Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62436' (ECDSA) to the list of known hosts. 2022/11/01 11:56:21 fuzzer started 2022/11/01 11:56:22 dialing manager at localhost:42881 syzkaller login: [ 35.816102] cgroup: Unknown subsys name 'net' [ 35.966980] cgroup: Unknown subsys name 'rlimit' 2022/11/01 11:56:37 syscalls: 2217 2022/11/01 11:56:37 code coverage: enabled 2022/11/01 11:56:37 comparison tracing: enabled 2022/11/01 11:56:37 extra coverage: enabled 2022/11/01 11:56:37 setuid sandbox: enabled 2022/11/01 11:56:37 namespace sandbox: enabled 2022/11/01 11:56:37 Android sandbox: enabled 2022/11/01 11:56:37 fault injection: enabled 2022/11/01 11:56:37 leak checking: enabled 2022/11/01 11:56:37 net packet injection: enabled 2022/11/01 11:56:37 net device setup: enabled 2022/11/01 11:56:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/01 11:56:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/01 11:56:37 USB emulation: enabled 2022/11/01 11:56:37 hci packet injection: enabled 2022/11/01 11:56:37 wifi device emulation: enabled 2022/11/01 11:56:37 802.15.4 emulation: enabled 2022/11/01 11:56:37 fetching corpus: 0, signal 0/2000 (executing program) 2022/11/01 11:56:37 fetching corpus: 35, signal 24011/27630 (executing program) 2022/11/01 11:56:37 fetching corpus: 85, signal 42941/47996 (executing program) 2022/11/01 11:56:37 fetching corpus: 135, signal 52479/58904 (executing program) 2022/11/01 11:56:37 fetching corpus: 185, signal 59472/67157 (executing program) 2022/11/01 11:56:38 fetching corpus: 235, signal 66682/75592 (executing program) 2022/11/01 11:56:38 fetching corpus: 285, signal 72592/82729 (executing program) 2022/11/01 11:56:38 fetching corpus: 335, signal 76929/88324 (executing program) 2022/11/01 11:56:38 fetching corpus: 385, signal 81253/93790 (executing program) 2022/11/01 11:56:38 fetching corpus: 435, signal 83692/97428 (executing program) 2022/11/01 11:56:38 fetching corpus: 485, signal 86857/101736 (executing program) 2022/11/01 11:56:38 fetching corpus: 535, signal 89432/105425 (executing program) 2022/11/01 11:56:38 fetching corpus: 585, signal 94145/111009 (executing program) 2022/11/01 11:56:38 fetching corpus: 635, signal 98796/116433 (executing program) 2022/11/01 11:56:39 fetching corpus: 685, signal 102506/120945 (executing program) 2022/11/01 11:56:39 fetching corpus: 735, signal 104044/123496 (executing program) 2022/11/01 11:56:39 fetching corpus: 785, signal 105995/126425 (executing program) 2022/11/01 11:56:39 fetching corpus: 835, signal 108361/129681 (executing program) 2022/11/01 11:56:39 fetching corpus: 885, signal 110754/132935 (executing program) 2022/11/01 11:56:39 fetching corpus: 935, signal 114935/137633 (executing program) 2022/11/01 11:56:39 fetching corpus: 985, signal 117288/140776 (executing program) 2022/11/01 11:56:40 fetching corpus: 1035, signal 120463/144550 (executing program) 2022/11/01 11:56:40 fetching corpus: 1085, signal 122945/147726 (executing program) 2022/11/01 11:56:40 fetching corpus: 1135, signal 125608/150995 (executing program) 2022/11/01 11:56:40 fetching corpus: 1185, signal 127908/153910 (executing program) 2022/11/01 11:56:40 fetching corpus: 1235, signal 132437/158624 (executing program) 2022/11/01 11:56:40 fetching corpus: 1285, signal 134222/161027 (executing program) 2022/11/01 11:56:40 fetching corpus: 1335, signal 136397/163756 (executing program) 2022/11/01 11:56:40 fetching corpus: 1385, signal 138028/166019 (executing program) 2022/11/01 11:56:40 fetching corpus: 1435, signal 139523/168195 (executing program) 2022/11/01 11:56:41 fetching corpus: 1485, signal 141467/170695 (executing program) 2022/11/01 11:56:41 fetching corpus: 1535, signal 142567/172500 (executing program) 2022/11/01 11:56:41 fetching corpus: 1585, signal 143982/174490 (executing program) 2022/11/01 11:56:41 fetching corpus: 1635, signal 146164/177046 (executing program) 2022/11/01 11:56:41 fetching corpus: 1685, signal 147781/179201 (executing program) 2022/11/01 11:56:41 fetching corpus: 1735, signal 149292/181185 (executing program) 2022/11/01 11:56:41 fetching corpus: 1785, signal 151778/183884 (executing program) 2022/11/01 11:56:41 fetching corpus: 1835, signal 153619/186001 (executing program) 2022/11/01 11:56:41 fetching corpus: 1885, signal 155002/187869 (executing program) 2022/11/01 11:56:42 fetching corpus: 1935, signal 157914/190807 (executing program) 2022/11/01 11:56:42 fetching corpus: 1985, signal 159360/192635 (executing program) 2022/11/01 11:56:42 fetching corpus: 2035, signal 160682/194362 (executing program) 2022/11/01 11:56:42 fetching corpus: 2085, signal 162275/196229 (executing program) 2022/11/01 11:56:42 fetching corpus: 2135, signal 163921/198102 (executing program) 2022/11/01 11:56:42 fetching corpus: 2185, signal 165341/199855 (executing program) 2022/11/01 11:56:42 fetching corpus: 2235, signal 167049/201696 (executing program) 2022/11/01 11:56:42 fetching corpus: 2285, signal 167900/202971 (executing program) 2022/11/01 11:56:43 fetching corpus: 2335, signal 169751/204920 (executing program) 2022/11/01 11:56:43 fetching corpus: 2385, signal 171474/206723 (executing program) 2022/11/01 11:56:43 fetching corpus: 2435, signal 173265/208624 (executing program) 2022/11/01 11:56:43 fetching corpus: 2485, signal 174582/210161 (executing program) 2022/11/01 11:56:43 fetching corpus: 2535, signal 175520/211452 (executing program) 2022/11/01 11:56:43 fetching corpus: 2585, signal 176608/212803 (executing program) 2022/11/01 11:56:43 fetching corpus: 2635, signal 177831/214238 (executing program) 2022/11/01 11:56:43 fetching corpus: 2685, signal 178845/215509 (executing program) 2022/11/01 11:56:44 fetching corpus: 2735, signal 180093/216856 (executing program) 2022/11/01 11:56:44 fetching corpus: 2785, signal 180959/217974 (executing program) 2022/11/01 11:56:44 fetching corpus: 2835, signal 182133/219269 (executing program) 2022/11/01 11:56:44 fetching corpus: 2885, signal 183075/220382 (executing program) 2022/11/01 11:56:44 fetching corpus: 2935, signal 183945/221509 (executing program) 2022/11/01 11:56:44 fetching corpus: 2985, signal 185641/223081 (executing program) 2022/11/01 11:56:44 fetching corpus: 3035, signal 186522/224208 (executing program) 2022/11/01 11:56:44 fetching corpus: 3085, signal 187407/225316 (executing program) 2022/11/01 11:56:45 fetching corpus: 3135, signal 188542/226553 (executing program) 2022/11/01 11:56:45 fetching corpus: 3185, signal 189345/227548 (executing program) 2022/11/01 11:56:45 fetching corpus: 3235, signal 190616/228806 (executing program) 2022/11/01 11:56:45 fetching corpus: 3285, signal 191566/229852 (executing program) 2022/11/01 11:56:45 fetching corpus: 3335, signal 192354/230869 (executing program) 2022/11/01 11:56:45 fetching corpus: 3385, signal 193156/231822 (executing program) 2022/11/01 11:56:45 fetching corpus: 3435, signal 194087/232867 (executing program) 2022/11/01 11:56:45 fetching corpus: 3485, signal 194771/233717 (executing program) 2022/11/01 11:56:46 fetching corpus: 3535, signal 195769/234766 (executing program) 2022/11/01 11:56:46 fetching corpus: 3585, signal 196473/235670 (executing program) 2022/11/01 11:56:46 fetching corpus: 3635, signal 197488/236690 (executing program) 2022/11/01 11:56:46 fetching corpus: 3685, signal 198099/237516 (executing program) 2022/11/01 11:56:46 fetching corpus: 3735, signal 198734/238367 (executing program) 2022/11/01 11:56:46 fetching corpus: 3785, signal 199356/239145 (executing program) 2022/11/01 11:56:46 fetching corpus: 3835, signal 200449/240077 (executing program) 2022/11/01 11:56:46 fetching corpus: 3885, signal 201043/240849 (executing program) 2022/11/01 11:56:46 fetching corpus: 3935, signal 202264/241822 (executing program) 2022/11/01 11:56:47 fetching corpus: 3985, signal 203321/242746 (executing program) 2022/11/01 