfcf0c423dedfe19d068ae295f143609368754df5ad3747615327c2c244e5d663d077fa42e12879a397bca2ca69c80cd23718b6827f9b2e26c52206ae3f346ea452f4a4f2c9a07337652428bc453457bf83702086d730a1fa8ac39b1f6a499f955a4a72908d711ea219fa89bed1adfd64b0c95606283018fb9f3ca54dd481c4468fd7780ba8c39485b39153e036d72c25c625181243b453a49df31d4fc34ba962fe7e2dd9ebf09a92091510b12f71fa945e1da06aeda296ced829ccf43e9af236c291edb7c3fb28555ce5b069d7b97d219d70338c49a265d736655643f33eff762a1e15fe1f938cfcfdd68b8c4d09ea9601c0a02649016e88229d9a0b9abef0482392eb82af1f9803db8b9e4aaadd7510d85103454c96f6ac8fbb811128bebdceec3370119fd270e8db92ff2cd709feef91f08f3926298f8d19afc56519d69c2d175e84c8c54b5e3f7fbb4cb71049487653b2e9201379249757dd10926c060872cf0ae3dacee28675eeea1ed0f011bcbecfb8fd529d39dbf13cd217b2315b4184495599ce87ebcb694082964217ea67912f01da61da33df20db26151a67bb6350b892d9f518ca756396da6a18c56cf3a608091317bfd52ab8b90b61734eb312bc3f34092636413fc7002f7f6958d06cc43a363d518f8bc6813b00a94734c211078a929507a5a7e83fc7202e63e4f038ca71b555ed7c8f773227b131bbfdff9cf62ffdf58cd"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r3 = syz_io_uring_complete(0x0) r4 = socket$inet6(0xa, 0x1, 0xfffffff8) sendmmsg$inet6(r4, &(0x7f00000040c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1fd}, 0x1c, &(0x7f0000002a00), 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002b00)="da10fa12626f5bde938ab8a69f51da86d6ec6558af9a44c972c95d8147ef999b9f2258a4efce99dac078725e7f0cae898d4e9af3a2704705f8f19a59659a194cd13f71e714492c2ae59098e21efefa356573762d3d083888e78c47a0c66387e5ddd848b189c50b1e3ac1ef73b8e27c4671b532daa88d0082a5ac8774794bbcaeac84386c2d9254c0ec8eae6274619e6e4f941369ac9773ac9f7c45b29464f8bed94ef38b69d7401a4b2c4117cca0ed9f2486aaf7535fe56f2fc0c3764a78cacf35b52ef9761d283e1d4d2fac89edaeeeb6e9e7d8af647ca718", 0xd9}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000001580)="5e4418202ba1eb3b48dd5483590c26de96c0fa1bbd7ef23adfe08ec1f66da066140db931db59a47dbd9c0805cad6ed11e0b5c7ef44af92e24f29510dc77152f0e766b78c3e8a2c685b29d52ec61c3317aefdc5cfc198b697dc7ec3c53bddc147750518dd71d06acc6d699c2ccb9db90b8e6023cc600887b3b0fae1260883809725a8a86bbd73dd56798eb64312cc5851be0accbc335ecf49d9022a5cbe582e5b6529bd5a689ed122367c3752fc841d1dfda4fb506bf4aec52a3144b8", 0xbc}, {&(0x7f0000000240)="fa42578f80b0efe653afce6ed07382a8dce92b5e4bc6a73a5064cd4ebfe79a4ebd0f1d63f987eb034375137a03432cbd2f3777629a08085b", 0x38}], 0x4, &(0x7f0000003d00)}}, {{&(0x7f0000003d80)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x4}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000003dc0)="c4c69545714ab72928dfa9dbb0d8d0cb5eaf21cae9cb4d1a2489500f3f72a62f98dee5c76a6a43cc3f21a8694e2a1b42738c62db0007c94299d09a3417669479f3761e45d8bca6516137d523f6e5c4f1bea5442b854efa85af22fe041c6e03744d1456be33c72ada65304f01a4fc39e5415d3e3a2b2dcdcdc52e55a7b88345b731ee96610ac4c71fbdb4a372156642cb091c968970d4107c579c5c48f5c7819239403ce7065651a6abd4f3a2a8f94fc5080d9ba7cab6df7dc7e12ac3abfcfb9493b950519a3e", 0xc6}, {&(0x7f0000003ec0)="2976517460b143abef2225231d9b91c72062c7b49cf92786f94179ba34f20be082b05c051853884e079865f0fe972fd08715420337f82a8e168def954e795a2c54292d6eb2301b84170fa9963c2882e6a60d06726d9c87bd28117bdf375b097969a2703be15de2787632682077902163001cc427cc1d5521541a24d26ea72f57a68acc0f710a1136907f230faeaab73116ffc468a578a7", 0x97}, {&(0x7f0000002680)="51f3f7a0eb6d15d98b42a79a6bd076e985844ffa428862f51fc33cb3d1c2c021047509ef1543cb46331889ed12259b8bc32ca87ed2ae1ed770d21dedf67b03fdbd92f354a8a1ff44c80668a5d70cc8f67ffad3afa265b6a0b0d506c9989e0a37f86623e53be3f09f842b4ace1ecb0ff1a24e1f5b42663b24c7bc680f766edc33da19f45695d41eb0e278a4824cd7556711ed3cddcff40be1fc22ad52a3ed1c56584d8a4d553fedeb0fcaee3a3ca0a2909032c20ba991a3b7c336770e57fde8ac0d0a48b367c2f55205aaaae4325b700c5f7292789910b5dc38fa7fc8cb860e2ea3b0fa4acba8cba91c8121cab080843b9dd1a93a8933", 0xf6}], 0x3}}], 0x3, 0x814) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x5) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x4, 0x7, 0x16, 0x0, 0x3, 0x40100, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x2061, 0x62, 0x7f, 0x4, 0x3, 0xeb, 0x7, 0x0, 0x5, 0x0, 0x200}, 0x0, 0x0, r3, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:48:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:48:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 19) 05:48:42 executing program 3: r0 = syz_io_uring_setup(0xfb0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2c5a, &(0x7f0000000040)={0x0, 0x5b23, 0x10, 0x2, 0x2e8, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r0, 0x36d9, 0x0, 0x0, 0x0, 0x0) 05:48:42 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001480)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000000000000000b20900"/106], 0x68) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x7, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x2241, 0x7, 0x4, 0x4, 0xe58c, 0x6, 0x5776, 0x0, 0x80, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r4}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r4}, 0xc) sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x31b, @mcast2}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001580)="74f375e0702a943c66310c666285d4800bb14efa6bb747ab02ea4351dbd3572d3ee536eead1d0ebd8f83479b83b75c616b0d8717437b974349503d0d156131817aa6c99d12c91b2d22345fabdd5f5083e84686e45b2ca46eb4fe277efc6b2b07bb79aa6b48259e93fdb5dcc28c48703132363906c084ff4681a5e9498d4c0c64a3fdea34bedb3e784c491588638bc8cc5a223755fe2f8b6c3067f91f5b79b83c4a8b62c883622077b25ccf19588f", 0xae}, {&(0x7f0000000300)="bb10633576f7fdd67abf94ea508a055ebdadae22cbfc147c8016da27", 0x1c}, {&(0x7f0000001640)="94d8d63f9c45691f965c3722807a78dedd95ea67cc1eb2a10b4c9ae37369add50525f1a9253070f52aed5936258803d48a7fed525cb1683519d723a2c8982ab1f7daa96a3877e1e4471d14971292057dcc6bfd05d00bd6a2242a", 0x5a}], 0x3, &(0x7f0000001700)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@generic={0x1, 0x71, "6c3e9ab23be962e1f0c5b33a8cdbdea47650c9bf783a7a24de9eeb93dc2a21aa9eb80c9958f200bd571103664ed9d102d727cd14f8e5ffc51ca403ab6c9d2de03b56c8c4984be8977a513dd21b0f40a96b0fa36f3053872e189d4b6f6c08e5ded37458679c8b58b56218689754896917ee"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ab}}, @dstopts_2292={{0x1f8, 0x29, 0x4, {0x5e, 0x3b, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra, @pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x1, 0xd3, "00751d1d05e82dc572b128f290b0e17a0a07cb4b47995dd996be717ccc9b00c07a5f1f46ea3c12116f8c6ad35c972687584d524878ff92d119b37c7f8479ce0c6ac9f9440eccfceec849ec695b3da36bfefff0c44cbd6d3de613166590bc50ef918ac47adc3beaa7f0629c06d1f272bc5afbdb26af6d9abe0e1627199052b7051a916dd8feb10b517dbaaef9dcbb452902a06b2624e5fb0a5121b92a2cb027d7da7f21f9b7f61e9194b9695f5990e7792505a0b1ce2ef7b6af148a992b1a3d7e52b8b820749f3c4774953cc23e683f6cb5c8ab"}, @generic={0xff, 0xdd, "1b5cfd196a03de0e26948c1f8bb62720db1ffc2743cf218636462cb01cee2134d749e2534f8e0e40574d3a86e10e469e1faeb97c2e7a2d5a67904bf649d4d1a0a4ec7ffad29aa24c6702aac10e0db66f53465b94abcbe925a4a8eac1333b887e50ddae01af58e9acdc51d5d26e5f1d9b15e1b1f08de441d722a3b763bae7fc8d74a7d887df68adc5c971ae166216840b907e158715198d99045b293d04a2cbd11fa8151485f3268d1d891704f786f70c60ae674e18ac96eaa469ae11228891511e06874c187d641ab6b8d5f04b4529819b99eec189156883dba7bbd2cb"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @rthdr={{0x78, 0x29, 0x39, {0x5e, 0xc, 0x1, 0xd3, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}, @dstopts={{0x30, 0x29, 0x37, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}}}], 0x3a8}}], 0x1, 0xc040) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000200)={@private0, r4}, 0x14) 05:48:42 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x838, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setgid(0xee01) setregid(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = dup(r0) perf_event_open(&(0x7f0000002640)={0x4, 0x80, 0x1, 0x6f, 0x5, 0x80, 0x0, 0x2, 0x34041, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000001440), 0x9}, 0x50c84, 0x8001, 0x106, 0x2, 0x3, 0x1, 0x1, 0x0, 0x8000, 0x0, 0x1f}, 0xffffffffffffffff, 0xc, r2, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x204080, 0x0) openat(r3, &(0x7f00000013c0)='./file0\x00', 0x482080, 0xf1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x45, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x44, &(0x7f0000001300)=ANY=[@ANYBLOB='t\nansf=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.L,nodevmap,fscache,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB="808049f42862ecde0d6f2c00"]) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{}, "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"}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) connect$inet6(r3, &(0x7f0000001400)={0xa, 0x4e21, 0x80000401, @remote, 0x1000000}, 0x2) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xffff5d14, 0x80}) vmsplice(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="8378913791b55980f03537b10e855905d12d22047700f4e6f4c599c2f6ec00af4c2dad3e3225dc3e7022d0694fd2fa017663b309895387f184d70d8a9c03440fc0d6299ff063d6bde97d62653e9dc4661efb090f44a8f9e9ace5deec268a3fe6715feca3acb4bd21769b753a21dcc7f6b2058a549954153beae4d4e4c0ed9a1b5484f593f6c583774f28d9db04a8b6c2dab31ed594b7a4afd4f5bc9d41f952af0be0dcd7d02c49d5add3a2e8e4e9faf1eb377e41b4a77fbee3a28e9dabf7492712145174d91ad36c6b7acc431a740e21211856d6bee84f", 0xd7}], 0x2, 0x6) syz_io_uring_setup(0x1a15, &(0x7f0000000140)={0x0, 0x432c, 0x8, 0x2, 0x25c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) [ 2418.983791] loop5: detected capacity change from 0 to 40 05:48:42 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 20) [ 2419.129580] syz-executor.5: attempt to access beyond end of device [ 2419.129580] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2419.131353] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2419.144555] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2419.145894] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2419.146787] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2419.147725] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2419.148737] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 2419.150523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.151355] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.152481] Buffer I/O error on dev sr0, logical block 0, async page read [ 2419.153633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.154431] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.155664] Buffer I/O error on dev sr0, logical block 1, async page read [ 2419.156896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.157655] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.158899] Buffer I/O error on dev sr0, logical block 2, async page read [ 2419.164925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.165723] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.166896] Buffer I/O error on dev sr0, logical block 3, async page read [ 2419.168066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.168882] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.170279] Buffer I/O error on dev sr0, logical block 4, async page read [ 2419.208458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.209309] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.210448] Buffer I/O error on dev sr0, logical block 5, async page read [ 2419.217468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.218279] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.219391] Buffer I/O error on dev sr0, logical block 6, async page read [ 2419.221721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.222507] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2419.223605] Buffer I/O error on dev sr0, logical block 7, async page read 05:48:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:48:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x4080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '+'}}, {@noextend}, {@loose}], [{@euid_lt={'euid<', 0xee01}}, {@euid_eq}, {@uid_lt={'uid<', r2}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '\xc6K/{@@[%'}}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fdatasync(r0) 05:48:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xba, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000800000000000000040000000000000000f9ffffff00000000000000371eceb49cff00"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in=@dev, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x73, r3}) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 21) 05:48:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:48:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2419.447599] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2419.486164] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2419.501161] loop5: detected capacity change from 0 to 40 [ 2419.682261] syz-executor.5: attempt to access beyond end of device [ 2419.682261] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2419.684714] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:48:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:48:57 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:48:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 22) 05:48:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) 05:48:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x7f, 0x6, 0x8, 0x0, 0x6, 0x80, 0x12, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20a, 0x2, @perf_config_ext={0x10001, 0x20}, 0x4e080, 0x80000001, 0x200, 0x3, 0x7f, 0x7, 0x80b4, 0x0, 0xfffffffd, 0x0, 0xef1b}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x48, 0x7, 0x1, 0x7fff}}) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@empty, @rand_addr=0x64010102, r1}, 0xc) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/136) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b66, &(0x7f0000000000)=""/136) r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x20c002, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYBLOB="7420ae34a24144ae8900f8b804b6153db66801ec1ed737fe6601d0915a3b104297c1d3e9486f855d64a01cb4f77e89de47898613fb0dd993362feb48ab764c49622b099bb0fceccf36d426bf46ea41f1ab4823a1e59ad2a297000316e1d0a3051daf87066df5d22260630ad21b16234c1746107a7798206fa6d4f6f16350a73550", @ANYRESHEX=r1]) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x400080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2]) r4 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f0000"]) faccessat(r4, &(0x7f0000000400)='./file0\x00', 0x1c) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r5 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0/../file0\x00', 0x9, 0x4, &(0x7f0000000440)=[{&(0x7f00000001c0)="86f2f0dab90170fa47487cf8b56734332b9febb21db953c52ccf38ec25a2da286817e133dfa249b8bbac719e92525f0ebf066a87683c2fe946e54ed63b891687aa167c6029a7ca8d632592b5c99c96e06f51ab49275dc0430ac1c7e0a987c9674388c909523a90ba62109146a80745355956f88a3d65f670e46cc388a2cfd1d640fb5f5c968b9f61e0b40b14d0985dedd2da32667cb76052cb86b6a3055e52ae53a4ab0f12f2d7261c03ed6d314713caf4199524fea54d5107e559a449594caf10a7", 0xc2}, {&(0x7f00000002c0)="3ebee69c4bd421f725915f351574a7221c6a4f9ae7a26c85856565f0892adb78ebb1e045141a07ea04b2dcf92d724dffd9ad55f0b1eac6b4546d55893d5ca6a2b1627b253f1e673f2e1b88561587de0378", 0x51, 0x101}, {&(0x7f0000000340)="b9a18b27482da6cb110390763722f8e9ad94a753fd15334764f9c063ed013c4216e858c6fd6b11888f30a2106e3f2c4ccd0a53e9fc45364330a727c188c9", 0x3e, 0x7ff}, {&(0x7f0000000740)="979baf7abfa0aa6e81735d0d8b004ab64947e20fc27b0d68a8a72d4813a5356cb495ba432c8e3c371a0359e1e3a534389e009af402fb91168b6eec26c6f2bafeaec115d974556ea9aaf51ad9f5d8e8bf59dc8235349bbbf19d0ada76300682a4211b2554db9a421d828277f010e45d32596f1a6a04cb354a6e197abc2ad1ac0cef4e33294304189f286c5a11e926b2d68a9305eb33f39bb17f838da864a853967d7fa48d03d86404b05ab1ec4e45d8ed1950bd2df0319199faa6", 0xba, 0x3}], 0x10000, &(0x7f0000000380)={[{@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[-'}}, {@uid_eq}]}) execveat(r5, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x800) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)=0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 05:48:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x81, 0x7, 0x4e, 0x0, 0x4, 0x2008, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x80000, 0x3, 0x5, 0x7, 0x1f, 0x7, 0x101, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x10, r3, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) dup2(r4, r2) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="90000000ed0304002bbd7000fbdbdf25210ed68950a8be4eff0fbc56e36b17d91678770953a3365b6b62a58d9963624e12264636d68c33e188eb7dd372fdd5a066b0e9c86647997004d87d68105beb86b08bf1a783d7ee4fa5ca914ec93f56e313beaa7b67a2d4c55ad96a45df17ebf9258db16e2d7016b290d5eb68e5f9891e5563c1f160a687df6fa971e7db000000dd0a2bd91207535fef5bf768e2d04e2bc7"], 0x90}, 0x1, 0x0, 0x0, 0x10000004}, 0x240480c5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="2b667265657a9c1b254b86e4c5588c53cfb66572202b63707561636374207763707561636374202b6d656d6f72792000662d72646d61202d68756765746c62202d6e6574202b70696473202b700872665f6576656e74201b44026977f8403d083c2e750a3220849e2f833ee383cdd17b743bac82bf2ec8a2b8d9c43239ce9e8b4a104c7637bb65037ed3aced80f52d080e1ba07c536cff3da57ae3698148c6f1d544565402109c7bdee17330f459c0dbee00"/208], 0x52) [ 2433.773228] loop5: detected capacity change from 0 to 40 [ 2433.820508] tmpfs: Unknown parameter 't 4AD' [ 2433.824385] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2433.824441] tmpfs: Unknown parameter '' [ 2433.825089] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2433.826433] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2433.826933] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2433.827654] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 2433.829080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.829601] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.830443] Buffer I/O error on dev sr0, logical block 0, async page read [ 2433.831372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.831922] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.832741] Buffer I/O error on dev sr0, logical block 1, async page read [ 2433.833697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.834254] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.835117] Buffer I/O error on dev sr0, logical block 2, async page read [ 2433.836032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.836553] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.837396] Buffer I/O error on dev sr0, logical block 3, async page read [ 2433.838290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.838850] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.839659] Buffer I/O error on dev sr0, logical block 4, async page read [ 2433.840583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.841129] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.841973] Buffer I/O error on dev sr0, logical block 5, async page read [ 2433.842984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.843501] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.843561] process 'syz-executor.3' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 2433.844331] Buffer I/O error on dev sr0, logical block 6, async page read [ 2433.846448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.847284] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.848111] Buffer I/O error on dev sr0, logical block 7, async page read 05:48:57 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(0x0, &(0x7f0000000080)) 05:48:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 23) [ 2433.874475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.875072] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2433.875930] Buffer I/O error on dev sr0, logical block 0, async page read [ 2433.891652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.892644] Buffer I/O error on dev sr0, logical block 1, async page read [ 2433.894102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.894998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.895725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.896503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.897256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.898016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.898743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.899760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.900576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.901345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.902413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.903464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.904515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.905739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.906714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.907783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.909151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.910171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.911447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.912210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.912402] tmpfs: Unknown parameter 't 4AD' [ 2433.914138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.915440] syz-executor.5: attempt to access beyond end of device [ 2433.915440] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2433.919253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.921591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.923212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.924957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.929527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.933363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.948385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.953538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.955162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.957348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.958621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.961333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.963123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.965266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.966517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.971163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.972488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.975277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.976587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.979369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.983289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.991571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.995683] tmpfs: Unknown parameter '' [ 2433.996995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.997670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.998369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.998997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2433.999607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.000501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.001143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.001736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.002399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.003546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.004256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.004999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.006120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.007018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.007645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.010680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.011339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.012053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.012631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.013423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.014080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.029700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.030311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.031722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.034625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.040977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2434.046985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.051008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.051668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.053715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.065508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.068069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.068658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.069321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.072118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.075019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.076111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.079101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.079698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.083209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.083797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.084463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.085270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) [ 2434.088643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.089281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.090054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.095058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.095635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.100056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.100623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.106033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.106644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.109447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.110146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.110778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.111492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.112116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.115076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.117532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.118131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.118742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2434.121616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.135321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.141253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.143131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.144487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.146321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.147645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.149021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.150461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.152670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.155539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.157331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file1\x00'}) lseek(r2, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @empty, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 24) 05:48:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x8, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000100001000000000000000000f3fc00800200000000000000040000000c0010000000009e9b967800"], 0x2c}], 0x1}, 0x0) [ 2434.191461] loop5: detected capacity change from 0 to 40 [ 2434.199341] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2434.199989] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2434.200445] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2434.201161] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 2434.202364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.204296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(0x0, &(0x7f0000000080)) [ 2434.207209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.208891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.210446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.212226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.213777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.230440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.231408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.233150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.234888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.236714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.238561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.240587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.242301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.244094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.245739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.247414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.249229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.250918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.252614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.254448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.256360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.258319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.260153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.261641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.263162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.264485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.265870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.267257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.268234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.269461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.270105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.270674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.271273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.271986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.272550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.273151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.273714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.274606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.275208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.275775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.276390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.276982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.277544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.278205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.278771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.279441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.280067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.280632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.281227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.281792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.282420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.283027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.283876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.284696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.285602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.286559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.289229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.293562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.294431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.296761] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2434.298110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.301156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.305266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.308388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.308987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.312981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.323593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.326644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.327629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.332023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.335306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.339429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.340481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.341530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.342150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.342784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.343331] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2434.345037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.345600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.346299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.346974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.348413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.349046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.349614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.350235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.350836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.351451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.352116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.352721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.353318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.353969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.354564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.355198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.355799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.356438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.357114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.357731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.358338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.358978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.359571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.360190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.360512] syz-executor.5: attempt to access beyond end of device [ 2434.360512] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2434.362783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.363431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.364153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.364714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.365726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.366321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.367000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.367566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.369299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.369980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.370680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.371302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.371991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.372546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.374248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.375626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.377161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.378485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.380413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.381760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.384253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.385633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.391265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:48:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) 05:48:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000002e6e4bc2f2de00000000070000001400000000000000000000000717d9889672a73200000089"], 0x28}}], 0x2, 0x0) [ 2434.392694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.395634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.397735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.399597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.402806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.409663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.413291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.424146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.440070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.440788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.441602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.442468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.443251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.444484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.445753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.446801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.447546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.451163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.451978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.452854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.455641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.458054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.458781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.460321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.463068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.463778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.464577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.465725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.466773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.467515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.469353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.470105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.470958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.471614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.472372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.473207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.474976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.476044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.476754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.478684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.479408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 