11:56:47 fetching corpus: 4035, signal 203955/243495 (executing program) 2022/11/01 11:56:47 fetching corpus: 4085, signal 204984/244392 (executing program) 2022/11/01 11:56:47 fetching corpus: 4135, signal 205750/245217 (executing program) 2022/11/01 11:56:47 fetching corpus: 4185, signal 206470/245954 (executing program) 2022/11/01 11:56:47 fetching corpus: 4235, signal 207510/246810 (executing program) 2022/11/01 11:56:47 fetching corpus: 4285, signal 208322/247545 (executing program) 2022/11/01 11:56:47 fetching corpus: 4335, signal 208936/248208 (executing program) 2022/11/01 11:56:48 fetching corpus: 4385, signal 209717/248886 (executing program) 2022/11/01 11:56:48 fetching corpus: 4435, signal 210381/249556 (executing program) 2022/11/01 11:56:48 fetching corpus: 4485, signal 211341/250288 (executing program) 2022/11/01 11:56:48 fetching corpus: 4535, signal 211842/250872 (executing program) 2022/11/01 11:56:48 fetching corpus: 4585, signal 212554/251540 (executing program) 2022/11/01 11:56:48 fetching corpus: 4635, signal 213021/252113 (executing program) 2022/11/01 11:56:48 fetching corpus: 4685, signal 213719/252732 (executing program) 2022/11/01 11:56:48 fetching corpus: 4735, signal 214413/253321 (executing program) 2022/11/01 11:56:49 fetching corpus: 4785, signal 215086/253887 (executing program) 2022/11/01 11:56:49 fetching corpus: 4835, signal 215733/254448 (executing program) 2022/11/01 11:56:49 fetching corpus: 4885, signal 216404/255010 (executing program) 2022/11/01 11:56:49 fetching corpus: 4935, signal 216792/255508 (executing program) 2022/11/01 11:56:49 fetching corpus: 4985, signal 217607/256096 (executing program) 2022/11/01 11:56:49 fetching corpus: 5035, signal 218228/256634 (executing program) 2022/11/01 11:56:49 fetching corpus: 5085, signal 218720/257112 (executing program) 2022/11/01 11:56:49 fetching corpus: 5135, signal 219402/257622 (executing program) 2022/11/01 11:56:49 fetching corpus: 5185, signal 220010/258128 (executing program) 2022/11/01 11:56:49 fetching corpus: 5235, signal 220720/258635 (executing program) 2022/11/01 11:56:50 fetching corpus: 5285, signal 221534/259177 (executing program) 2022/11/01 11:56:50 fetching corpus: 5335, signal 222100/259661 (executing program) 2022/11/01 11:56:50 fetching corpus: 5385, signal 222609/260113 (executing program) 2022/11/01 11:56:50 fetching corpus: 5435, signal 223043/260515 (executing program) 2022/11/01 11:56:50 fetching corpus: 5485, signal 223797/260994 (executing program) 2022/11/01 11:56:50 fetching corpus: 5535, signal 224310/261405 (executing program) 2022/11/01 11:56:50 fetching corpus: 5585, signal 225045/261882 (executing program) 2022/11/01 11:56:51 fetching corpus: 5635, signal 225706/262300 (executing program) 2022/11/01 11:56:51 fetching corpus: 5685, signal 226109/262681 (executing program) 2022/11/01 11:56:51 fetching corpus: 5735, signal 226539/263082 (executing program) 2022/11/01 11:56:51 fetching corpus: 5785, signal 227030/263466 (executing program) 2022/11/01 11:56:51 fetching corpus: 5835, signal 228331/263988 (executing program) 2022/11/01 11:56:51 fetching corpus: 5885, signal 228819/264354 (executing program) 2022/11/01 11:56:51 fetching corpus: 5935, signal 229275/264691 (executing program) 2022/11/01 11:56:51 fetching corpus: 5985, signal 229998/265048 (executing program) 2022/11/01 11:56:52 fetching corpus: 6035, signal 230662/265428 (executing program) 2022/11/01 11:56:52 fetching corpus: 6085, signal 231156/265759 (executing program) 2022/11/01 11:56:52 fetching corpus: 6135, signal 231709/266078 (executing program) 2022/11/01 11:56:52 fetching corpus: 6185, signal 232103/266398 (executing program) 2022/11/01 11:56:52 fetching corpus: 6235, signal 232862/266688 (executing program) 2022/11/01 11:56:52 fetching corpus: 6285, signal 233443/266968 (executing program) 2022/11/01 11:56:52 fetching corpus: 6335, signal 233801/267279 (executing program) 2022/11/01 11:56:52 fetching corpus: 6385, signal 234555/267582 (executing program) 2022/11/01 11:56:53 fetching corpus: 6435, signal 235248/267908 (executing program) 2022/11/01 11:56:53 fetching corpus: 6485, signal 235686/268176 (executing program) 2022/11/01 11:56:53 fetching corpus: 6535, signal 236101/268460 (executing program) 2022/11/01 11:56:53 fetching corpus: 6585, signal 236981/268715 (executing program) 2022/11/01 11:56:53 fetching corpus: 6635, signal 237484/268984 (executing program) 2022/11/01 11:56:53 fetching corpus: 6685, signal 238123/269002 (executing program) 2022/11/01 11:56:53 fetching corpus: 6735, signal 238618/269002 (executing program) 2022/11/01 11:56:53 fetching corpus: 6785, signal 239321/269004 (executing program) 2022/11/01 11:56:54 fetching corpus: 6835, signal 239836/269004 (executing program) 2022/11/01 11:56:54 fetching corpus: 6885, signal 240267/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 6935, signal 240671/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 6985, signal 241164/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 7035, signal 241561/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 7085, signal 242067/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 7135, signal 242485/269005 (executing program) 2022/11/01 11:56:54 fetching corpus: 7185, signal 242861/269005 (executing program) 2022/11/01 11:56:55 fetching corpus: 7235, signal 243234/269006 (executing program) 2022/11/01 11:56:55 fetching corpus: 7285, signal 243641/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7335, signal 244211/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7385, signal 244561/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7435, signal 245036/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7485, signal 245633/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7535, signal 245994/269007 (executing program) 2022/11/01 11:56:55 fetching corpus: 7585, signal 246268/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7635, signal 246571/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7685, signal 247140/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7735, signal 247361/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7785, signal 248024/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7835, signal 248325/269007 (executing program) 2022/11/01 11:56:56 fetching corpus: 7885, signal 248687/269018 (executing program) 2022/11/01 11:56:56 fetching corpus: 7935, signal 249168/269018 (executing program) 2022/11/01 11:56:56 fetching corpus: 7985, signal 249715/269018 (executing program) 2022/11/01 11:56:56 fetching corpus: 8035, signal 250028/269018 (executing program) 2022/11/01 11:56:57 fetching corpus: 8085, signal 250409/269018 (executing program) 2022/11/01 11:56:57 fetching corpus: 8135, signal 250807/269018 (executing program) 2022/11/01 11:56:57 fetching corpus: 8185, signal 251134/269019 (executing program) 2022/11/01 11:56:57 fetching corpus: 8235, signal 251588/269024 (executing program) 2022/11/01 11:56:57 fetching corpus: 8285, signal 252048/269024 (executing program) 2022/11/01 11:56:57 fetching corpus: 8335, signal 252488/269025 (executing program) 2022/11/01 11:56:57 fetching corpus: 8385, signal 252968/269027 (executing program) 2022/11/01 11:56:57 fetching corpus: 8435, signal 253764/269027 (executing program) 2022/11/01 11:56:57 fetching corpus: 8485, signal 254337/269032 (executing program) 2022/11/01 11:56:57 fetching corpus: 8535, signal 254806/269039 (executing program) 2022/11/01 11:56:57 fetching corpus: 8585, signal 255392/269039 (executing program) 2022/11/01 11:56:58 fetching corpus: 8635, signal 255868/269040 (executing program) 2022/11/01 11:56:58 fetching corpus: 8685, signal 256189/269040 (executing program) 2022/11/01 11:56:58 fetching corpus: 8735, signal 256660/269047 (executing program) 2022/11/01 11:56:58 fetching corpus: 8785, signal 