25) [ 2434.484547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.485293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.486417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.488523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.489601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.490766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.492981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) [ 2434.494120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.495181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.495984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.497980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.498735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.499956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.500694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.501551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.502347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.503407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.504160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.505199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.506147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.507039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.507970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.509027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.510247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.511025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.511841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.512624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.513456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.514198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.515082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.515788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.516629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 05:48:57 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(0x0, &(0x7f0000000080)) [ 2434.533278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.534346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.535503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.536291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.537381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.538149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.539099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.539992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.541082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.541867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.542677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.543751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.544506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.545335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.546114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.547023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.547771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.548553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.549452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.550251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.551017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.551676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.552293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.553007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.554041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.554675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.556508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.557189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.558462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.559283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.559977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.560610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.561698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.562575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.564020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.564720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.565366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.565982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.567150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.567739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.568415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.569073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.569766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.570397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.571741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.572367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.573021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.573621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.574245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.575030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.575744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.576399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.577036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.578227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.578964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.579553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.580201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.581123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.581791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.582697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.583326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.584032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.584629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.585541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.586249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.586979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.587647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.588296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.588974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.589570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.590559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.591207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.591869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.592466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.593156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.593762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.594429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.595071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.595665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.596306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.596973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.597577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.598326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.598981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.599577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.600226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.600849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.601442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.602102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.602715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.603421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.604082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.604679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.606015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.606994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.607598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.608262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.608976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.609647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.610370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.611019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.611619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.612270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.612976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.613566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.614216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.614966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.615561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.616210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.616799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.617414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.618064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.618650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.619279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.620281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.620979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.621879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.622474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.623135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.623745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.624411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.625022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.625657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.626304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.626961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.627537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.628158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.628745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.629336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.630014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.630661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.631277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.631989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.632570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.633411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.650612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.652784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.653601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.656057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.656766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.658210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.659057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.677080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.677597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.678265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.678769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.679354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.679867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.680433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.681217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.681783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.682316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.683012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.683497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.684079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.684566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.685235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.685715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.686304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.686869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.687491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.688015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.688573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.689129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.689678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.690208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.690770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.691336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.691988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.693029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.693530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.694127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.694637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.695262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.695754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.696338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.696980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.697542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.698074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.698644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.699500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.700070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.700567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.701182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.701742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.702322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.702911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.703466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.703992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.724706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2434.758481] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2434.759739] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2434.760261] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2434.760746] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 05:49:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:49:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x4180, 0x0) fdatasync(r1) 05:49:15 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', 0x0) 05:49:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(r1, 0x6) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @private=0xa010100}, 0x80, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='team0\x00', 0x6, 0x6, 0x2}) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x488080, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701ede08c000000d4b8627667d6514637cea0167f9ad83af342ffc7a700"/45], 0x35) r4 = dup(r0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3bce040106302000ff010000000000000000000000000001b6d474b8e8f9f9506e1d0b350cbacbd687e9fb164c4f14593b49b57748337f1d38a326f63d7a125af14ea6f8b230e83856cbfe5ebff78056e6c933f8c2165f7a5a9b5a8ec3a41af59e264ecaa113ee76fc250826c52066b01dee37d0eb426c42cd097571983c153c74c2867418f6617d97fd66189e7fb95c341b2b76a90d74ec458c9a7889e1464687cdba5e50a0d749d171ce06db7859987e534b000000000000000000"], 0x18) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) 05:49:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x0, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 26) 05:49:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x0, 0x0, 0x0) 05:49:15 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd606309000000000000000000000000000000000000000000200100000000000000000000000000000000c204fb"], 0x0) [ 2452.072986] loop5: detected capacity change from 0 to 40 [ 2452.102450] syz-executor.5: attempt to access beyond end of device [ 2452.102450] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2452.104067] buffer_io_error: 528 callbacks suppressed [ 2452.104080] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:49:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 27) 05:49:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x4) r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x82000, &(0x7f0000000100)='vfat\x00') openat$incfs(r2, &(0x7f0000000140)='.log\x00', 0x6080, 0x18) 05:49:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000005c120f5565aacf0ff6c721600"/115], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:29 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', 0x0) 05:49:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x0, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x0, 0x0, 0x0) 05:49:29 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72746976533a0a2c00a7a49c3b2c334031b0a41fce668a94a3be791de4823d0300876f96c5fbc691c49c0560a1"]) r1 = getgid() r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES32=0xee00, @ANYRES64=r0, @ANYRESDEC]) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r1) 05:49:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:49:29 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = inotify_init() pipe2(&(0x7f0000000140), 0x0) syz_io_uring_setup(0x1630, &(0x7f00000003c0)={0x0, 0x5ca4, 0x8, 0x2, 0x24c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x4000200a}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r0, 0xbe1, 0x0, 0x58ee, 0x1, 0x1}, 0xc74) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x0) inotify_add_watch(r4, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00', 0x40) inotify_add_watch(r1, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0xc2000280) [ 2465.912968] tmpfs: Bad value for 'mpol' [ 2465.916608] loop5: detected capacity change from 0 to 40 [ 2465.938260] tmpfs: Bad value for 'mpol' 05:49:29 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', 0x0) 05:49:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x0, 0x0, 0x0) 05:49:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 28) [ 2466.043640] syz-executor.5: attempt to access beyond end of device [ 2466.043640] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2466.046083] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:49:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x0, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000140)='./file1\x00', 0x83, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2066696c653000ee7617f374ec20562b2a59b3c91e6b0e424e9cc0db6cd137ae04b2cc95baa1ea630410bf083dc58303bb6f52c27248539d13186275ae49f7e0db6324c79f1eeabe893419c54c1d1ab430536d22ce7551e9f0703038c8c03b9b8786e4d72c156229cca279ace97d2e53a5adca52ffb9254a0bd5dfa70dee66c85b8adaa4339ccef8cac219d82ab6cb68b469d103320131ef9079612cf970dab4bf6e6c7c39a98c34e9cb28dc178b93ae06a106265173fbac34214da52e92ebd3afbfec425351dde5b3765b6dc762a6013bd852b8c6b3637424ec01c1c0bad6c547c70273119a4e9164efd0cb9d"]) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) 05:49:29 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000003aca36d5f2acfbd8000000000000000000000000000000000000000000000000000000000000000000faff00"/104], 0x68) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r3 = getpid() perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xf, r2, &(0x7f0000000240)="e3a2da97770be328da324227bda075241d", 0x11, 0x80000000, 0x0, 0x2, r4}, &(0x7f0000001480)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2c040, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x1, 0xa1, 0x1, 0x0, 0xd85, 0x10002, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400000, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x1, 0x4, 0x4, 0x7, 0x6, 0x6, 0x0, 0x6551, 0x0, 0x1ff}, r3, 0x7, r5, 0x4) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:46 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x44, &(0x7f00000002c0)={[], [], 0x2}) 05:49:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 1) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:49:46 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) (fail_nth: 1) 05:49:46 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) unlink(&(0x7f0000000180)='./file0/file0\x00') r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x603}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1d451ba7be1b1b97}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}}, 0x4004040) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x2, 0xc, 0x20, 0x0, 0x7ff, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3995, 0x4, @perf_bp={&(0x7f0000000140), 0xf}, 0x8000, 0xfffffffffffffc30, 0x7ff, 0x9, 0x0, 0x5, 0x8, 0x0, 0x2, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, r7, 0xa) recvmmsg$unix(r2, &(0x7f0000001e40)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/3, 0x3}, {&(0x7f00000005c0)=""/129, 0x81}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/218, 0xda}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/246, 0xf6}], 0x6, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/245, 0xf5}], 0x3, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001140)}, {&(0x7f0000001180)=""/165, 0xa5}, {&(0x7f0000001240)=""/3, 0x3}, {&(0x7f0000001280)=""/179, 0xb3}, {&(0x7f0000001340)=""/40, 0x28}, {&(0x7f0000001380)=""/190, 0xbe}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/239, 0xef}], 0x8, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000001840)=""/182, 0xb6}, {&(0x7f0000001900)=""/203, 0xcb}, {&(0x7f0000001a00)=""/74, 0x4a}, {&(0x7f0000001a80)=""/172, 0xac}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f0000001c00)=""/181, 0xb5}], 0x7, &(0x7f0000001d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x2023, &(0x7f0000001f80)={0x0, 0x989680}) r10 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r10) getdents(r2, &(0x7f0000000000)=""/94, 0x20000018) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 05:49:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:49:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (fail_nth: 29) 05:49:46 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000054c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]) r3 = getpid() perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000006e80)=0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) lstat(&(0x7f0000006ec0)='./file1\x00', &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007000)=[{{&(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="c76edf275fa0fe2251cf5ad1a13cb1ace2b7fcd7a114a8ace7a3b9abebec43d3df68ef01decbc057428552c0f0b5f2d82ccf251140", 0x35}], 0x1, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="813f397c4b55fce7058f4cc0bd1c24227752f952a28e18ad729b1d3192f807faaf02bdb32f40de8b9cf7f80a0108546367ff54e11aef6f0cfd1802a32054123cbfe99c2cc24f909c3476fc70ea0e71c2d27b8e12cd7e713f74470117c824ba627b6c1053f0b67be46df24d17d790ea61e9878f8dead7b1b9ceecc1beb8d8e8af10e882f87ddd0087cd00850f5887681f2205b51f707f739ebb69d6e498c58280dc477300695bfe4e5fc05d1e5893ad27cc0f8c7fe544acb62139d91bf49c06bcf7c954ade4b159384990c96a1bf435b1b628145a0947f885", 0xd8}, {&(0x7f0000001480)="563b9f4826b8928cd6fc21e5e1dcd931ee883851fdb0e5d1e3610fb548e3ea37dcf14e716da3fb6d835597134cf6111226ad49dc21edcced4b737c0f195fa490c9c809c63b", 0x45}, {&(0x7f0000002680)="8aa005f274955f38f71bbbca11f50c696179ef38cdc44453d30980c19db5d23c61cdf8afcdb704252444d93e064f0d4bae22191b6ff70ca4b9661ce9823d36876ecb7141b8f6f65dc0e690a796cb5fd2ad2f38d87d7e0cdd3a95982e00ca54e5975b09a0056a4c134d115d1f6c226e2d387a9c118ac9a21e5eedddc89a5668", 0x7f}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="a828ab083753691c3aa58634eb9438ccb24b85979d1ad244212c108bfb9a7e353d0bd96f00fa07bd46bcc7b244d9a9d8e172c9804c1b127f9ca8c04535a446bc5df67f954c1bea92a21061f974c2060e67b5b60566d245526fad6bedc5e9681e7731f915302811edd6c6d670762ea6c9e6c0e043df22527e140aa1dc2aebb992fdff51d7ffb3ea2cb8aacb7d6226f752998898203f573ccf272025583143a986cb558aa43ad7bcf6eebe8527e66d8e69a9c99b8f1e31556296021e89f783271bc4ea71c6719240a892e2336e2f665a08c569e69c2bd9759c9d9c5cea5e17fdf150ebfeebb873eb30f19edb2959bf8666d33292414255892b5440211583d6ee2b61235b52f4b84920560815e1b83bf9ec5e085122a0fe6a50c62eadf31022b0d7f09ada70ff3716dcbdeee10f2da2564317b27902cd08b5751f886480bcf72a03575d8577f9d820a01dd1b782359bb581c8e41539583efb70921fbb305848ac6d133990f71999086f5fcaf551a0f79af71761c87e972305a003cd36116a3bedc4c2a7447981da3c09c930d5be5e09c62bcb21b1b8c8310a3e2535ec8cf2a804c1f2aef5287ac33d57214cec877a7678bf7589752820236ef5c7599cd05813c88bb688a9e805b08ffe28299f2b0d0a609f099c500413c511ff6216a847c0dcddabb5e44d138a7cf6c7c5ab905fdcdc35d7808abfee4900152f560bdbb1ebcd4150659c1e04978e6d3c464e5157631e7ddafbe8eadadb86953984fdcdefd8c396c87dab75d19330040c554d346f7e42068d1a96684a3c2f9b38e005ef207092e90d3a619548cd2448ea99e51937dd4b191ec27ced42c834a2fffa99c282a2e8325daa74ec4d8dc15b35151853a7c591145fb898d02e12ebdd299c7055f1eb1e2dd703f1d0c8789fe04b5ccb7f7bea1313ce368b2791959459d8b28a750a63a5c624214ab7fed3b3c4ad4e872f614ff8b76b77a9b45bfac016ac048d3ab271e294eff06e9ea650321144bb9dca12fefedcae4c96cb890a572ea408ca05ca17c69c5e9f5b7450b8fdf1caaa2d940b6db72e77334d048c6bc74b1ee7ea04c2a38663002c0a2efac505f604eedb33c11e7936eb1a012b3c35edf0043f64d749da8a3a42c56caf5c6c1b2f281cb76cfc5532cc5c326447a1aa08cda1a9b23792877c345679188121bd28608dd6bc2f48e0f7f9bc40cda2d89d574f9c2bbafb9d0dcc777a411dcee1fa1155f807107b7bbd9bd49065fc968c4bf8122264c20c64c9756805f99308cf6628c89b187d7f83944262448a7cf39dd02e15ffd4c04b3c7315176b2cbb022069b53477aa690daaa518278f0837840f3dcf2356cc0ab788a9fc66caa507a0cdf502307677fadedbaa0bdaac51b9ec36c956d21411f2ae344debc29e55910f4d634761f8d4dd8864d4ddf1687f50133d82c23c170097ba87b37179212529767f50a81f6d6bd4727e381b46d88aa2324e1e33fbbd5d8aac8bd4e605ed73c3e931edc5eb192ddf90e5533b2a43de1571c2217d1b913fc5ff2cd833de81408077d21da1d0934c3912146ebc53b4e03907cb21d357b699b16d1b1622475f595ed139670a9395eb7c115ebb8aa772632cf8aa68904bd9f6d400533f5464523cdbcd29bd4f04686f98328ba6cf03839b62dd45ff0261a8a1079ef0157d4f9ca620c4c1c11919aee5eef829888c33d9e719fecb540bb42f116debaf93d775d203f58411d19805386f1fb27d19be5b1f627536b3b9d32ccce6ccecc9fad7e3dd9d218165d6a9a22fdf916d994761baf8297c22a5e1bd20138349e8eb0a9a0213b2364fe6f046708b9e2ff809806addf0cada85703f665523faa586e461cc0b3747294883812f78b75b279daa8ab19551833e4cf4891c69f4e332a9a7acf099c99e536629bf1248c6bed3d06ce407aa12cf440de39a69bfb87e51fcb59ad2bd80be0f33cdd118d74592cd738c944d0d6260859b0726570fd3fac3c5ece9f6cd6cdf128864c697b8689162d155860bb096b6847c78328bf1ad1aa62ab907db267c9b1d849b6d5f903765d0507ee80f3a906a49f8621911b64469e08b05f6000775f7b6fbf8dda904bc408ce8a94b6768dbce9a82cf09e4bb69fa7b837bf382c454b26b459ddb816e454a6650800c5c1c6e5991bf5293eca976f02bcee0ae5ecce6b42c9d8b5a1634ca7d90f48e04322a0b4a37468cb6139c3c9556b8a205e63582f86ba87a7370dccc1ed88030f03b795cf0335f11da534489a90a5beb964d4feae3938cb03ceb153dd26c977e849e58191ab290e8ecfb2a485e795b84de5d29d03b45c45d8cb9d72b8cf0cf34d1e0aa4722f15e5201ccd534d03e5948739a3a80264ab688cc12713cb38aa91927133aab8250d4a9e2e228f82d908eaa88658cf0162e569a19031e3ee72dba99765a8f07b6a3e8a56ec41629e9d3eb66a02f6e93ef3c825f6cada7a2c07a3e47909d726aa1ef6063882882fa9140df28fdafbaa4b69bc4401f0e4c2a022c062a4bf6055fb790b0449f3c2a104de85766fe5cf9c38e1e53816bac9a8e64e855576ce238b400b2f7f1960f454537693f876679042d00ce481825bb4c0c5c47d4d261610597f82f1e614da03cc2990aa27a08d418167e729836bb7c83241b16a3a24c5045796705386d6e5cfe9887ba58a11886b10b4f6998812f5d86c9785783dbeebc4df3aac1b604c3e1ddd2d013d53101dc17f2716a75df817983315b6de9e3f908ecbebf733f40a53506546f5c315509c1dcd9ffe87a94bc2aa8e7ccfefd72b233775c352412f103d9bb9c8fe3e2556c34db4e16ea70babe460aa8f75c5f80b4ad92cf198a43a9b77b80a2668667283e5d0a527c2a5327fb4191145d62966633ad4671283214f6cb10bc67d12de60e067173a17c3b2c1da42f7490e09d663f7539ec630c86806c9222f0046ff0ee4b5773572f6afcabd59b9acb86d120128befce54d2c8839e52fce0244688e0c3c75425b6b8033dccfae3bce68628e98bafd7244272a83ec42c2265f3734fe9f652011937faa504909383a2277c287c485cd34292fc4296f64f94cb991c2030f989c1243e465f533b2a74a0aefbab5143c56c7a390725d07c4f33c6022d3bb6587f3048f3cf514b237b2bba73d8c106dab6f462daf78b90d16790e77306602782dcd0db03b3a1f9819eaada04478d5f18b335167cfd40743c7186937adae750a5d31aee2eb81acf1310bc28b8332d0f9f8f3b78098ca351d43609243abfa4eb0c1fcbc09e5d9f7fcd2dfaea4fa4948cc65d699578294465e19be2ba595e63cc04076fe4cddb9f8fe6ed193ac4b17fad387ee8cadef91ecb6034fe1e955cc6b148103aa9730b6e8cc3be60480b27738f0b0ebe59856d49b3826b370ecc336f7f4f890cd0e7d090fbbf30d8bdf3585ca440633439ce38ad9df526a2c9e85fe56803afd5d77092cb8bae1b0ae1d8f664f4035beac6bb37757db489cab16248054ecc4b998490b87abe0637cbb6ea1e43df59a5d076c25ad48ab991d82a52fb9319a8f33da56d2a60241100c417b0eb5de30271981ecfae7458fe458087acd55a629019904d08ed68b554beea0ac4d648d1349edc06adee2b5910b845c27d27905f65a850185108751ee59061b20b06bda25ebf52421cd481b171d007b586de8876e1329144e48f13b41f9fe1ec6350bac34cb8b501b4e666e3399d699adc2a37e6d676dbf31c5b2372f25b758f32f2bf5d177cbe811a9c3e82838fcf1cb0dc545a9d118031fb02a875d1269bab9eadd1d6bfc5c2f833f45711675252c9c163484af098d78b693834587291c16d4fba80f7f3f37e2aaa381669ddabfc2f2860d627bb5780a07ebf7441779845b1388b3290fda370dbf739f63eea299cbf2a3a083a315bbf0871685e641d3c3400a67b77dc767c36cfa1b0c15773a6cc5e33d01c576dc495d7642e01af8272e52f8258269e28fd93c9552ebde4058784ed37008da15065e7cfd6ff3a4ed53b73b99b3f2e6b16590a2b0fdc9846857577d4b96c2e407e2e9a56f5becd02501bab0cfd143ea02a16490d4124045025a6335cc74ba0609667a7e4b9ceb679f3f5c621cd0a39d67511eee57fbfacf7a9fb7fb04fd7decc7ce33c5ddeba1c0bb07d791ec144691ab806a7f85b3f678910b3e1f40a0179d5dd2ea98fd4d2833eff818c167a401080c8d862b5848703948c70af56ca166cc9082e9cf23518c5d9283ef408569cefe23579b1050dc772f7adafa612e4a70b821a097358ac8834b66ec3e6901786de499d66948d401e06548bbf061d5f8be37a8b4c54a7626d3b6f727d87a45597c41fb2578a510ed9abb6394d23487788a6f2eac1812482cfedc41cd13d6e0b7bdfe64621dcaa29aa89f3e0ae65c5b42e58d75f53ff78567000aa474a8c28c0175031b1164c69046a16cb47d1a358e15876ceb9ba6452faaada580e10b1f832101cd5ff726e54d2e428c63239b844485e699f7fc62a3feef5de91880aad8bb70d793c8bce2659315f6c8ddbb83300fc49bb4a4d4a4a8b886ff48729f2a04545c4c4c68e922f5d763ab5bcdc681b6940b126e6f6a4cb7e10a8faf5f00200e14989738445c7afb78e739b4869f75ba4e5aaf68cf3b5abac07b63d431e495b45bfb57dca47dd02a64c04999c08c08ca7f35fd1cee175f1fec6757778e54c2d55d8e083d76d0976fee078d6191a6fadaf042cbf807733f70910831b234e7efe5bd4a919a3965b9d795d780dd8eeb99067a813b5104106294d12880ea73015ae0c402c0acf539523a12817c8735013a9c0f8dd6ebdf546eeb098051a983e2d0026b008f79fcb4d84b981b88edfdf92fde8f8bfb16d3ae64244530c33fe01a5f2538377c97ff88af23a1c873c640700df66f8e54df76b25241c18ff62bda987c431143ae9e56197578cb08cbf192d5c4e6891e6255b2e3576e82c2cb4a8b1a289e8747a889cf8e58a4b3ebc9fa3f170b250b82755f06782248d72ab7e4cc5e2151ce84ec5af929aae07eb6f404ef7003e6546398b5af8f16dd679cf42981d95d706e804e099a7432a7686c90a04e994a3f76c44a98c050afcac17a552ff570f77034bf30ef5fa283805d1827ac9d2f591e203df2b33ad09b34a01912f7c9bd44aa7ee875d5376d6946a6c18dc9a6736320e9824a6961ba83d850e64873bf1d7b8fe58bdfd21158097fc8a44bb53e6617578ae56fbe2614d7206886f7daab01d010964d7a5f88f16906cefdd0014ac676ba781dc4e29d3f70349ab1c3183ae9428a07d4816fe0eb88f29862ecaa98e4cdfa68a8b09a39fc5ea52368ae5ce2ade558078adbb24ce9c8a49cd55f2e7e269e7d247dd190862222578401d4e28ae9efb695d3264e0bf8ddb55edde385a04f9e21265a39813f9dd253776dff66a409745832a0b0019ed284fe3112f8c1e0038ff18b80febd73e73c23b1e80bffa06ea76ec80e0c8ee53b5c28a1fb3edbbf6b2b35cae428001aba5d440bc0ec698122d3a509881aa7311afaf004e9a2d373d287c3d06bf563ec968d45adfe491c2e7948c0aee1bfb14a091a71efee57da2aa9f87bc2b173d74540c89a77fa6670ad2e4bd4922c7fa913dffc6cf7f96476b644084a91d1ae8e7feb864a3f4fe8431295a74acd38caba2bff6992b61739081975854207dec060c44fc69282ea0c709d78f7290ae812ad5f0237e6b0bc56ac56128c74d3f291bf60b10e1de560053f48dd4bd6a49105d1292555d41ff7c8156288d05f34fab29cf06e4aaf3554f9be2e1c92af74c4e88f9aa506ad6c436f924c68fffd7694f662e4f64107c0fc6", 0x1000}], 0x6, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r2, r0, 0xffffffffffffffff, r1]}}], 0x30, 0x8010}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004780)="a57d69b21518af13dc875415930259d636676f9a807b20d27671d6429f912587a4b430eed881172d0d7723b066be0d116f74a7b6791f505affa6046ed122a3d5b056b8c4c75c9d38244d9ddd79d6f100707cc720553f86f26d477906c109d01f194a4b984e6acabb403dc89f959bf7a2ad14b655d02e9566f21b31f761b75481972c98d73c6f4bb5ded829646d053341675a5f5b2e8f1c90586cbecb34d0405b6322b34bca81f2af272647dea1f36f52d9ccbdc8b1182e91d8f4c9a84fd738563985a8ed335e61178fae851d7b66c3139637b9929bda33428533833d9d989b2956bfa8a9012e", 0xe6}, {&(0x7f0000004880)="ef18e41b0fe6c27193f0b2bf8d58efdca035aa9da0c0e41a0b10c4a71f212c828a0e07e7322e1395d3d20c6615af8a5c6d39100f81662a5e7c7c5404705303c2f8453428b35d5b02f361f630ea021d435fb9feb8d6dca4ce243a77bb31e7d835994e5404f64aeba572918a9ee0761bb81a8546359b", 0x75}], 0x2, 0x0, 0x0, 0x24040880}}, {{&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f00000049c0)="a8c3b27db2019b9613ba428cf979ebc44f02954a32ab271bcdee4d4d51819aecc3b56aa68d8aa0bf5eca0d914ba3d89f638478cb7fffd754c826b523ac314dd5e93214332924a13ac31b442ef71db0e7", 0x50}, {&(0x7f0000004a40)="cfa142cc8723442173812534cdf7e721314b7ce6b6afc98e45109ced5a4eb67ccf3ad74053d290b872daadc356eb5369449a1382fa4753", 0x37}, {&(0x7f0000004a80)="dcccd801904377a498e8270d2972d1ff532b01133afa9d5d57433bc442ac7dfb5d51bb29420f0be466af4d7261cf9ff12f58846084d2526e9ff221c19e1f41d0fa2fb4b559c7706edcef680f25a7a34df352a20c2f19488f7262ca4d50a467414dc791e7bb1c0a77314b592475cd4a838860f48525017fd63f6f8930f1cd894020e81f551695d52188b1f24ed7829f29319d39622c7c6b3b321ca4e2ee448dd344eee165ca767376aca4ea0af718775c07e31568021914c322aceb0a1ef6e3b913246907e093cb88aabbcdd29a57b379acfb8810ea333c03e3a926e67e72b08f117da08cc31bf271a7df096afb931037bfc314a22c576f", 0xf7}, {&(0x7f0000004b80)="0c119b42d0a06b85b81f93a2417df04c08a23587155e0e6b7b5d1e0ca93bb82f1fe0a0c44c0441d95f8551d8933887ad02e36d44db9415d241d30d5e1ef1a6d7423d24205df7e00bf9ba0b22721253bafe3185453e63fd7cbac3bc41fa9e8271c33b1b8bbc53d750bfdc1c3e9bafb9d0df47a25515ba4510c0d71be4cf67d2343eba1aa5b74ca1ccc0ae83ded75c7b0e93c4a8acfe701856826ea91a8b1f0c2d2483d975631544eab7bfa86217989e10", 0xb0}, {&(0x7f0000004c40)="0fbedef355675dde1c21191b9f2adfd36473cad96959b029cb4714d8abe63f740ebccc3263cd2cba5e46cd2440cf881526512c64714a8ba53465e82aff771533ccc33129fe4155f669a97c11663ed4778ddfb30f5f26991bf8d76e16e17932c6beee02ee416fea34c7cc651e2a1023e6637e320ef5f14195eeaeeb073f526402134572380fd046a783240f1f3d5dcb72b35477827021f750dd99f532faaad3f697fb0abb36f74c234fbc86954d0251e8823c1a30d67d4b0634e69386a97fecaded8b107ed964fad6b99cf2f2f495", 0xce}, {&(0x7f0000004d40)="50720c003903e626c8361720a69f89ba96e7a5252d4480d54d774e9dcf32e3", 0x1f}, {&(0x7f0000004d80)="a0cd0bdc361a89680f753d4a2a7cc35768e6f6e6d8f1f189fa685e236d36500ba6853c237ae893536574c49fac1ee8fc2bceee7fb1a9a2868361dbd80dfd4eddb452b9e4c18f7fce7e168ea70bb54f83c99dd37707116f9804cfe26559c19f07200b630bcc69e05621fc7135edefe9e79725c729b22fbbfa1b02ec9729a978012757494f7e00507621ecfdab7b9add2b2e9706db74d1f191952e26d0d6b2a257f0d99b936299f4cbef28a7585f83ea143b97124d4fbf1c26a53e0b4515c738669073568bef65cdadd39df037d9fde14b86ab339c57b06f9ec2a68a1fb0faf2cce9dd5fb6d369f123a0f5d80366ceb465454ed4466104186f0d", 0xf9}, {&(0x7f0000004e80)="c0e6b176f39fdf3867f3e8a0324cce5577224d7a755a90c81e31b80cd9d2b058d6e7cf9aa727c3122573a1aa5adaaf007882f1961b675c58074a506687a32fde45646b89c9eb7d715d89051e94172683840b6d673337c063ff4caf8bfca39a671d6eca936d815c7cd91fa90ea8d697b075179f935d88694227ee83fbf64bdb459a61bac350f1d5f1f5f94493a5024261a5e675aa65f48403aec4cd74b7f07413d1cdc7419d7822ab0fdab91b900c43599c9ae4cc55312f91fd0b1606322dfd1fe63e36fa7361302d45262e", 0xcb}, {&(0x7f0000004f80)="71d10404c927a7ff5e8a53bbcbebd8e3c1d79b5730ef4177ecc98a059c76", 0x1e}], 0x9, 0x0, 0x0, 0x4000004}}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000005080)="61fdc04bb6bb4637d566452423fafa4a", 0x10}], 0x1, &(0x7f0000005240)=[@cred={{0x1c}}], 0x20, 0x804}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000005280)="5436d0f4dfeb8ea37c76ba21105bfc1fc5460b2a27816a655b8de479c0814410714ac8c3b060e879927b7b3de9b2adc99b5fb759b1eab4c9ab4df82f5f66f5f2009e56bac9f7cf9bcd8a8085f3dc3f6f87b7c48eff63b43d1bf97d7abf0f6bd0ec44059fbe01cd6b0fb5cab8", 0x6c}, {&(0x7f0000005300)="b5dd0caa6549f569d1da2f5e1c8bb9b9cca2905ab52c56c7c3a702a09b73d9e18121c94464568aea3599a0b4ecc69b42b008e96796617e7579767260756fe149894be65870c89e969efc7da66b2312d6242b2b2f8813f111117c4a521af57d2e1637a184ec95f8a294f5b88ca464d566c4e5", 0x72}, {&(0x7f0000005380)="cde4fa0f5b7368c6dcc931faae75e6b83306390b1589736a05f624", 0x1b}, {&(0x7f00000053c0)="90cd56fb449b4050e10b2b478d4e49d9c7c670149633e37515c83db9034b88110790091b6a72553d72cfd4d87ca6a443b367d327f1eb6dbf941c522112b0745c1290f2dfbb950db8beb2b8747b035e3245950201acad22d40c3cafa938fe7cb52a04a122f66ad3bdd527b04edc5d912c6c55f008fd4697d9b1ba48165517d4fd15ab2a6befe2b21fdf84dc47aedb", 0x8e}], 0x4, &(0x7f0000005600)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x38, 0x801}}, {{&(0x7f0000005640)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000006900)=[{&(0x7f00000056c0)="087e6e4498c0fef7301c81f27ca6a6", 0xf}, {&(0x7f0000005700)="b0fa34315340e179abdd16312d25ca20eead835eab17f095863e4a9b4c4be759a9da8bd52b4bb365cc0bfe018cdac8bedc816b09b075e65036bf5f2e397f0caf4f23b0924f5552e48e66d3856ef1e38fd8bb6e682ca773f0451dc34e10744d14e482ef76b7a21f7a8cebc5e0cf3a2f26258191a52823ddf61d97acc9fe4587df52860c8851f8b73796a8f45e4da859ef1c", 0x91}, {&(0x7f00000057c0)="90c212169b6cf5dff0768c56c796de359a2faa4f3fead139ae79a9be20cfd354b1ff67eb524caf23bcc9fb8c864208bb43eb864a68d6072342f5c7fe688a1c8e46270e5d62a28da841745befb1c7404be74f4a75e4dc2be0e397194925016c2c381af796ce057f32d4cd546cd5f92ece599eac1ce21c352cae90f7bdf32e6fada8", 0x81}, {&(0x7f0000005880)="e88c27a07d137e3ae98d43215a29bd5cb999156fc7787a6f6d9bec9d52769dcd5b4a3a15382e5fb453d424ffff69018bb40c2524146639277c331ebfeec3bd18c05897cd34e4d79cc2def57a7eb51bddf63c42a2249f", 0x56}, {&(0x7f0000005900)="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", 0x1000}], 0x5, &(0x7f0000006b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x1}}, {{&(0x7f0000006c00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000006e40)=[{&(0x7f0000006c80)="bee52b1091878ca6122946fbe5e99ec14b395ce78303b1b72565e14a9aaa480261434feacdaf21dfc231414e4e96eeb9979d3417d074290731c565074dc0ec613306291366e978c06dc07de7b51d5e69769c24e74739e963615d6e3c842a", 