257101/269047 (executing program) 2022/11/01 11:56:58 fetching corpus: 8835, signal 257584/269047 (executing program) 2022/11/01 11:56:58 fetching corpus: 8885, signal 258025/269052 (executing program) 2022/11/01 11:56:58 fetching corpus: 8935, signal 258443/269052 (executing program) 2022/11/01 11:56:58 fetching corpus: 8985, signal 258867/269052 (executing program) 2022/11/01 11:56:58 fetching corpus: 9035, signal 259398/269053 (executing program) 2022/11/01 11:56:59 fetching corpus: 9085, signal 259584/269053 (executing program) 2022/11/01 11:56:59 fetching corpus: 9135, signal 259891/269053 (executing program) 2022/11/01 11:56:59 fetching corpus: 9185, signal 260259/269053 (executing program) 2022/11/01 11:56:59 fetching corpus: 9235, signal 260620/269053 (executing program) 2022/11/01 11:56:59 fetching corpus: 9285, signal 261198/269054 (executing program) 2022/11/01 11:56:59 fetching corpus: 9335, signal 261588/269054 (executing program) 2022/11/01 11:56:59 fetching corpus: 9385, signal 262025/269054 (executing program) 2022/11/01 11:56:59 fetching corpus: 9435, signal 262455/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9485, signal 262904/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9535, signal 263306/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9585, signal 263627/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9635, signal 263947/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9649, signal 263993/269054 (executing program) 2022/11/01 11:57:00 fetching corpus: 9649, signal 263993/269054 (executing program) 2022/11/01 11:57:03 starting 8 fuzzer processes 11:57:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "09dc20", 0x8, 0x3c, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}], @ndisc_ra}}}}}, 0x0) 11:57:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) 11:57:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100098e670325132510000e67032510300000000002e2e202020202020202020100098e670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098e670325132510000e670325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) 11:57:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0xd29, &(0x7f0000000780)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, r2, 0x0}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22d3, &(0x7f0000000580)={0x0, 0x2799, 0x4, 0x3, 0x16c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) 11:57:03 executing program 5: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa1, 0x0, 0x0) 11:57:03 executing program 4: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='rxrpc\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)) 11:57:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) [ 77.051392] audit: type=1400 audit(1667303823.373:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:57:03 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x81, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x12b, @remote, 0x4}, 0x1c) [ 78.416325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.418104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.419790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.421402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.422887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.424639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.428279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.429794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.431964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.452550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.456240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.457876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.460178] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.462725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.464590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.466017] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.467372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.468848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.470511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.471981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.475386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.478602] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.481470] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.482646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.484717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.486444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.487890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.489634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.490972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.491345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.493832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.502314] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.508982] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.512899] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.515523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.517424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.519275] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.537047] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.538727] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.539990] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.543736] Bluetooth: hci6: HCI_REQ-0x0c1a [ 78.546938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.548252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.551406] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.559038] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.560577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.572469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.577911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.591351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.594549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.598900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.598955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.607290] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.609025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.616782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.623733] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.544111] Bluetooth: hci2: command 0x0409 tx timeout [ 80.544172] Bluetooth: hci3: command 0x0409 tx timeout [ 80.607233] Bluetooth: hci1: command 0x0409 tx timeout [ 80.607293] Bluetooth: hci6: command 0x0409 tx timeout [ 80.607800] Bluetooth: hci7: command 0x0409 tx timeout [ 80.608846] Bluetooth: hci0: command 0x0409 tx timeout [ 80.671265] Bluetooth: hci4: command 0x0409 tx timeout [ 80.671281] Bluetooth: hci5: command 0x0409 tx timeout [ 82.591332] Bluetooth: hci2: command 0x041b tx timeout [ 82.591350] Bluetooth: hci3: command 0x041b tx timeout [ 82.655271] Bluetooth: hci7: command 0x041b tx timeout [ 82.655974] Bluetooth: hci0: command 0x041b tx timeout [ 82.656685] Bluetooth: hci6: command 0x041b tx timeout [ 82.657375] Bluetooth: hci1: command 0x041b tx timeout [ 82.722710] Bluetooth: hci4: command 0x041b tx timeout [ 82.722770] Bluetooth: hci5: command 0x041b tx timeout [ 84.639209] Bluetooth: hci3: command 0x040f tx timeout [ 84.640662] Bluetooth: hci2: command 0x040f tx timeout [ 84.703284] Bluetooth: hci1: command 0x040f tx timeout [ 84.703307] Bluetooth: hci6: command 0x040f tx timeout [ 84.703648] Bluetooth: hci0: command 0x040f tx timeout [ 84.704005] Bluetooth: hci7: command 0x040f tx timeout [ 84.767187] Bluetooth: hci4: command 0x040f tx timeout [ 84.767540] Bluetooth: hci5: command 0x040f tx timeout [ 86.688223] Bluetooth: hci2: command 0x0419 tx timeout [ 86.688620] Bluetooth: hci3: command 0x0419 tx timeout [ 86.751242] Bluetooth: hci0: command 0x0419 tx timeout [ 86.751265] Bluetooth: hci7: command 0x0419 tx timeout [ 86.751611] Bluetooth: hci6: command 0x0419 tx timeout [ 86.751943] Bluetooth: hci1: command 0x0419 tx timeout [ 86.815221] Bluetooth: hci5: command 0x0419 tx timeout [ 86.815246] Bluetooth: hci4: command 0x0419 tx timeout [ 134.107915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.108710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.110140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.233289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.233904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.235357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.382495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.383716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.385925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.453748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.454438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.456261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.353017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.353648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.354984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.447457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.448093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.449567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:58:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x81, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x12b, @remote, 0x4}, 0x1c) 11:58:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x81, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x12b, @remote, 0x4}, 0x1c) 11:58:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x81, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x12b, @remote, 0x4}, 0x1c) 11:58:02 executing program 7: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) [ 136.079911] audit: type=1400 audit(1667303882.402:7): avc: denied { open } for pid=3853 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.081374] audit: type=1400 audit(1667303882.402:8): avc: denied { kernel } for pid=3853 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.149550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.150280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.152070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.254997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.255656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.257169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:58:02 executing program 4: syz_mount_image$iso9660(0xfffffffffffffffd, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x1fe, 0x2}], 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f00000012c0)="4f13b8f73429683e50f5fe82ecfcf3c31266c9bc5228c9f3bcef5a16a1f6f936adbaa7c105292cfde975bf9ecaf324d394d06b5a1083a7c9864375567a98fdd7f84064783e20334bb5bd18fb999b484815a7057149f8d0318011eabbf08749b67b47453ca8a84d93396a2b40487251f246053b1305ed3369c5a66cef48854ef5b40e636edf338dd08e372763a7b2afdae29984868ab2a5abb07ca67cabbcc21203b0876dae19d15c5e", 0xa9, 0x8bfd}, {&(0x7f0000001380)}], 0x898000, &(0x7f0000001480)={[{@cruft}, {@hide}, {@unhide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@cruft}, {@utf8}, {@map_acorn}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x62, 0x31, 0x63, 0x63, 0x39, 0x35], 0x2d, [0x63, 0x39, 0x30], 0x2d, [0x3, 0x37, 0x38], 0x2d, [0x33, 0x35, 0x66, 0x37], 0x2d, [0x35, 0x30, 0x65, 0x34, 0x39, 0x63, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '.)/'}}, {@audit}, {@dont_measure}, {@audit}, {@fowner_lt}, {@subj_user}]}) syz_io_uring_complete(0x0) syz_io_uring_setup(0x8, &(0x7f0000002140)={0x0, 0xfd23, 0x0, 0x3, 0x220}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002200)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000003640), 0xa08082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003700), 0x140, 0x0) [ 136.346553] loop4: detected capacity change from 0 to 1 11:58:02 executing program 7: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) [ 136.391466] loop4: detected capacity change from 0 to 1 11:58:02 executing program 4: syz_mount_image$iso9660(0xfffffffffffffffd, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x1fe, 0x2}], 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f00000012c0)="4f13b8f73429683e50f5fe82ecfcf3c31266c9bc5228c9f3bcef5a16a1f6f936adbaa7c105292cfde975bf9ecaf324d394d06b5a1083a7c9864375567a98fdd7f84064783e20334bb5bd18fb999b484815a7057149f8d0318011eabbf08749b67b47453ca8a84d93396a2b40487251f246053b1305ed3369c5a66cef48854ef5b40e636edf338dd08e372763a7b2afdae29984868ab2a5abb07ca67cabbcc21203b0876dae19d15c5e", 0xa9, 0x8bfd}, {&(0x7f0000001380)}], 0x898000, &(0x7f0000001480)={[{@cruft}, {@hide}, {@unhide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@cruft}, {@utf8}, {@map_acorn}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x62, 0x31, 0x63, 0x63, 0x39, 0x35], 0x2d, [0x63, 0x39, 0x30], 0x2d, [0x3, 0x37, 0x38], 0x2d, [0x33, 0x35, 0x66, 0x37], 0x2d, [0x35, 0x30, 0x65, 0x34, 0x39, 0x63, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '.)/'}}, {@audit}, {@dont_measure}, {@audit}, {@fowner_lt}, {@subj_user}]}) syz_io_uring_complete(0x0) syz_io_uring_setup(0x8, &(0x7f0000002140)={0x0, 0xfd23, 0x0, 0x3, 0x220}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002200)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000003640), 0xa08082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003700), 0x140, 0x0) [ 136.495372] loop4: detected capacity change from 0 to 1 [ 136.515405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.516020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.517642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 11:58:02 executing program 4: syz_mount_image$iso9660(0xfffffffffffffffd, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x1fe, 0x2}], 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f00000012c0)="4f13b8f73429683e50f5fe82ecfcf3c31266c9bc5228c9f3bcef5a16a1f6f936adbaa7c105292cfde975bf9ecaf324d394d06b5a1083a7c9864375567a98fdd7f84064783e20334bb5bd18fb999b484815a7057149f8d0318011eabbf08749b67b47453ca8a84d93396a2b40487251f246053b1305ed3369c5a66cef48854ef5b40e636edf338dd08e372763a7b2afdae29984868ab2a5abb07ca67cabbcc21203b0876dae19d15c5e", 0xa9, 0x8bfd}, {&(0x7f0000001380)}], 0x898000, &(0x7f0000001480)={[{@cruft}, {@hide}, {@unhide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@cruft}, {@utf8}, {@map_acorn}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x62, 0x31, 0x63, 0x63, 0x39, 0x35], 0x2d, [0x63, 0x39, 0x30], 0x2d, [0x3, 0x37, 0x38], 0x2d, [0x33, 0x35, 0x66, 0x37], 0x2d, [0x35, 0x30, 0x65, 0x34, 0x39, 0x63, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '.)/'}}, {@audit}, {@dont_measure}, {@audit}, {@fowner_lt}, {@subj_user}]}) syz_io_uring_complete(0x0) syz_io_uring_setup(0x8, &(0x7f0000002140)={0x0, 0xfd23, 0x0, 0x3, 0x220}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002200)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000003640), 0xa08082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003700), 0x140, 0x0) [ 136.619411] loop4: detected capacity change from 0 to 1 [ 136.638301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.638875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.640585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.735362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.736473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.739945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.828651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.829301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.831145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.161556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.162198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.163764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.087084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.089017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.090636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.093607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.096364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.097698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.103847] Bluetooth: hci2: HCI_REQ-0x0c1a [ 142.111249] Bluetooth: hci2: command 0x0409 tx timeout [ 142.239186] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 142.239200] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 142.241365] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 144.159303] Bluetooth: hci2: command 0x041b tx timeout [ 144.624481] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.628931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.632334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.635833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.638543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.640294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.644826] Bluetooth: hci4: HCI_REQ-0x0c1a [ 144.697953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.701343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.703657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.706882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.713392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.714935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.722639] Bluetooth: hci6: HCI_REQ-0x0c1a [ 146.207170] Bluetooth: hci2: command 0x040f tx timeout [ 146.655228] Bluetooth: hci4: command 0x0409 tx timeout [ 146.720184] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 146.783237] Bluetooth: hci6: command 0x0409 tx timeout [ 148.255185] Bluetooth: hci2: command 0x0419 tx timeout [ 148.703186] Bluetooth: hci4: command 0x041b tx timeout [ 148.832171] Bluetooth: hci6: command 0x041b tx timeout [ 150.751195] Bluetooth: hci4: command 0x040f tx timeout [ 150.880211] Bluetooth: hci6: command 0x040f tx timeout [ 151.136201] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 152.799172] Bluetooth: hci4: command 0x0419 tx timeout [ 152.927315] Bluetooth: hci6: command 0x0419 tx timeout [ 153.538697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.541221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.542185] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.544626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.545900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.546830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.556170] Bluetooth: hci7: HCI_REQ-0x0c1a [ 155.615201] Bluetooth: hci7: command 0x0409 tx timeout [ 157.663264] Bluetooth: hci7: command 0x041b tx timeout [ 159.711256] Bluetooth: hci7: command 0x040f tx timeout [ 161.759182] Bluetooth: hci7: command 0x0419 tx timeout [ 162.885927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.886888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.888866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.960895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.961551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.963095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.692925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.693664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.696615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.726685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.727504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.728705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.182433] hrtimer: interrupt took 34725 ns [ 167.035845] syz-executor.2 (5504) used greatest stack depth: 23704 bytes left [ 168.446758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.447899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.450330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.484297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.485433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.487560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.136343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.137615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.140475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.199844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.201093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.203528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.529963] loop1: detected capacity change from 0 to 128 11:58:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "09dc20", 0x8, 0x3c, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}], @ndisc_ra}}}}}, 0x0) 11:58:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:40 executing program 4: syz_mount_image$iso9660(0xfffffffffffffffd, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x1fe, 0x2}], 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f00000012c0)="4f13b8f73429683e50f5fe82ecfcf3c31266c9bc5228c9f3bcef5a16a1f6f936adbaa7c105292cfde975bf9ecaf324d394d06b5a1083a7c9864375567a98fdd7f84064783e20334bb5bd18fb999b484815a7057149f8d0318011eabbf08749b67b47453ca8a84d93396a2b40487251f246053b1305ed3369c5a66cef48854ef5b40e636edf338dd08e372763a7b2afdae29984868ab2a5abb07ca67cabbcc21203b0876dae19d15c5e", 0xa9, 0x8bfd}, {&(0x7f0000001380)}], 0x898000, &(0x7f0000001480)={[{@cruft}, {@hide}, {@unhide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@cruft}, {@utf8}, {@map_acorn}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x62, 0x31, 0x63, 0x63, 0x39, 0x35], 0x2d, [0x63, 0x39, 0x30], 0x2d, [0x3, 0x37, 0x38], 0x2d, [0x33, 0x35, 0x66, 0x37], 0x2d, [0x35, 0x30, 0x65, 0x34, 0x39, 0x63, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '.)/'}}, {@audit}, {@dont_measure}, {@audit}, {@fowner_lt}, {@subj_user}]}) syz_io_uring_complete(0x0) syz_io_uring_setup(0x8, &(0x7f0000002140)={0x0, 0xfd23, 0x0, 0x3, 0x220}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002200)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000003640), 0xa08082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003700), 0x140, 0x0) 11:58:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:40 executing program 7: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:58:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) 11:58:40 executing program 5: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa1, 0x0, 0x0) 11:58:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0xd29, &(0x7f0000000780)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, r2, 0x0}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22d3, &(0x7f0000000580)={0x0, 0x2799, 0x4, 0x3, 0x16c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) [ 174.641556] loop4: detected capacity change from 0 to 1 11:58:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "09dc20", 0x8, 0x3c, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}], @ndisc_ra}}}}}, 0x0) 11:58:42 executing program 5: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa1, 0x0, 0x0) 11:58:42 executing program 7: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) 11:58:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0xd29, &(0x7f0000000780)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, r2, 0x0}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22d3, &(0x7f0000000580)={0x0, 0x2799, 0x4, 0x3, 0x16c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) 11:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) 11:58:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "09dc20", 0x8, 0x3c, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}], @ndisc_ra}}}}}, 0x0) 11:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:42 executing program 5: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa1, 0x0, 0x0) 11:58:43 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "e8f818943464ed72", "f31f6fb242fee8b875ff35ed52674a22ac292cab500ecdd95e136b538f914139"}) 