0x5e}, {&(0x7f0000006d00)="dcc984246b170a74aa78fbb4ae9cfb586157e099b7ccb91aefb36825b773cdc46fd85c65cef87f7d0a051b07a49e2dfe27afa6d5fb06c12c0277fe0963ca8502e09e5440e34b8d632e8f33a93fa7c55ce9f0300e6d81380d2006f8472eaf75e4d0722462d41bc69c18c7de8639ee444889eee92caebd83243198e62eed9b71", 0x7f}, {&(0x7f0000006d80)="0350ec869c935740be7afa3dbea9b8d36f974545256dad766e197872fd5c51f709f4fa289f831d6bbccafa9f76be3d9911d02cd9acf1de6b4e6fdb27789e0ac4a27648a3b040459a2c560250f2429cf90d48c1965ae7cc8b277f7701936eaef00ff03eaa2a8c09a943b67cb95d9e38ba27b9dda1487614ad8bc6eaef8b512e48c3fbfcaad59ed4a384294d74fc14cedaf13469", 0x93}], 0x3, &(0x7f0000005100)=ANY=[@ANYBLOB="1c00000000000000010000000200000005ec2f831effcb4a8f47957fd13d63b73afe", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0], 0x58, 0x41010}}], 0x8, 0x4000880) perf_event_open(&(0x7f0000001400)={0x3, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4ca09, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x0, 0x1, 0x800200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 2482.836746] loop5: detected capacity change from 0 to 40 05:49:46 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) (fail_nth: 2) [ 2482.872344] FAULT_INJECTION: forcing a failure. [ 2482.872344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2482.873353] CPU: 1 PID: 13058 Comm: syz-executor.6 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2482.873975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2482.874796] Call Trace: [ 2482.874995] [ 2482.875174] dump_stack_lvl+0x8b/0xb3 [ 2482.875482] should_fail.cold+0x5/0xa [ 2482.875779] _copy_to_user+0x2a/0x140 [ 2482.876076] simple_read_from_buffer+0xcc/0x160 [ 2482.876440] proc_fail_nth_read+0x198/0x230 [ 2482.876783] ? proc_exe_link+0x1e0/0x1e0 [ 2482.877098] ? security_file_permission+0xb1/0xe0 [ 2482.877480] vfs_read+0x253/0x930 [ 2482.877762] ? proc_exe_link+0x1e0/0x1e0 [ 2482.878085] ? kernel_read+0x1c0/0x1c0 [ 2482.878398] ? __fget_files+0x270/0x450 [ 2482.878723] ksys_read+0x127/0x250 [ 2482.879006] ? __ia32_sys_pwrite64+0x220/0x220 [ 2482.879385] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2482.879772] do_syscall_64+0x3b/0x90 [ 2482.880066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2482.880479] RIP: 0033:0x7f53ce89f69c [ 2482.880764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2482.882124] RSP: 002b:00007f53cbe62170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2482.882704] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f53ce89f69c [ 2482.883254] RDX: 000000000000000f RSI: 00007f53cbe621e0 RDI: 0000000000000004 [ 2482.883792] RBP: 00007f53cbe621d0 R08: 0000000000000000 R09: 0000000000000000 [ 2482.884325] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 2482.884869] R13: 00007ffc9ba65cef R14: 00007f53cbe62300 R15: 0000000000022000 [ 2482.885425] 05:49:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 2) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2482.926301] syz-executor.5: attempt to access beyond end of device [ 2482.926301] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2482.927389] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:49:46 executing program 1: r0 = syz_io_uring_setup(0x58ff, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1f}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) syncfs(r3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x801, 0x106) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pread64(0xffffffffffffffff, &(0x7f0000001f00)=""/140, 0x8c, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 05:49:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:49:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:49:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:49:46 executing program 3: r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x1) openat(r0, &(0x7f0000000200)='./file1\x00', 0x80000, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1cd802, 0x0) mount$9p_rdma(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0), 0x10440, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x2b1b}}, {@sq={'sq', 0x3d, 0x864}}], [{@measure}]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r2, 0x0) close(r2) r3 = openat2(r2, &(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)={0x101000, 0x101, 0x11}, 0x18) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f00000006c0)='./file1\x00', 0x4, 0x3, &(0x7f0000000900)=[{&(0x7f0000000700)="26cc9014521536fa7f7e68a24dc5195c883b4b214b6ee73ab7f371e797ef4f677d0ca516b3b2e30c73b53ee55fb5ba8bfed09bc2aeb53abe0cfba02d4070ea1b3632536f4c16f8c0bfced17c151e46fb24ebdfc8b6ec50ec13c9b0bbc9cf4882219584e37a0106b85a8fb551016c92bfc76138e00f982f1763235e152ad913e7f908d065934f54f39423071d3f2e9ab1ac381cd3385d78390da437380071ee", 0x9f, 0xc81}, {&(0x7f00000007c0)="e74d13981ec6a5ca9347c7b3366a21d305675dac57db7d5d7535c6660916d243a6598b8c6a857296511724fbbf6ed714b9168d4f6d7388b008acb46700fc07011d19103a25cdb5e867a7c620e4e70e6ad6ded4880af3fc6dcf01cca7b8f10d873058e4ee760f8b5daa4e3cd8d8046d392c26e5b94eda6966967f1a84d0d468143dee", 0x82, 0x9}, {&(0x7f0000000880)="80bb87409711d4536ffd4661b03f1d8181f848aaaaf8749792dd1d493397844653a936c24b63b3cf24cf772dc645a0ff62e2dc2d9f6b9e3bcb1279b487e226a8841c9e3d738bd5b99492cdc692aab08490f6dd7876efcea301297e2c244c20a57c651e45d60a7243ec8f8c3d712d049f2c17cb", 0x73, 0xa2a3}], 0x2000400, &(0x7f0000000980)={[{@nolazytime}, {@noload}, {@nomblk_io_submit}, {@journal_async_commit}, {@discard}, {@grpquota}, {@nodelalloc}], [{@obj_type={'obj_type', 0x3d, 'trans=rdma,'}}, {@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x37, 0x62, 0x32, 0x65, 0x64, 0x65, 0x38], 0x2d, [0x36, 0x62, 0x62, 0x37], 0x2d, [0x33, 0x34, 0x37, 0x37], 0x2d, [0x0, 0x39, 0x63, 0x35], 0x2d, [0x65, 0x65, 0x31, 0x38, 0x34, 0x31, 0x38, 0x61]}}}, {@seclabel}]}) openat(r5, &(0x7f0000000a40)='./file0\x00', 0x4c8000, 0x2) truncate(&(0x7f0000000180)='./file1\x00', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="0702bb36edefdf8fef90cc99fd26b912bc9bfc3e2d485b598390aa39f3897b10d03bc2682aa953379ed8236c609bd71ab0ab291b82bf4a43072d6cba93bb6354b2fb3f96ff2702cc173f0f082641a049966edca98826b3d92f3e728f5b2a07fecaecf45876b68d67eea2e25b5e94f8de", 0x70}, {&(0x7f0000000380)="a1e1d63a5f76c9b7780f97886ba74e970d5ec2ac8ff37e5c0490e864b975087aac20d1e14ac6dd8cda0e030963c297c8c236061b1efbeef27cad5d9653f299560039f45fc5816310a32e24b23cba756eca76dc4a07250d3b7297b4513f31773c9adf5c2ab0076d5568bf457543e68353b7397807e759ba3508cf9bcafb2d41e6e166ad3ae0b18cbd18135d61680d9a5b86696d7fdd77d19651cec1d1a75a5316e41ff6", 0xa3}, {&(0x7f0000000440)="def80b8db0c796fd5537ce41b187d128adc82d16f0c39e9c6448e1705aa9b8eb8ec799d0ced0fc64eacbd103a9457872fcf94e00887453e950a13a292d6272ee13a066fc6a7f71b01ad53c18c6f8ccd7e850189c630d7c2cb2519c78ff", 0x5d}, {&(0x7f00000004c0)="a3808eb3934f3df40907a015fd1ffce225cc4147403d6ed67127ece4b81aba77ad8fe6ae3ded384743ea26ef9ad9d4ba5b14bd3b9afff0bc0d51a8c6514501336b83dc38d81a6b026a6344732d801fb416b7f3e859fd78ec8a6ad5b519be8aaa641d457848c514", 0x67}], 0x4, 0x8, 0x401) 05:49:46 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) (fail_nth: 3) [ 2483.094314] loop5: detected capacity change from 0 to 40 [ 2483.111705] FAULT_INJECTION: forcing a failure. [ 2483.111705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2483.112635] CPU: 1 PID: 13077 Comm: syz-executor.2 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2483.113250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.114085] Call Trace: [ 2483.114289] [ 2483.114473] dump_stack_lvl+0x8b/0xb3 [ 2483.114774] should_fail.cold+0x5/0xa [ 2483.115079] strncpy_from_user+0x34/0x3e0 [ 2483.115419] getname_flags.part.0+0x95/0x4f0 [ 2483.115774] getname_flags+0x9a/0xe0 [ 2483.116070] vfs_fstatat+0x73/0xb0 [ 2483.116351] __do_sys_newstat+0x88/0x110 [ 2483.116664] ? __ia32_sys_stat+0x70/0x70 [ 2483.116976] ? syscall_enter_from_user_mode+0x18/0x50 [ 2483.117377] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2483.117798] ? __traceiter_irq_enable+0xa0/0xa0 [ 2483.118168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.118561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.118958] ? lockdep_hardirqs_on+0x79/0x100 [ 2483.119321] do_syscall_64+0x3b/0x90 [ 2483.119612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2483.120007] RIP: 0033:0x7f022e3d6b19 [ 2483.120299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.121659] RSP: 002b:00007f022b94c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2483.122233] RAX: ffffffffffffffda RBX: 00007f022e4e9f60 RCX: 00007f022e3d6b19 [ 2483.122768] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020001480 [ 2483.123331] RBP: 00007f022b94c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.123877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2483.124425] R13: 00007ffc9304668f R14: 00007f022b94c300 R15: 0000000000022000 [ 2483.124984] [ 2483.179279] syz-executor.5: attempt to access beyond end of device [ 2483.179279] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2483.180739] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2483.285374] 9pnet: Could not find request transport: rdma [ 2483.298868] 9pnet: Could not find request transport: rdma 05:50:01 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) (fail_nth: 4) 05:50:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 3) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:01 executing program 0: socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000100"/104], 0x68) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x1000, 0x1f, 0x401, 0x100000000}) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:01 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x2, 0x5, 0x0, &(0x7f0000000000)) 05:50:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2498.202924] loop5: detected capacity change from 0 to 40 05:50:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c653000"]) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="590000007d0200000040000100010000000100000000060000000000000000001d04fd9f801a01000100010000000000000002002d2306000202020202020500257d25403a000004003a27402a", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x4, 0x142}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f0a00000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="3fa45da63de32ac008933ab4fc9791ba7e9cc42efc9c921de81c005a801800018014000300"], 0x38}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r5) r6 = gettid() syz_open_procfs(r6, &(0x7f00000001c0)='stack\x00') r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) write$P9_RXATTRWALK(r7, &(0x7f0000000240)={0xf, 0x1f, 0x1, 0xa2eb}, 0xf) 05:50:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000002580)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[{&(0x7f0000002640)=""/105, 0x69}, {0xfffffffffffffffe, 0x10}], 0x2, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000001280)=""/123, 0x7b}], 0x1, &(0x7f0000001640)=[{&(0x7f0000000100)=""/31, 0xf}, {&(0x7f0000001300)=""/49, 0x31}, {&(0x7f0000001340)=""/112, 0x70}, {&(0x7f00000013c0)=""/215, 0xd7}, {&(0x7f00000014c0)=""/45, 0x2d}, {&(0x7f0000001500)=""/31, 0x1f}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000001580)=""/166, 0xa6}], 0x8, 0x0) ptrace$getregs(0xc, r1, 0xa56, &(0x7f00000016c0)=""/36) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000001700)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0xfc}, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x0, 0x0, 0x37) fcntl$getown(r2, 0x9) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x4, "6379d5b9bba93bc9b4223defdd75e8f54e964fbc2ee000f8847a3bfd88943dac9b498980219f57a5abc94dc64ac1f1e27c8211a7f95e033b11270c2bc86e40c3"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002800)='devices.deny\x00', 0x2, 0x0) [ 2498.304322] FAULT_INJECTION: forcing a failure. [ 2498.304322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.306010] CPU: 1 PID: 13101 Comm: syz-executor.2 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2498.307130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2498.308649] Call Trace: [ 2498.309010] [ 2498.309328] dump_stack_lvl+0x8b/0xb3 [ 2498.309875] should_fail.cold+0x5/0xa [ 2498.310410] _copy_to_user+0x2a/0x140 [ 2498.310953] cp_new_stat+0x47f/0x5c0 [ 2498.311506] ? cp_old_stat+0x730/0x730 [ 2498.312046] ? kasan_quarantine_put+0x8b/0x1f0 [ 2498.312716] ? putname+0xfe/0x140 [ 2498.313221] ? vfs_fstatat+0x97/0xb0 [ 2498.313750] __do_sys_newstat+0xfb/0x110 [ 2498.314317] ? __ia32_sys_stat+0x70/0x70 [ 2498.314910] ? lock_is_held_type+0xd7/0x130 [ 2498.315563] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2498.316239] ? syscall_trace_enter.constprop.0+0x111/0x220 [ 2498.317026] do_syscall_64+0x3b/0x90 [ 2498.317555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2498.318268] RIP: 0033:0x7f022e3d6b19 [ 2498.318783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.321231] RSP: 002b:00007f022b94c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2498.322255] RAX: ffffffffffffffda RBX: 00007f022e4e9f60 RCX: 00007f022e3d6b19 [ 2498.323213] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020001480 [ 2498.324196] RBP: 00007f022b94c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.325153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.326111] R13: 00007ffc9304668f R14: 00007f022b94c300 R15: 0000000000022000 [ 2498.327104] [ 2498.332715] FAULT_INJECTION: forcing a failure. [ 2498.332715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.334858] CPU: 1 PID: 13103 Comm: syz-executor.4 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2498.335995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2498.337493] Call Trace: [ 2498.337848] [ 2498.338166] dump_stack_lvl+0x8b/0xb3 [ 2498.338700] should_fail.cold+0x5/0xa [ 2498.339241] copyin+0x19/0x120 [ 2498.339755] _copy_from_iter+0x1d2/0x1210 [ 2498.340352] ? mark_held_locks+0x9e/0xe0 [ 2498.340930] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 2498.341632] ? _copy_mc_to_iter+0x14a0/0x14a0 [ 2498.342280] ? __virt_addr_valid+0xfe/0x340 [ 2498.342898] ? __check_object_size+0x380/0x800 [ 2498.343575] kernfs_fop_write_iter+0x194/0x610 [ 2498.344234] vfs_write+0x9c3/0xd90 [ 2498.344755] ? __ia32_sys_pread64+0x220/0x220 [ 2498.345399] ? __fget_files+0x270/0x450 [ 2498.345988] ksys_write+0x127/0x250 [ 2498.346510] ? __ia32_sys_read+0xb0/0xb0 [ 2498.347095] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2498.347810] do_syscall_64+0x3b/0x90 [ 2498.348331] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2498.349042] RIP: 0033:0x7f85954aeb19 [ 2498.349552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.351994] RSP: 002b:00007f8592a24188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2498.353016] RAX: ffffffffffffffda RBX: 00007f85955c1f60 RCX: 00007f85954aeb19 [ 2498.353983] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2498.354951] RBP: 00007f8592a241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.355954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.356911] R13: 00007fff2aa4230f R14: 00007f8592a24300 R15: 0000000000022000 [ 2498.357894] [ 2498.361110] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2498.388189] syz-executor.5: attempt to access beyond end of device [ 2498.388189] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2498.390071] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:50:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40442, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@loopback, r1}, 0x14) 05:50:01 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) (fail_nth: 5) 05:50:01 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:50:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x5, 0x5, 0x0, &(0x7f0000000000)) [ 2498.759185] FAULT_INJECTION: forcing a failure. [ 2498.759185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.761181] CPU: 1 PID: 13123 Comm: syz-executor.2 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2498.762525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2498.764412] Call Trace: [ 2498.764849] [ 2498.765240] dump_stack_lvl+0x8b/0xb3 [ 2498.765900] should_fail.cold+0x5/0xa [ 2498.766551] _copy_to_user+0x2a/0x140 [ 2498.767210] simple_read_from_buffer+0xcc/0x160 [ 2498.768026] proc_fail_nth_read+0x198/0x230 [ 2498.768766] ? proc_exe_link+0x1e0/0x1e0 [ 2498.769460] ? security_file_permission+0xb1/0xe0 [ 2498.770291] vfs_read+0x253/0x930 [ 2498.770903] ? proc_exe_link+0x1e0/0x1e0 [ 2498.771602] ? kernel_read+0x1c0/0x1c0 [ 2498.772290] ? __fget_files+0x270/0x450 [ 2498.773011] ksys_read+0x127/0x250 [ 2498.773630] ? __ia32_sys_pwrite64+0x220/0x220 [ 2498.774415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.775297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.776205] do_syscall_64+0x3b/0x90 [ 2498.776849] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2498.777722] RIP: 0033:0x7f022e38969c [ 2498.778352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2498.781333] RSP: 002b:00007f022b94c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2498.782591] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f022e38969c [ 2498.783793] RDX: 000000000000000f RSI: 00007f022b94c1e0 RDI: 0000000000000004 [ 2498.784967] RBP: 00007f022b94c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.786135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.787304] R13: 00007ffc9304668f R14: 00007f022b94c300 R15: 0000000000022000 [ 2498.788526] 05:50:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 4) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2498.808601] loop5: detected capacity change from 0 to 40 [ 2498.971570] syz-executor.5: attempt to access beyond end of device [ 2498.971570] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2498.973594] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2498.983622] FAULT_INJECTION: forcing a failure. [ 2498.983622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.985546] CPU: 1 PID: 13134 Comm: syz-executor.4 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2498.986755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2498.988413] Call Trace: [ 2498.988806] [ 2498.989177] dump_stack_lvl+0x8b/0xb3 [ 2498.989785] should_fail.cold+0x5/0xa [ 2498.990392] _copy_to_user+0x2a/0x140 [ 2498.990995] simple_read_from_buffer+0xcc/0x160 [ 2498.991732] proc_fail_nth_read+0x198/0x230 [ 2498.992410] ? proc_exe_link+0x1e0/0x1e0 [ 2498.993057] ? security_file_permission+0xb1/0xe0 [ 2498.993823] vfs_read+0x253/0x930 [ 2498.994382] ? proc_exe_link+0x1e0/0x1e0 [ 2498.995014] ? kernel_read+0x1c0/0x1c0 [ 2498.995668] ? __fget_files+0x270/0x450 [ 2498.996330] ksys_read+0x127/0x250 [ 2498.996902] ? __ia32_sys_pwrite64+0x220/0x220 [ 2498.997627] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2498.998395] do_syscall_64+0x3b/0x90 [ 2498.998986] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2498.999800] RIP: 0033:0x7f859546169c [ 