11:58:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x14, 0x12, 0xa21, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x20001140) read(r0, &(0x7f0000000080)=""/103, 0x67) 11:58:43 executing program 3: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:58:43 executing program 7: capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 11:58:43 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x80005f0d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7344, &(0x7f0000000180)={0x0, 0xcaf4, 0x0, 0x3, 0x29e, 0x0, r1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) fcntl$getown(r1, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1200, 0xffc, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) 11:58:43 executing program 0: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:58:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0xd29, &(0x7f0000000780)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, r2, 0x0}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22d3, &(0x7f0000000580)={0x0, 0x2799, 0x4, 0x3, 0x16c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) 11:58:43 executing program 1: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 176.853811] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure 11:58:43 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "e8f818943464ed72", "f31f6fb242fee8b875ff35ed52674a22ac292cab500ecdd95e136b538f914139"}) 11:58:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 177.002278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.112852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.134110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:58:43 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "e8f818943464ed72", "f31f6fb242fee8b875ff35ed52674a22ac292cab500ecdd95e136b538f914139"}) 11:58:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:58:43 executing program 3: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:58:43 executing program 0: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) [ 177.450845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.877107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.880440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.885424] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.889547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.891840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.897388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.904684] Bluetooth: hci7: HCI_REQ-0x0c1a [ 181.919337] Bluetooth: hci7: command 0x0409 tx timeout [ 183.967241] Bluetooth: hci7: command 0x041b tx timeout [ 186.015221] Bluetooth: hci7: command 0x040f tx timeout [ 188.063230] Bluetooth: hci7: command 0x0419 tx timeout [ 201.047404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.048715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.051259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.084871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.086197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.088350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.516814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:08 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "e8f818943464ed72", "f31f6fb242fee8b875ff35ed52674a22ac292cab500ecdd95e136b538f914139"}) 11:59:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:59:08 executing program 3: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:59:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:08 executing program 0: ustat(0x9, &(0x7f0000000000)) ustat(0x7, &(0x7f0000000040)) ustat(0xff, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x781, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf855, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x200081c0}, 0xc081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, r1, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000013c0)=[{0x6, 0x6b, 0x81, 0xf747}, {0x3ea5, 0x70, 0xb5, 0x8}, {0x0, 0x24, 0x7, 0x4}, {0xfff7, 0x3, 0xfa, 0xfa8}]}) 11:59:08 executing program 1: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x80005f0d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7344, &(0x7f0000000180)={0x0, 0xcaf4, 0x0, 0x3, 0x29e, 0x0, r1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) fcntl$getown(r1, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1200, 0xffc, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) 11:59:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 201.924995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.950829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.996220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:08 executing program 6: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 202.027280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.039822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 202.182254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x80005f0d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7344, &(0x7f0000000180)={0x0, 0xcaf4, 0x0, 0x3, 0x29e, 0x0, r1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) fcntl$getown(r1, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1200, 0xffc, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) 11:59:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:59:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:59:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:08 executing program 1: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 202.478810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.546373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.568563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.591582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.616773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.640812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.127296] Bluetooth: hci3: command 0x0406 tx timeout [ 204.127661] Bluetooth: hci0: command 0x0406 tx timeout [ 204.128225] Bluetooth: hci1: command 0x0406 tx timeout [ 204.129004] Bluetooth: hci5: command 0x0406 tx timeout [ 205.170374] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.173543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.175074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.179990] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.182602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.184049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.188867] Bluetooth: hci6: HCI_REQ-0x0c1a [ 207.199276] Bluetooth: hci6: command 0x0409 tx timeout [ 209.247222] Bluetooth: hci6: command 0x041b tx timeout [ 211.295359] Bluetooth: hci6: command 0x040f tx timeout [ 213.343197] Bluetooth: hci6: command 0x0419 tx timeout [ 225.795584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.796699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.799491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.835618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.836631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.838716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.266370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.276354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 11:59:32 executing program 6: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:32 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x80005f0d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7344, &(0x7f0000000180)={0x0, 0xcaf4, 0x0, 0x3, 0x29e, 0x0, r1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) fcntl$getown(r1, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1200, 0xffc, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) 11:59:32 executing program 1: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 