2499.000385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2499.003102] RSP: 002b:00007f8592a24170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2499.004259] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007f859546169c [ 2499.005338] RDX: 000000000000000f RSI: 00007f8592a241e0 RDI: 0000000000000006 [ 2499.006406] RBP: 00007f8592a241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.007500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2499.008577] R13: 00007fff2aa4230f R14: 00007f8592a24300 R15: 0000000000022000 [ 2499.009686] 05:50:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2499.076017] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:50:18 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:50:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:18 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:50:18 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x4000, 0xd68, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0x80, 0x46, 0x1, 0x0, 0x9, 0x6008c, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xafa, 0x2}, 0x6328, 0x3, 0x8, 0x9, 0x3c02604b, 0x1, 0x77e, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x40, 0x8, 0x8, 0x4, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x4, @perf_config_ext={0x6, 0x1f}, 0x2, 0xfff, 0x1ac, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f99, 0x0, 0xe4}, 0xffffffffffffffff, 0xe, r2, 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/312, @ANYRES32]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffff7, 0x4) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x6, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 05:50:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x7, 0x5, 0x0, &(0x7f0000000000)) 05:50:18 executing program 1: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa0100fc}, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)) getpriority(0x5, 0x0) clone3(&(0x7f0000002680)={0x11000000, &(0x7f0000001500), &(0x7f0000001540)=0x0, &(0x7f0000001580), {0x2b}, &(0x7f00000015c0)=""/4096, 0x1000, &(0x7f00000025c0)=""/104, &(0x7f0000002640)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x4, 0x8, 0xfe, 0x20, 0x0, 0x6, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xfff, 0x8001}, 0x5402, 0xc4, 0x9, 0x4, 0x7f, 0x2, 0x89dd, 0x0, 0x200, 0x0, 0x5846}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4) r2 = fork() r3 = getpid() perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0xf, 0xffffffffffffffff, 0x0) r5 = getpid() perf_event_open(0x0, r5, 0xf, 0xffffffffffffffff, 0x0) r6 = openat$incfs(r1, &(0x7f00000003c0)='.log\x00', 0x440440, 0x19) clone3(&(0x7f0000000440)={0x20000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x2e}, &(0x7f0000000180)=""/155, 0x9b, &(0x7f0000000300)=""/135, &(0x7f0000000240)=[r2, r3, r0, r0, r4, r5], 0x6, {r6}}, 0x58) 05:50:18 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000034ee16000400000000000000000000000000000000000000000000000000000000000000000000000000000000210000000080ffff00000000000000000000000000000000000000000000000ad97b00314b7ede573fef44a5a94f"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4c000) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@local}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000001580)=0xe8) 05:50:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/136) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b66, &(0x7f0000000000)=""/136) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x7, 0x7, 0x1, 0x0, 0x0, [{{r1}, 0x3}]}) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 2514.830527] loop5: detected capacity change from 0 to 40 05:50:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000140)="cd", 0x1, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) 05:50:18 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2514.948082] syz-executor.5: attempt to access beyond end of device [ 2514.948082] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.949253] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:50:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0xfdef) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:18 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20a00, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x40000, 0x102) fcntl$getown(r0, 0x9) 05:50:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:50:18 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r0, 0x4b36) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0xb, 0x8, 0x49c8a81a}, r2, 0xffffffffffffffff, r1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000f5ff61b505ac000000000000000000e90400"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x28812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x8001}, 0x4001c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:18 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xa, 0x4a, 0x5, 0x1, 0x0, 0x7, 0x828, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x1040, 0x7040a2af, 0xffffff1f, 0x2, 0xfffffffffffffffc, 0x7, 0x81, 0x0, 0x100, 0x0, 0xf14}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x80, 0x1, 0x78, 0x3, 0x0, 0x20d, 0x80, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff79, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x8c20, 0x7f, 0x8, 0x0, 0x9, 0xbc7b, 0x5, 0x0, 0xfffffffd, 0x0, 0x9}, r1, 0x10, r0, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) [ 2515.187708] loop5: detected capacity change from 0 to 40 [ 2515.282522] syz-executor.5: attempt to access beyond end of device [ 2515.282522] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.283603] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:50:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x3b, 0x2) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"}) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="09f9dc8fa58b8e8d344b0fecf974b24329f2db179e0b346e2cbd147dcf14b6f68f84b4d2698b57f46ce6ef3d84ad2bfdfb8d082e53795f067ae0677eb51ba0a3462f648aa7845a69be46184ded4b2d20000453e89e3f7c92e7b32c7b626578f7f8420c6a984a11007489dd632cabe32a601f310bdda9201c99e7316baf73e4cf6e6e11e9ce"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x5, 0x40, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x80, 0x100, 0x1000}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240000c4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x6, 0x6, 0x7}, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x8, 0x7, 0x8}) 05:50:32 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:50:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0xfffffdef) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:32 executing program 3: getgroups(0x2, &(0x7f0000000640)=[0xee00, 0xffffffffffffffff]) setreuid(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="ed4a943b5f2e555ed3a856d85e379fd7beaabbe9f5d63c02e7"]) 05:50:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x5, 0x0, &(0x7f0000000000)) 05:50:32 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x8c) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) [ 2529.414271] tmpfs: Bad value for 'gid' [ 2529.419642] tmpfs: Bad value for 'gid' [ 2529.452700] loop5: detected capacity change from 0 to 40 05:50:32 executing program 3: r0 = syz_io_uring_setup(0x34e1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) 05:50:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x3b, 0x2) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"}) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="09f9dc8fa58b8e8d344b0fecf974b24329f2db179e0b346e2cbd147dcf14b6f68f84b4d2698b57f46ce6ef3d84ad2bfdfb8d082e53795f067ae0677eb51ba0a3462f648aa7845a69be46184ded4b2d20000453e89e3f7c92e7b32c7b626578f7f8420c6a984a11007489dd632cabe32a601f310bdda9201c99e7316baf73e4cf6e6e11e9ce"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x5, 0x40, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x80, 0x100, 0x1000}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240000c4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x6, 0x6, 0x7}, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x8, 0x7, 0x8}) 05:50:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x8, 0x101, &(0x7f0000000300)=[{&(0x7f0000000100)="da5de5de40ae804edfb5b74182b3263231614e969f41ef2a34d53d09cb4ad04511f6ec3179211f0d2d9d8bb3c8f97ddb2eff2323c866c3440b031c7f8bc2ff9c32ca24e786ac9182fae082effb421c4789d6e5fb536ed0c7ae96e2575e362e91d95e8877008455404424ee06e38bfacf3e310c5e6f5fa0a641f44018b570874e9262e84903882826d4", 0x89}, {&(0x7f0000001580)="feef39116744ec54bc8c4239fadc96addcbe067ef2a9dc779e4aefe6b81e176cb7df5c2c159c61f6cd478ced788737ba766ae8b9403c20698c3b5c6f30d6230f512aaa971d299b27409c28c3a376d0f98fdb358a95d804150e19899d42be231d5754f559c862e6bbf0e8bd23d32a312b327a892a6c85391cf013143236c72f41834ee71ffba8f0d68c9459948cef03c09a89965833cdf94adfa9ac6f567cfb01004e72", 0xa3}, {&(0x7f0000000200)="13548819bf8c11292f9b42063ee8d3b2864321db28175f33e8300bbc0ce1c67ce3e58ab5e448fd", 0x27}, {&(0x7f0000000240)="ece1be4d63a95f02ae05fed005e129f9f6e263b4fab3003694d2c122c6ae02e3325d717ef1485b86b9095cf21d9372bca1", 0x31}], 0x4, 0x8, 0x0, {0x2, r1}}, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001640)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000605b1a9532e5769db404d9a9cc97c5d1d82a257ce1c982b04eebef65b7dd42c27dced25a7a5ab149d03a3966a72dbf35f4c848cc7c7ebf9f2d5410143d6cac938ab681d7aa85db2c642688563491729d9b1aefa0a57b94ed0351a8b8cebd75b3491393e0eddae02d62c35d657927d0c58255aecbb91ad29e965c9d2a417c6010ba3255326bcfb1f829db2155e886da3db4c98e41909d"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0xfd, 0x8, 0x0, 0xd5, 0x4c209, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = getpid() perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x3, 0x80, 0x55, 0x4, 0x7, 0xdf, 0x0, 0x8, 0x202, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6c9b, 0x4, @perf_config_ext={0x95f4df680000000, 0x3}, 0x400, 0x80, 0xe718, 0x3, 0x8, 0x4, 0x4, 0x0, 0x2, 0x0, 0x1}, r3, 0x9, 0xffffffffffffffff, 0x9) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:32 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2529.621789] syz-executor.5: attempt to access beyond end of device [ 2529.621789] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2529.624265] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:50:32 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./file0\x00') 05:50:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0x9, 0x1}, 0xe) 05:50:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x7ffffffff000) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89e0, 0x0) 05:50:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000000), 0x4) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 05:50:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:50:33 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(r0, &(0x7f0000000040)='./file0\x00', 0x218403, 0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:50:33 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2529.859000] loop5: detected capacity change from 0 to 40 [ 2529.998114] syz-executor.5: attempt to access beyond end of device [ 2529.998114] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2529.999242] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:50:47 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a36b4ea9a6e988da64178c0de86acebac9449040000000000008dae4f9c00"/41]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x200003, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x4, 0x3, 0x10001}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) mknodat$null(r0, &(0x7f0000000180)='./file0\x00', 0x400, 0x103) 05:50:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0xfffffffffffffdef) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:50:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x2, 0x90fc370e6ba5b7bb, 0x3f, 0x2, 0x3}, 0x7f, 0x2}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:47 executing program 3: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xc2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff}, 0x980, 0xa, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2}, 0xffffffffffffffff, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000002580)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[{&(0x7f0000002640)=""/105, 0x69}, {0xfffffffffffffffe}], 0x2, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000001280)=""/123, 0x7b}], 0x1, &(0x7f0000001640)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000001580)=""/62, 0x3e}, {&(0x7f0000001340)=""/112, 0x70}, {&(0x7f00000013c0)=""/215, 0xd7}, {&(0x7f00000014c0)=""/45, 0x2d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000001700)=""/166, 0xa6}], 0x8, 0x0) ptrace$getregs(0xc, r1, 0xa56, &(0x7f00000016c0)=""/36) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() clone3(&(0x7f0000004c00)={0xc0003900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$inet6(0xa, 0x5, 0x7a) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x0, 0x0, 0x37) fcntl$getown(r2, 0x9) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x4, "6379d5b9bba93bc9b4223defdd75e8f54e964fbc2ee000f8847a3bfd88943dac9b498980219f57a5abc94dc64ac1f1e27c8211a7f95e033b11270c2bc86e40c3"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002800)='devices.deny\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 05:50:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"/533, @ANYRES16, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501e4316a9309942f8f2c244631aa4f47a03ab053020173b855c9707c43bb0feb19", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) syz_io_uring_setup(0x5081, &(0x7f0000000180)={0x0, 0x6594, 0x1, 0x2, 0x2ce, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000006c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 05:50:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0xf, 0x5, 0x0, &(0x7f0000000000)) 05:50:47 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:50:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2544.640460] loop5: detected capacity change from 0 to 40 [ 2544.646012] tmpfs: Unknown parameter '6nAxކ묔I' [ 2544.715730] tmpfs: Unknown parameter '6nAxކ묔I' 05:50:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000130000000000000000000400"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) [ 2544.843982] syz-executor.5: attempt to access beyond end of device [ 2544.843982] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2544.845951] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:51:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) lsetxattr(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=@random={'security.', '/dev/ptp0\x00'}, &(0x7f0000000400)='/dev/ptp0\x00', 0xa, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) pwritev(r2, &(0x7f0000002080)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="fdd11d68247fe382ad720d15a1bea43611ec5d83c5865ccbf8a37565ce6d8d931c0b1c368caf6db31355b5975e5388ab1b8543f1d99925ea95c0bd6ea799685217e5302b6a5ae1b334cee1e7136dd821cdf8ebf308dbcf9039b035808602e25095f96530459b81fc7ae9f8c3a329cd5a8969b879ab862d1161e1f744d765657bd4194ae7add5278134dad3c84735276145555dfcfd3278c4522d3f6bcf10dbb31fe471fc025877809d8f18f2aa1d69d61c12ed353de100bf5f610c", 0xbb}], 0x2, 0x3, 0x9) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r0, &(0x7f00000004c0)={{0xf, 0x2, 0x4, 0x183, 0x347, 0x8000, 0x381, 0x74}, "2da2e5a00c1b57d127fd09e81a96c123be742a289e911ad7b03417041e223dc3f4a352732318f6745c0ac18283ad9bcf5109abc1f85b14280747ed742067173d5c91f48dcedc26bf3e802d3276c78ac3307a3fd8fc2644cc140b95cbba09ab802c71eff99678b25e40d1f919bc281fb203bd0df78e9e6901adfdbe410a698652c63b9a3ebb0d1f69657ce3ddce08704cfdfd8907d2dbbc67d48204848234d788aa6729ac03d2aea4c7a248add0de7a5966d3098243c615191990e0d2a467be8c47a46cc4287c34f88a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae9) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000380), &(0x7f0000000480)=@sha1={0x1, "a17036de4330dfa9125c7033dfc3569eb4232b89"}, 0x15, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 05:51:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001280), 0x8d80, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:51:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r5}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005e00)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000005f00)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000006040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006000)={&(0x7f0000005f40)={0x84, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x80c1) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:03 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000100)="98b2ee3abc228d7a70d749a4728a", 0xe, 0x8d0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x170) 05:51:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x10, 0x5, 0x0, &(0x7f0000000000)) 05:51:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:03 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="01bf0000010000001800e9cb02785476a0d2dd13cb35f8ece540d8bbe459d7cb8e909c594ef2eaffe0305595d5303dbd6c62bbb0ad911fa5680b64299f2455b99bd57723bf0ace02ff8d75870e6b8f655334a23376a44fc4cbdb5ae95654b19898e6e537638edeb8499f7d31d45be810a8200d3d02", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001680)={r0, 0x101, 0x2, 0x778d}) memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 05:51:03 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 2560.570394] loop5: detected capacity change from 0 to 40 [ 2560.647788] syz-executor.5: attempt to access beyond end of device [ 2560.647788] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2560.649185] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:51:04 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:04 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012f00)) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="b8114a63737c1deff5cbb101db6c42cbe3ed675875664351eb8242e6c9", 0x1d, 0x9}, {&(0x7f0000000140)="774d663b81f8e244b228c6d6bc694c2528bc2f0c5b560346dcee8d9730dd33ea788424a30e34d57cf86dd92507feb27c53a1a9b9d487060a07968e93223ba71971b0ab4315ad620d5967e8bfb36d39e5c5e47519ac", 0x55, 0xf831}, {&(0x7f0000000240)="4ddff6ecdf3ad5d771b5d276f0e262b9d6ed51bb96dab30a90b9ed5aec1d96ceee8d4e530b1a8a4b87fa61ad6f65b4000b112b09b219a8ffbf8f95b54de604996b7a5bd4936c1e5c3969e84b427b40a7e1fdad6d36e8d9452447967cf8179019b302c01336cdd0e4229eb12259a7f0d53f48a788b755e4125112ba5d03f46596f2aea168ba9c8e2e615522ba92d75d37dc75bffbfc62e3774f7177538d2b", 0x9e, 0x7}, {&(0x7f0000000300)="020704c92f712264de83684390c7147920e284d77cbbda92a256341d2383282b3ab5e04d1f03192f2019af5797a4632e66d44771ce87f69d4a8e6cbc0d0532772502e0350556f125b2225705fe720155072e77aa0cf04683d8c188c0ff1036512b29753bd9800163b4ada9ccd132e4bbbf4109f52ee8fb870b27328edb9efc2c24508b889e3fbdf375ef408ce70ec156ea1d94609f57f6f1444657088f69083be4ef0e4b9c115f633ac34e756ef3af4b333efb70049fe13827bb1962c6568439c578769e733a817bd948e6ae8833fed1a3308b94cf2fd1c7c1b355fede6dfc41522b5b36111d89600382db1d011a31cd578ad96ad8", 0xf5, 0x9}, {&(0x7f00000001c0)="32ca70949448c9afb2ff560bd6cb964f3692cf8d9d221442cb234fd0895d5c2325", 0x21, 0x81}, {&(0x7f0000000400)="77c68d94a4d4a94dca09191821e5983cbb2a7a838c2c74869a2edf67afb4b39a6ae305a304", 0x25}], 0x8c693bb9b577fba3, &(0x7f0000000500)={[{@bsdgroups}, {@acl}, {@oldalloc}, {@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x35}}]}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000600), 0x0, 0x40200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x4000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, 'jqfmt=vfsv1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '(#):\\\x91'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#'}}, {@appraise_type}, {@fowner_eq}, {@subj_type={'subj_type', 0x3d, 'context'}}]}}) 05:51:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x11, 0x5, 0x0, &(0x7f0000000000)) 05:51:04 executing program 1: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001840)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', 0x3, 0xa, &(0x7f0000001740)=[{&(0x7f00000001c0)="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", 0xfc, 0x4}, {&(0x7f00000002c0)="4ad5f4c8905f04419fb40d3b137c3c08fdd663c0f114f65e621efaa6ac20fa15f177d430cba6624eb46d5d31ce94ab14a2bc07aa012a006cb94cb366a6930dd015fa7cadb388d06177d7ed44c761a8dc38326719bddcf33d34eb00d689566dc58450c04afec1feee00547b5a04afa73dfd909b20c30818b5f592eb919aa2d447da65ac4f6d67f2f1d843d690dfe2dea86436e79951bb20293bd95e50f12089df997a18cf5c27006f3ba66c6cbe4353e70fddf0a324f544b693d4e025241146db303745f37e3e66e1654822f03fd252c6dc0c3f5ef1ff06fa3c5e26c468dbc5088e84c7c6512953e2e5af9da9", 0xec}, {&(0x7f00000003c0)="8743dd1ed292a50f049d4c148a15c588e6913117d3dde14e0b24e1213f4babe2f34a42222ccfc7d098b20fbc700b74d65f43a8642843876b488647f0a00e1e443bb30b47ead72c1fa2269c442925725abe752d", 0x53, 0xfff}, {&(0x7f0000000440)="d3a39c900db173039d716e1deaf19c540018d917d0583a0a84b2faa7a5ceb2d8c9ad662269715736bc3eeb4261d225aca06288bb55835483", 0x38, 0x400}, {&(0x7f0000000480)="db7fe985bc0ac7d39ae2c25e7da16b59cbbe40a638d3f23a0ba93e35da34f86792ced71c291516688e11e595b72f49400ecbd28b2d46cfcb85ede1d38cb7d955d2e946595ec4fc2475044d6ba9fda1c8f007b66116c923fa2761e5ec6c9440724076cd81ee9f9601635f65052d6d8384320bfe47e9a9daf94d888386c97b0262d745a19d7f180ef6", 0x88, 0x80}, {&(0x7f0000000540)="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", 0x1000, 0x80000000}, {&(0x7f0000001540)="8ae6d2c80cb85da6b12da7ac0a62f15274ee631de42b35919fa51bdb1e56aba060e7c617c28aada3fc12af88ce7a8144bccdcf4e70050ce8b3c0e61f71555f0335f9d6d5f264ee5d07", 0x49, 0x81}, {&(0x7f00000015c0)="406696978f5f976014bafcadf6ff2b8b91d6262c6fc1e016966d18c1bb0ac5bf64cf9a628b66c2ee8efcc6ca846ecd8d9c47383a7b2b74db1620e85fa0d115ae47840dd5220b92a40112c8ec5e402154a127a70f3ee12cffc54e6f671ad4811646044ef8adbc2fc5c5820b8c40df6d68a656f6ccd18680d916a8d1a8d198d1d31c0a3649fe535985cf616bab0e3e19c5b44d00355a1ef2eed484ae69706705c99b984701617b73bd1350b7ac8cf42513a6d86658b947", 0xb6}, {&(0x7f0000001680)="1f8d87f4b39f1e3d63f9f2226d37540a956f05bf67739c215b5d973735c2fbd1b229d069cd84c486011f9bcee25f8b8fc218d98b02ff44b51b95a465109d7717f79bbedcb500a5c3b42ff9aef2ad8fad5f9b6e65d1856efe4ab595b143a9e51b60489491088c968c57421ceea542701fd9837cfff57b", 0x76, 0x80000001}, {&(0x7f0000001700), 0x0, 0x1}], 0x0, &(0x7f0000001a40)={[{@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x67]}}, {@huge_within_size}, {@uid={'uid', 0x3d, r1}}, {@huge_advise}, {@huge_never}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@huge_never}], [{@subj_role={'subj_role', 0x3d, 'map_files\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') 05:51:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x60, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/104], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:04 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r0 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r0, @ANYBLOB="6e2f6669636c65300039fdcc09e2c419cb1cfe02a23430ffffffffb231343591389cfb157e2a5523ff9692cdda135401da7fd1ab215838162db3afacdd7fd7e2e253dabe8d92ea89d00d1359b613bb639786862c015e1a9f0c9e11805dfba726709fa371a88e5638c94570cabe6b5d8c0b58021677cf9d2a34cfce6926d6788c3d7d074164b19e56c6eb07980a5261"]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x18000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000c01000/0x1000)=nil, &(0x7f0000dd8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005d4000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b20000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000528000/0x1000)=nil, &(0x7f0000000280)="34349d977198ba54d775b495e96072de248410fcbe033f5b44306ed61fb3f64227c0330888c7582d450aed6ae8c91654fdb12a9aad0189c58228b25a149a10fe34d50da0a403872f694dacfa0608147bcb9e450487ca3dcb2a79459c950e51dd45693a7a65a376224d2775f57eb060269c78349450f7fa758fc2d5f953e2d03eddc448e47217358988b3c53f43825fd45798df5b195ef7d41ca56041a45a75a01570", 0xa2, r1}, 0x68) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x4a0, &(0x7f0000000240)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 2560.822037] loop5: detected capacity change from 0 to 40 05:51:04 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x284c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) r2 = dup2(r0, r0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x4) ioctl$KDENABIO(r1, 0x4b36) r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x141800, 0x28) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b66, &(0x7f0000000000)=""/136) dup3(r4, r3, 0x80000) syncfs(r3) 05:51:04 executing program 1: prctl$PR_GET_FP_MODE(0x2e) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001640)=ANY=[@ANYBLOB="410000000000000018000000", @ANYRES32=r0, @ANYBLOB="0400a93bbdd8f92ff57eb965217ba18e926c0ae72cc44a6033edc1478d31ba6d7229cdc0ebc71d37a514be8250f9dd90108a05b3062f7f9d49df36e91a49c962485c3bff8d78aae98712ebbfbfeb7cc7aca3491b7f8a520047d14c5186db4701c6e4d5898d9d12828c8d68bc3ac7bd3658ce06199bddc61f23f7ffb4d554a61e49e1ba71eb04300b4d42381b4b73e3f77de7008332614980c715eb6a59bce2629be6273b1c1ecd2917e57c202d5c38e8f0a169d54abf8abbcdb24efa9b7ae0572a800aa8ce35adabd7c451968db1025d749d2a830d8eac40ba77d635e858ae2225825b"]) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r2, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x1}, 0x800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) r3 = clone3(&(0x7f0000000600)={0x10000200, &(0x7f0000000400), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) 05:51:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/136) fallocate(r0, 0x31, 0x0, 0x200) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0, {0x10000}}, './cgroup/cgroup.procs\x00'}) io_setup(0x9, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r4, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2560.895271] syz-executor.5: attempt to access beyond end of device [ 2560.895271] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2560.896330] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:51:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1b, 0x5, 0x0, &(0x7f0000000000)) 05:51:04 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:04 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002042631db1e8421b64fc1c8cbd7658b979eceb9be524c4a1f95d57aa714c92b93d8505724cdb636d52b1db3c52ea51bd7eb54e9f65238c3e9017f60e23adb77ed4b0f6db03a812b55a643ba391d6e44546950d0d"]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:51:25 executing program 3: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x40081271, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="747261ee733d66642c7266646e6f3dca874e88333722ca", @ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1d8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 05:51:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) getpid() 05:51:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x2d, 0x5, 0x0, &(0x7f0000000000)) 05:51:25 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x8a001) getdents64(r1, &(0x7f0000000080)=""/236, 0xec) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r2, 0x4b36) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x9f, 0x29, 0x1, {0x9, [{{0x4, 0x0, 0x5}, 0xfffffffffffffffc, 0x6}, {{0x20, 0x4, 0x6}, 0x1, 0x1, 0x7, './file0'}, {{0x0, 0x2, 0x2}, 0x1, 0xff, 0x7, './file0'}, {{0x4, 0x0, 0x1}, 0x1, 0x4, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x0, 0x4, 0x7, './file0'}]}}, 0x9f) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(r1) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f0000000000)=""/136) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000180)=0x1) getdents(r0, 0x0, 0x0) 05:51:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = getegid() chown(&(0x7f0000000040)='./file0\x00', 0xee00, r1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b66, &(0x7f0000000000)=""/136) r3 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) r4 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r4, 0x4b36) accept4(r4, &(0x7f0000000600)=@in={0x2, 0x0, @private}, &(0x7f0000000680)=0x80, 0x40800) ioctl$KDENABIO(r3, 0x4b36) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x101100, 0x0) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x8000, r2, &(0x7f0000000100)="59d985dba4c5c06d289e9d00e124bfc25ecc0fdbc891fb89bdb5405aec9dcedf359449781c48e254b6cc3db1ffa193c32f69358a5569e7a3085e5109ad8c385612bf", 0x9e, 0xc66a, 0x0, 0x0, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe01, 0xffffffffffffffff, &(0x7f00000001c0)="969e7b5252f1be80fac69c463b1f82ff0a3f99bfc89f6761d2994de22eb41e20686fe44873c454a20144dc67d3b7e43f573c0298f3cdefcce991d565b13b3ec3403d7733e090035c0ed840edd7fcc97448c453f29a9e586fbf3b8a944c3962985cd7a124c538c0e68d", 0x69, 0x80000001, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000280)="c6f87fd5a5a93f4d6ac3fad4fe6380c96e0e7f0e925f38783ffe8d610c59502af5e4c511c09b106da9ebc90458d024f9b997fd4913062a29306fd83d5eaf22137e0d81901335a5762f3f570cff1a938c057f2a334e9bd8f7e44935f810fd2b75502cfcfe2272a6de692a72e0493bd6cb77554352aab324a7bf35dd59de446d503eda5e0bffa1e134777ef3389dd356b3072a3486281b1162837dea47a7bcfa1237bbdd7d3047eaff2da87248462c5854b3d37deff02391be60d2e3841340e1ebdf1384bde6c9a4ece1ccbede08fb29d4c27ff2db54bae07550f3ec85f64fca1ac78681b08976a6d37eb5a52745", 0xed, 0x0, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0xcf, r0, &(0x7f00000003c0)="ac8e34e2fae9c940dedb130b2f2f54935d2c02251fdcf30e55b32326a5485e7e7c60a9b436a696f28c268b42ac7e583a4f905f798d5cb1dd1f3a99453c4d8d40c9cc0dcb377e3e839b859271bf15f75ec06e1315a54741c65cae6d8ebff89562226d78", 0x63, 0x5, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x7404, r0, &(0x7f0000000480)="10376d9a6373de2a80efb86973e76341a663052037a9762c6d51c6c5733ba794e1950a59445910fa81c49475b834b3d2505f4268331eb09c88f6f07108ba125d53c5200f10bb8ced57226467a9b535cea9de16b8c628697be77ec2bd38f75155a33cfa147dfe4a26671b3479f3640e6414a61373268bd957b62cdb31a0f3631bb0a1e60e55472c8d52b9", 0x8a, 0x2, 0x0, 0x0, r5}]) 05:51:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "8f2324df810531e4", "3d23fd652435dffc27031c17641c0798", "1fc58df2", "e4a7a5f025cba87b"}, 0x28) [ 2581.915369] loop5: detected capacity change from 0 to 40 05:51:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000006b2cf095b49000"/110], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r1 = getpid() perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0xff, 0x5, 0x1}) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0xa, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x41402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, r1, 0xa, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:25 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xff, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1010c2, 0x44) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x74, 0xbf, 0x70, 0x3f, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x1000, 0x4, 0xc3, 0x4, 0x7, 0xffffff69, 0x100, 0x0, 0x5, 0x0, 0x80000000}, 0x0, 0x7, r0, 0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08000000000000002e2f66696c653200b819e2c4610f2bc269bb30f7aa157d2a8594306435d4"]) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x40, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffffff9, 0x2000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x58b7, 0x6}, 0x2, 0x7, 0x0, 0x4, 0x8, 0x995, 0xe268, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x8, r3, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0x9b, &(0x7f0000000340)="86bac52ddea5959c61f6b2c9fe18418373a419b416aff41c19b975adcff2c415549192ace7854a899b76b21f8fd44ccb7fefd615772570e321d371dc40663f28fd450db29c81e32172ac816d20ed5151491cdd344aa40a1b3069751acd4816aeaf20272eb7da285b44f7e2735aa13241aa6a325a471c9a179c4f7f48f40e25ac4217c420bf6023aacb484bde49aab40ce0001e102f1441a143b386", 0x5f, 0x0, &(0x7f0000000400)="3125e2beb464f54cd5825b10e3b86f8ac1d0536ac5d886cb3957091f5543d0b8e195438f20370cfd6365075fd4b1b758e4d395ab47ad2d123213d9faff28de4e1004d1311a78c5b670ad2f93164ead9761d74a7510d72362f9e431422bb3ee"}) r5 = getpid() r6 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000600)={0xa, 0x80, 0xf8, 0x5, 0x1, 0x3, 0x0, 0xad, 0x22410, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x4, @perf_config_ext={0x8, 0x7}, 0x20, 0x4, 0xfffffff7, 0x7, 0x6, 0x6d6, 0x71, 0x0, 0xea, 0x0, 0x9}, 0x0, 0x7, r0, 0x2) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r6, 0x4b36) r7 = perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x81, 0x0, 0x6, 0x9, 0x0, 0x3915, 0x20029, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000500), 0x8}, 0x40000, 0x44, 0x20, 0x4, 0x6, 0x7, 0x200, 0x0, 0x9, 0x0, 0xff}, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x10000027f) openat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x218400, 0x1c0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000005c0)=0x0) kcmp(r5, r9, 0x5, r7, r2) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r10, 0x4b66, &(0x7f0000000000)=""/136) preadv(r10, &(0x7f0000000300)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1, 0x0, 0x8) 05:51:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:25 executing program 3: timer_create(0x0, &(0x7f0000000140)={0x0, 0x20, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) fork() timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 05:51:25 executing program 1: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x31}}]}, 0x30}, 0x1, 0x0, 0x0, 0x659066499db58f94}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x158, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "9aa43b4cc9c1899c0409102a3fb2591476c0"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x0, 0x306, 0x8f, 0x3, 0x6, 0x0]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xcb, 0xac, "904da07d865b04dc9b3cb65efd875b4d68e3701aa3cf00bca38fcdf890a3e8b0f86f01e2cf7911ab900c5759c8705907b2a36437146d4d49b49e1763fe50228b20249c57a933849d53c70e590d6113e85c400a29f9757ffd5317da44cc43c874340920ca61a7d829e634923c9046e5a8f41b08cdf604a3de93868c58d43da6fd285d89d7a09862eb979fbb0a86ea30226aab572b9b6ae3bd3255e703877cdbb6da556eea2070e133702b9f036b35d8217a538fa998140d3c6fa19c624d71ea08e51a746f744a0d"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "ddcff7e73b9340c0fea04de538ab18bdb584"}]}, 0x158}, 0x1, 0x0, 0x0, 0x4041}, 0x104) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0xa8c00, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x49}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x414}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x64, 0x101, 0x7, 0x5, 0x5, 0xffffffff, 0x6]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xbc9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x52a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffd}]}]}, 0xbc}}, 0x4) r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f1b8239, 0x53}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x49b}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x1b}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4085}, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 05:51:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='F']) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:51:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x500, 0x5, 0x0, &(0x7f0000000000)) [ 2582.245756] tmpfs: Unknown parameter 'F' [ 2582.255088] tmpfs: Unknown parameter 'F' 05:51:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = gettid() r3 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f0000001280)={0x0, 0x80, 0x61, 0x9, 0x1, 0x3f, 0x0, 0x7fff, 0x100, 0x5e801a2e184a5bb0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x2, 0x2, 0x8, 0xfccf, 0x4, 0x20, 0x0, 0x1}, r2, 0x3, r3, 0x2) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r4, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) [ 2582.271163] loop5: detected capacity change from 0 to 40 05:51:38 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r1 = gettid() r2 = getpgrp(r1) r3 = getpid() r4 = perf_event_open(0x0, r3, 0xf, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r2, r5) perf_event_open(&(0x7f0000001240)={0x4, 0x80, 0x8c, 0x0, 0x3f, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x66b}, 0x52140, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000}, r1, 0x0, r0, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r6, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r7 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x40, 0x9b, 0x4, 0x9, 0x0, 0x2, 0x40441, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x1c00000000000000, 0x8470000000000000}, 0x2, 0x400, 0x4, 0x7, 0xff, 0x2, 0x3, 0x0, 0xf3b6, 0x0, 0x8}, r7, 0x3, 0xffffffffffffffff, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_complete(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r6, 0x0, r8) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r8, &(0x7f0000000080)="01", 0x41030) 05:51:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x17) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) io_setup(0x3, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0xffc0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r4, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:51:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 05:51:38 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r2 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) sendfile(r1, r2, &(0x7f0000000080)=0x4, 0x3) ioctl$KDENABIO(r2, 0x4b36) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x8401, 0xe0) r3 = syz_io_uring_complete(0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000000)=""/136) fdatasync(0xffffffffffffffff) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r3, 0x4b36) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b66, &(0x7f0000000000)=""/136) ioctl$VT_DISALLOCATE(r4, 0x5608) 05:51:38 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\r\x00\x00\x00\x00\x00\x00./file0\x00']) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) lseek(r0, 0x0, 0x2) 05:51:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2595.571014] loop5: detected capacity