226.686436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.695391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.702368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.706334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.727014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.730704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.753482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.775297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:59:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f0000000380)={@private1, @private2, @private2}) 11:59:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:59:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) [ 227.059618] loop4: detected capacity change from 0 to 40 11:59:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 11:59:33 executing program 6: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 11:59:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 227.211433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.352302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.865204] syz-executor.4: attempt to access beyond end of device [ 227.865204] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 227.867698] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 227.923614] syz-executor.4 (6842) used greatest stack depth: 23200 bytes left [ 232.095317] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 234.407894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.411304] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.412911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.420660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.423271] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 234.424558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.431661] Bluetooth: hci6: HCI_REQ-0x0c1a [ 236.447257] Bluetooth: hci6: command 0x0409 tx timeout [ 238.495245] Bluetooth: hci6: command 0x041b tx timeout [ 240.543215] Bluetooth: hci6: command 0x040f tx timeout [ 242.591228] Bluetooth: hci6: command 0x0419 tx timeout [ 256.927745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.928875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.931460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.966057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.967318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.969923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.429183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.440664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 12:00:04 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 12:00:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 12:00:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) 12:00:04 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000012200), 0x0, 0x0) fgetxattr(r0, &(0x7f00000122c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 12:00:04 executing program 6: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x111500) 12:00:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="8b642e5d75ceb327e641a8f8925553d088d20eca4f055a4e404dc5c34bf9478d2ca744baa2e25596bd5940c523bc0dccd0309ca4050f07692e9fffb44e04c12b1a40f3d9a22f2ae0fdfdf6cab9c1e60f11a8a8a17d26ad9c0b181762fb82b95c2900780e91c95a077940fa76a690eb52b8ded199c242ac3735719156bb", 0x7d, 0x5, &(0x7f00000001c0)={r1, r2+60000000}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 257.848194] loop4: detected capacity change from 0 to 40 12:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 12:00:04 executing program 6: prctl$PR_SET_PDEATHSIG(0x17, 0x41) 12:00:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="8b642e5d75ceb327e641a8f8925553d088d20eca4f055a4e404dc5c34bf9478d2ca744baa2e25596bd5940c523bc0dccd0309ca4050f07692e9fffb44e04c12b1a40f3d9a22f2ae0fdfdf6cab9c1e60f11a8a8a17d26ad9c0b181762fb82b95c2900780e91c95a077940fa76a690eb52b8ded199c242ac3735719156bb", 0x7d, 0x5, &(0x7f00000001c0)={r1, r2+60000000}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 12:00:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:04 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) 12:00:04 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 258.067912] audit: type=1400 audit(1667304004.390:9): avc: denied { write } for pid=7333 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 12:00:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) 12:00:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="8b642e5d75ceb327e641a8f8925553d088d20eca4f055a4e404dc5c34bf9478d2ca744baa2e25596bd5940c523bc0dccd0309ca4050f07692e9fffb44e04c12b1a40f3d9a22f2ae0fdfdf6cab9c1e60f11a8a8a17d26ad9c0b181762fb82b95c2900780e91c95a077940fa76a690eb52b8ded199c242ac3735719156bb", 0x7d, 0x5, &(0x7f00000001c0)={r1, r2+60000000}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 12:00:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) [ 258.760350] syz-executor.4 (7326) used greatest stack depth: 23136 bytes left 12:00:05 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 12:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) 12:00:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 12:00:05 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:05 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="8b642e5d75ceb327e641a8f8925553d088d20eca4f055a4e404dc5c34bf9478d2ca744baa2e25596bd5940c523bc0dccd0309ca4050f07692e9fffb44e04c12b1a40f3d9a22f2ae0fdfdf6cab9c1e60f11a8a8a17d26ad9c0b181762fb82b95c2900780e91c95a077940fa76a690eb52b8ded199c242ac3735719156bb", 0x7d, 0x5, &(0x7f00000001c0)={r1, r2+60000000}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 12:00:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) [ 258.944860] loop4: detected capacity change from 0 to 40 12:00:05 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 12:00:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) [ 259.073192] BUG: unable to handle page fault for address: ffffed100fffc000 [ 259.074390] #PF: supervisor write access in kernel mode [ 259.075292] #PF: error_code(0x0002) - not-present page [ 259.076198] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 259.078334] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 259.079982] CPU: 0 PID: 7377 Comm: syz-executor.0 Not tainted 6.1.0-rc3-next-20221101 #1 [ 259.081773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 259.082694] RIP: 0010:__memset+0x24/0x50 [ 259.083194] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.085289] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 259.085944] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 259.086786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.087758] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 259.088595] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.089451] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 259.090322] FS: 00007f48a5220700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 259.091309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.092033] CR2: ffffed100fffc000 CR3: 00000000377ee000 CR4: 0000000000350ef0 [ 259.092916] Call Trace: [ 259.093256] [ 259.093554] kasan_unpoison+0x23/0x60 [ 259.094074] mempool_exit+0x1c2/0x330 [ 259.094586] bioset_exit+0x2c9/0x630 [ 259.095062] ? _raw_spin_unlock_irq+0x1f/0x60 [ 259.095641] disk_release+0x143/0x490 [ 259.096151] ? disk_release+0x0/0x490 [ 259.096636] ? device_release+0x0/0x250 [ 259.097135] device_release+0xa2/0x250 [ 259.097629] ? device_release+0x0/0x250 [ 259.098126] kobject_put+0x173/0x280 [ 259.098667] put_device+0x1b/0x40 12:00:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 259.099110] put_disk+0x41/0x60 [ 259.099560] loop_control_ioctl+0x4d1/0x630 [ 259.100156] ? loop_control_ioctl+0x0/0x630 [ 259.100664] ? selinux_file_ioctl+0xb1/0x270 [ 259.101199] ? loop_control_ioctl+0x0/0x630 [ 259.101712] __x64_sys_ioctl+0x19a/0x220 [ 259.102193] do_syscall_64+0x3b/0xa0 [ 259.102679] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 259.103365] RIP: 0033:0x7f48a7ccbb19 [ 259.103882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.106202] RSP: 