change from 0 to 40 [ 2595.629564] audit: type=1326 audit(1662270698.979:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13434 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f665c7cab19 code=0x0 05:51:38 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x41) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000000600)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/6, 0x6}], 0x1, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/17, 0x11}], 0x2, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/179, 0xb3}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x3, 0x22, &(0x7f0000000880)={r2, r3+60000000}) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd8, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffb4f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) 05:51:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000004d06b695b68bd46fe1000000ceb3e8850000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000500"/104], 0x68) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xbefa2689472ec072) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) [ 2596.439704] audit: type=1326 audit(1662270699.789:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13434 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f665c7cab19 code=0x0 05:51:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x1010, 0xffffffffffffffff, 0x8000000) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:51:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 05:51:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x20800) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0x100, 0x2, 0x8, 0x5c3}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) creat(&(0x7f00000003c0)='./file1\x00', 0x9) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x81, 0x6, 0x6, 0x5c, 0x0, 0x480000000, 0x441, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x440, 0x5, 0x0, 0x6, 0x0, 0x8, 0x9, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x8) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:54 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x1, 0x0, 0x0, 0x286804, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(r0, &(0x7f0000000140)='./file0\x00', 0x42, 0x9) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b66, &(0x7f0000000000)=""/136) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x2c2000, 0x4) ioctl$GIO_SCRNMAP(r3, 0x4b66, &(0x7f00000001c0)=""/149) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffc8}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r1, r2, r0, r0, r4, r0, r0, r0, r5, r0], 0xa) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b66, &(0x7f0000000000)=""/136) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000180)) 05:51:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r1, r1, 0x0, 0x100000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="e40400008305713faeb959f8502562ea05195b7c495ef0aad33eaddda9d8d68887699cbda2c4d4cd0bc0b2cfe9c79a0e206add6b3f4c34be3b8500162d80c42bad9b854dfb5d4b5d584b40c983dabadb6fd161a45b88b86aba20ae1fed9b49bb8c81c14716fb", @ANYRES16=r2, @ANYBLOB="0000ff010000fedbdf252800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x4e4}, 0x1, 0x0, 0x0, 0x850}, 0x20004004) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000f00)={0x1, 0x9, @status={[0x4, 0x80, 0x3ff, 0x81, 0x1ff, 0x1]}, [0x1, 0x6, 0x62a, 0x0, 0x8, 0x5, 0xc92, 0x3, 0x7, 0x3, 0x9, 0xaa, 0x9, 0xc64, 0x7, 0x400, 0x2, 0x4, 0x7fffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x1, 0x205, 0xffffffffffffff78, 0x8, 0x2, 0x1, 0x61, 0x3f, 0x3, 0x9, 0x5, 0xf838, 0xce, 0x1, 0x1, 0x800, 0x0, 0x5, 0xc10, 0x1, 0xffffffff00000001, 0x3, 0xfffffffffffffffe, 0x7, 0x5, 0xa9f, 0x2, 0x35b, 0x0, 0x7, 0x7, 0x7, 0xffffffffffff8000, 0x2, 0x2, 0x5, 0x769fffb2, 0x0, 0xfff, 0xc26c, 0x0, 0x2]}) readv(r1, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x1, 0x0, 0x0, 'queue1\x00', 0x1000}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000240)=0x1) r3 = epoll_create(0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) 05:51:54 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r8 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r8, @ANYBLOB="6e2f6669636c65300039fdcc09e2c419cb1cfe02a23430ffffffffb231343591389cfb157e2a5523ff9692cdda135401da7fd1ab215838162db3afacdd7fd7e2e253dabe8d92ea89d00d1359b613bb639786862c015e1a9f0c9e11805dfba726709fa371a88e5638c94570cabe6b5d8c0b58021677cf9d2a34cfce6926d6788c3d7d074164b19e56c6eb07980a5261"]) getgroups(0x6, &(0x7f0000000600)=[0xee01, 0xee01, 0x0, 0x0, 0x0, 0xffffffffffffffff]) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [{0x2, 0x1}, {0x2, 0x529a63ef8adabbda, r1}, {0x2, 0x4, r2}, {0x2, 0x7, 0xee01}, {0x2, 0x6, r3}, {0x2, 0x4c56375f11527e6e, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}], {0x4, 0x2}, [{0x8, 0x4, 0xee00}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r7}, {0x8, 0x4, r8}, {0x8, 0x5, 0xee00}, {0x8, 0x4, r9}, {0x8, 0x6, r10}], {0x10, 0x1}, {0x20, 0x1}}, 0x9c, 0x0) r11 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) listxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=""/197, 0xc5) lseek(r11, 0x0, 0x3) [ 2610.902205] loop5: detected capacity change from 0 to 40 [ 2610.976691] [ 2610.976969] ====================================================== [ 2610.977782] WARNING: possible circular locking dependency detected 05:51:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000000)) [ 2610.978595] 6.0.0-rc3-next-20220829 #1 Not tainted [ 2610.979405] ------------------------------------------------------ [ 2610.980206] syz-executor.3/13469 is trying to acquire lock: [ 2610.980938] ffff88800c980400 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_bmap+0x4e/0x470 [ 2610.982114] [ 2610.982114] but task is already holding lock: [ 2610.982866] ffff8880100c03f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 2610.984148] [ 2610.984148] which lock already depends on the new lock. [ 2610.984148] [ 2610.985193] [ 2610.985193] the existing dependency chain (in reverse order) is: [ 2610.986146] [ 2610.986146] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 2610.987097] mutex_lock_io_nested+0x148/0x1310 [ 2610.987762] jbd2_journal_flush+0x19a/0xc00 [ 2610.988391] __ext4_ioctl+0x9e9/0x4090 [ 2610.989133] __x64_sys_ioctl+0x19a/0x210 [ 2610.990203] do_syscall_64+0x3b/0x90 [ 2610.991104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2610.991853] [ 2610.991853] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 2610.992716] __mutex_lock+0x136/0x14d0 [ 2610.993312] jbd2_journal_lock_updates+0x15e/0x310 [ 2610.994038] ext4_change_inode_journal_flag+0x17f/0x530 [ 2610.994818] ext4_fileattr_set+0x140d/0x18a0 [ 2610.995471] vfs_fileattr_set+0x77c/0xb80 [ 2610.996091] do_vfs_ioctl+0xfc2/0x1610 [ 2610.996682] __x64_sys_ioctl+0x10c/0x210 [ 2610.997323] do_syscall_64+0x3b/0x90 [ 2610.997882] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2610.998620] [ 2610.998620] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 2610.999532] percpu_down_write+0x4d/0x3d0 [ 2611.000146] ext4_ind_migrate+0x237/0x830 [ 2611.000759] ext4_fileattr_set+0x1434/0x18a0 [ 2611.001425] vfs_fileattr_set+0x77c/0xb80 [ 2611.002038] do_vfs_ioctl+0xfc2/0x1610 [ 2611.002635] __x64_sys_ioctl+0x10c/0x210 [ 2611.003249] do_syscall_64+0x3b/0x90 [ 2611.003806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2611.004559] [ 2611.004559] -> #0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 2611.005530] __lock_acquire+0x2a02/0x5e70 [ 2611.006164] lock_acquire+0x1a2/0x530 [ 2611.006747] down_read+0x98/0x450 [ 2611.007284] ext4_bmap+0x4e/0x470 [ 2611.007821] bmap+0xac/0x120 [ 2611.008314] jbd2_journal_bmap+0xa8/0x180 [ 2611.008947] jbd2_journal_flush+0x853/0xc00 [ 2611.009597] __ext4_ioctl+0x9e9/0x4090 [ 2611.010200] __x64_sys_ioctl+0x19a/0x210 [ 2611.010818] do_syscall_64+0x3b/0x90 [ 2611.011442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2611.012308] [ 2611.012308] other info that might help us debug this: [ 2611.012308] [ 2611.013488] Chain exists of: [ 2611.013488] &sb->s_type->i_mutex_key#6 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 2611.013488] [ 2611.015482] Possible unsafe locking scenario: [ 2611.015482] [ 2611.016370] CPU0 CPU1 [ 2611.017072] ---- ---- [ 2611.017839] lock(&journal->j_checkpoint_mutex); [ 2611.018570] lock(&journal->j_barrier); [ 2611.019547] lock(&journal->j_checkpoint_mutex); [ 2611.020578] lock(&sb->s_type->i_mutex_key#6); [ 2611.021244] [ 2611.021244] *** DEADLOCK *** [ 2611.021244] [ 2611.022047] 2 locks held by syz-executor.3/13469: [ 2611.022703] #0: ffff8880100c0170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x15e/0x310 [ 2611.024101] #1: ffff8880100c03f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 2611.025526] [ 2611.025526] stack backtrace: [ 2611.026136] CPU: 1 PID: 13469 Comm: syz-executor.3 Not tainted 6.0.0-rc3-next-20220829 #1 [ 2611.027243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2611.028770] Call Trace: [ 2611.029141] [ 2611.029459] dump_stack_lvl+0x8b/0xb3 [ 2611.029994] check_noncircular+0x263/0x2e0 [ 2611.030594] ? print_circular_bug+0x450/0x450 [ 2611.031236] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2611.031867] __lock_acquire+0x2a02/0x5e70 [ 2611.032465] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2611.033224] ? lock_chain_count+0x20/0x20 [ 2611.033806] ? perf_trace_run_bpf_submit+0xf5/0x1d0 [ 2611.034508] ? irqentry_enter+0x26/0x60 [ 2611.035078] lock_acquire+0x1a2/0x530 [ 2611.035622] ? ext4_bmap+0x4e/0x470 [ 2611.036141] ? lock_release+0x750/0x750 [ 2611.036707] ? lock_is_held_type+0xd7/0x130 [ 2611.037336] down_read+0x98/0x450 [ 2611.037823] ? ext4_bmap+0x4e/0x470 [ 2611.038342] ? rwsem_down_read_slowpath+0xad0/0xad0 [ 2611.039038] ext4_bmap+0x4e/0x470 [ 2611.039530] ? ext4_readahead+0x140/0x140 [ 2611.040110] bmap+0xac/0x120 [ 2611.040554] ? do_raw_read_unlock+0x70/0x70 [ 2611.041197] jbd2_journal_bmap+0xa8/0x180 [ 2611.041780] ? jbd2_log_start_commit+0x50/0x50 [ 2611.042424] ? _raw_write_unlock+0x24/0x40 [ 2611.043016] ? jbd2_mark_journal_empty+0x309/0x3f0 [ 2611.043704] jbd2_journal_flush+0x853/0xc00 [ 2611.044313] ? cap_capable+0x1eb/0x250 [ 2611.044872] ? jbd2_fc_get_buf+0x310/0x310 [ 2611.045471] ? security_capable+0x95/0xc0 [ 2611.046045] __ext4_ioctl+0x9e9/0x4090 [ 2611.046609] ? ext4_reset_inode_seed+0x450/0x450 [ 2611.047277] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 2611.047988] ? do_vfs_ioctl+0x132/0x1610 [ 2611.048555] ? vfs_fileattr_set+0xb80/0xb80 [ 2611.049168] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2611.049958] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2611.050726] ? selinux_inode_getsecctx+0xa0/0xa0 [ 2611.051372] ? lock_downgrade+0x6d0/0x6d0 [ 2611.051941] ? lock_is_held_type+0xd7/0x130 [ 2611.052533] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2611.053287] ? selinux_file_ioctl+0xb1/0x260 [ 2611.053892] ? ext4_fileattr_set+0x18a0/0x18a0 [ 2611.054520] __x64_sys_ioctl+0x19a/0x210 [ 2611.055073] do_syscall_64+0x3b/0x90 [ 2611.055587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2611.056283] RIP: 0033:0x7fbbda848b19 [ 2611.056785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2611.059218] RSP: 002b:00007fbbd7dbe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2611.060255] RAX: ffffffffffffffda RBX: 00007fbbda95bf60 RCX: 00007fbbda848b19 [ 2611.061254] RDX: 0000000020000240 RSI: 000000004004662b RDI: 0000000000000006 [ 2611.062231] RBP: 00007fbbda8a2f6d R08: 0000000000000000 R09: 0000000000000000 [ 2611.063203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2611.064177] R13: 00007ffd1da0cfef R14: 00007fbbd7dbe300 R15: 0000000000022000 [ 2611.065187] 05:51:54 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_config_ext, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="093a7c03bd00a21449b176a284fd9ea9f929a7a46cd3f498660a19ffaf198428fc2edb42a4dbf3ab7f3ab1a0acfc34e123240577d7a0d16b1f51eed8cfcb9365040d666fa4503981d0ad9bf28eccb86dda44ad30b1e92458840062f7f8", 0x5d) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001280)=""/174, 0xae}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/79, 0x4f}], 0x3, 0x3, 0xd0d) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) io_setup(0x9, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}]) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x6, 0xd0, 0xff, 0x1, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000011c0), 0x4}, 0x11, 0xfffffffffffffffb, 0x1, 0x6, 0xfff, 0x0, 0x20, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x6) setpriority(0x1, 0x0, 0x0) 05:51:54 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='((\x00', &(0x7f0000000180)='+\x00', &(0x7f00000001c0)='/(\x00', &(0x7f0000000200)='^[%\x00', &(0x7f0000000240)='{\xa6\x00'], &(0x7f0000000500)=[&(0x7f00000002c0)='%\x89\x00', &(0x7f0000000300)='/(\x00', &(0x7f0000000340)='.,,%\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/(\x00', &(0x7f0000000400)='*{]&\x00', &(0x7f0000000440)='/(\x00', &(0x7f0000000480)='.,,%\x00', &(0x7f00000004c0)='\x00'], 0x400) mq_unlink(&(0x7f0000000000)='/(\x00') mq_unlink(&(0x7f00000000c0)='.,,%\x00') r1 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r1, 0x4b36) openat(r1, &(0x7f0000000580)='./file0\x00', 0x80880, 0x71) mq_unlink(0x0) mq_unlink(0x0) 05:51:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c64, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d27, &(0x7f0000000480)={0x0, 0x800c, 0x10, 0x1, 0x1f0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x932}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:51:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r2}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r2}, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001580)={0x12c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_OURS={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'@)!:\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'net/if_inet6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56bb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:55 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="798fa017656c556229d771a9dc74073b8e1fe4f9d8d1af2ea19f8e4c9abef772dd3a99d1e41c9a53f419e8aa6c9e8dfb0ed3747eedbd9d3a1621a9988a81b50855c3a35ab48f1a29ceb95d23ad594ec37b085937bf"]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r2, r1) r3 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000000a80)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000480)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/61, 0x3d}], 0x2, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f0000000680)=""/40, 0x28}], 0x4, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/57, 0x39}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x3, 0x60, &(0x7f0000000b80)={r4, r5+60000000}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@aname={'aname', 0x3d, 'tmpfs\x00'}}, {@cache_mmap}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@access_any}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r3, 0x4b36) r7 = syz_io_uring_complete(0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$KDENABIO(r7, 0x4b36) setsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f0000000cc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast}, 0xc) recvfrom$unix(r3, &(0x7f0000000200)=""/142, 0x8e, 0x1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 05:51:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x17f, 0x0, &(0x7f0000000000)) 05:51:55 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4002}, 0x20000005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3508}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040894) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4810}, 0x44891) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040025bd8eed535c30af81661dca07ec7925d8ba3b783700fbdbdf03dfb7a9b3401ecc1ddf18ce26250f0180000c1a9900000000206ff8fffff845018a4dbe0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x95) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="68f1e684", @ANYRES16=0x0, @ANYBLOB="20012dbd7000fddbdf25010000000000000008410000004c00180004000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4c804}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000680)='|\"k') syncfs(r2) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) [ 2611.720390] loop5: detected capacity change from 0 to 40 [ 2611.726471] tmpfs: Unknown parameter 'yelUb)qt;ѯ.Lr:Slt~:!UãZ)ι]#YN{Y7' [ 2611.737514] tmpfs: Unknown parameter 'yelUb)qt;ѯ.Lr:Slt~:!UãZ)ι]#YN{Y7' 05:51:55 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) perf_event_open(&(0x7f0000001480)={0xc82fad843b87e0cd, 0x80, 0x8, 0x40, 0x7a, 0x8, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a94, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x7, 0x3ff, 0x1, 0x81, 0x1, 0x3ff, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') r4 = open(&(0x7f0000000100)='./file1\x00', 0x220000, 0xc) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x4, 0x1, 0x1, 0x8, 0x0, 0xd5, 0x4c209, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40402, 0x5, 0x8, 0x4, 0x1, 0x200, 0x81, 0x0, 0x9d, 0x0, 0x1}, 0x0, 0x9, r4, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x20, 0x7, 0x10, @private2, @private2, 0x8, 0x7, 0x1, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="200b27bd7000fcdbdf250f0000002800018008000300010000001400020076657468305f6d61637674617000000008000300048bde923000018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c000180080001009ac67ac3dc7a4fc130ace3264b08d0c3faf0d5ea587e4f79658a9d52bb231f7ac4eeab92fa71023747c677bb57461bd1c69959341ee28e2d8634e43b0fddef61b620dace830adfc2bd94e79d1040882b7d43a02b01e1768e3e3c725ce3b3", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="28000180140002006d6163766c616e300000000000000000080003000000000008000300020000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d61637674617000000008000300010000001400018008000300010000000800030001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 05:51:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4402, 0x0) VM DIAGNOSIS: 05:51:54 Registers: info registers vcpu 0 RAX=0000000000010001 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff8880481a5040 RSI=ffffffff8139da26 RDI=0000000000000005 RBP=ffff88806ce27140 RSP=ffff88806ce09ed0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000025fdf33a1be R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce2a640 RIP=ffffffff81375102 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e268600d48 CR3=000000003b68a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824487a1 RDI=ffffffff8763bc20 RBP=ffffffff8763bbe0 RSP=ffff888047757148 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=ffffffff8763bbe0 R14=0000000000000010 R15=ffffffff82448790 RIP=ffffffff824487f9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbbd7dbe700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ff21000 CR3=000000003a648000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000