002b:00007f48a5220188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.107189] RAX: ffffffffffffffda RBX: 00007f48a7ddf020 RCX: 00007f48a7ccbb19 [ 259.108098] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 259.109018] RBP: 00007f48a7d25f6d R08: 0000000000000000 R09: 0000000000000000 [ 259.109933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.110842] R13: 00007ffc9b21d16f R14: 00007f48a5220300 R15: 0000000000022000 [ 259.111756] [ 259.112061] Modules linked in: [ 259.112488] CR2: ffffed100fffc000 [ 259.112939] ---[ end trace 0000000000000000 ]--- [ 259.113551] RIP: 0010:__memset+0x24/0x50 [ 259.114098] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.116408] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 259.117073] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 259.117980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.118886] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 259.119780] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.120680] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 259.121585] FS: 00007f48a5220700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 259.122609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.123334] CR2: ffffed100fffc000 CR3: 00000000377ee000 CR4: 0000000000350ef0 12:00:05 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:05 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:05 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x401870c8, 0x0) 12:00:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) 12:00:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r0, 0x8, 0x0, 0x401) 12:00:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 259.382852] syz-executor.4: attempt to access beyond end of device [ 259.382852] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 259.384249] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 259.558093] BUG: unable to handle page fault for address: ffffed100fffc000 [ 259.558656] #PF: supervisor write access in kernel mode [ 259.559049] #PF: error_code(0x0002) - not-present page [ 259.559438] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 259.559956] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI [ 259.560454] CPU: 1 PID: 7392 Comm: syz-executor.2 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 259.561377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 259.561992] RIP: 0010:__memset+0x24/0x50 [ 259.562320] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.563634] RSP: 0018:ffff8880312e7cc0 EFLAGS: 00010212 [ 259.564060] RAX: 0000000000000000 RBX: ffff88800c05a240 RCX: 1ffffe21fe603bd8 [ 259.564705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.565244] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b448 [ 259.565803] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.566360] R13: ffff88800c05a240 R14: ffffffff815f2620 R15: 1ffff110010e5c1f [ 259.566917] FS: 00007fd3bfab0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 259.567541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.568010] CR2: ffffed100fffc000 CR3: 0000000037756000 CR4: 0000000000350ee0 [ 259.568566] Call Trace: [ 259.568778] [ 259.568962] kasan_unpoison+0x23/0x60 [ 259.569359] mempool_exit+0x1c2/0x330 [ 259.569694] bioset_exit+0x2c9/0x630 [ 259.570003] disk_release+0x143/0x490 [ 259.570314] ? disk_release+0x0/0x490 [ 259.570616] ? device_release+0x0/0x250 [ 259.570940] device_release+0xa2/0x250 [ 259.571259] ? device_release+0x0/0x250 [ 259.571576] kobject_put+0x173/0x280 [ 259.571893] put_device+0x1b/0x40 [ 259.572173] put_disk+0x41/0x60 [ 259.572439] loop_control_ioctl+0x4d1/0x630 [ 259.572783] ? loop_control_ioctl+0x0/0x630 [ 259.573134] ? selinux_file_ioctl+0xb1/0x270 [ 259.573504] ? loop_control_ioctl+0x0/0x630 [ 259.573854] __x64_sys_ioctl+0x19a/0x220 [ 259.574180] do_syscall_64+0x3b/0xa0 [ 259.574490] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 259.574896] RIP: 0033:0x7fd3c253ab19 [ 259.575196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.576615] RSP: 002b:00007fd3bfab0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.577206] RAX: ffffffffffffffda RBX: 00007fd3c264df60 RCX: 00007fd3c253ab19 [ 259.577765] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000006 [ 259.578309] RBP: 00007fd3c2594f6d R08: 0000000000000000 R09: 0000000000000000 [ 259.578860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.579403] R13: 00007ffddd2953ff R14: 00007fd3bfab0300 R15: 0000000000022000 [ 259.579961] [ 259.580151] Modules linked in: [ 259.580404] CR2: ffffed100fffc000 [ 259.580678] ---[ end trace 0000000000000000 ]--- [ 259.581039] RIP: 0010:__memset+0x24/0x50 [ 259.581364] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.582752] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 259.583166] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 259.583734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.584278] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 259.584820] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.585367] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 259.585910] FS: 00007fd3bfab0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 259.586521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.586973] CR2: ffffed100fffc000 CR3: 0000000037756000 CR4: 0000000000350ee0 12:00:05 executing program 1: setfsgid(0xee00) 12:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 12:00:05 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@generic="006f75b66e"]}, 0x18}], 0x1}, 0x0) 12:00:05 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @private}, @address_request}}}}, 0x0) 12:00:05 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) [ 259.681075] loop4: detected capacity change from 0 to 40 12:00:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) [ 259.803254] BUG: unable to handle page fault for address: ffffed100fffc000 [ 259.803854] #PF: supervisor write access in kernel mode [ 259.804224] #PF: error_code(0x0002) - not-present page [ 259.804587] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 259.805066] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI [ 259.805438] CPU: 1 PID: 7421 Comm: syz-executor.5 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 259.806098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 259.806659] RIP: 0010:__memset+0x24/0x50 [ 259.806964] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.808223] RSP: 0018:ffff8880322dfcc0 EFLAGS: 00010212 [ 259.808583] RAX: 0000000000000000 RBX: ffff88800c05a3c0 RCX: 1ffffe21fe603bde [ 259.809064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.809539] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b478 [ 259.810020] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.810497] R13: ffff88800c05a3c0 R14: ffffffff815f2620 R15: 1ffff1100119901f [ 259.810972] FS: 00007f3833cce700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 259.811506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.811895] CR2: ffffed100fffc000 CR3: 00000000364a0000 CR4: 0000000000350ee0 [ 259.812386] Call Trace: [ 259.812575] [ 259.812743] kasan_unpoison+0x23/0x60 [ 259.813028] mempool_exit+0x1c2/0x330 [ 259.813317] bioset_exit+0x2c9/0x630 [ 259.813599] disk_release+0x143/0x490 [ 259.813884] ? disk_release+0x0/0x490 [ 259.814164] ? device_release+0x0/0x250 [ 259.814457] device_release+0xa2/0x250 [ 259.814740] ? device_release+0x0/0x250 [ 259.815050] kobject_put+0x173/0x280 [ 259.815350] put_device+0x1b/0x40 [ 259.815598] put_disk+0x41/0x60 [ 259.815868] loop_control_ioctl+0x4d1/0x630 [ 259.816207] ? loop_control_ioctl+0x0/0x630 [ 259.816522] ? selinux_file_ioctl+0xb1/0x270 [ 259.816854] ? loop_control_ioctl+0x0/0x630 [ 259.817169] __x64_sys_ioctl+0x19a/0x220 [ 259.817463] do_syscall_64+0x3b/0xa0 [ 259.817731] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 259.818087] RIP: 0033:0x7f3836758b19 [ 259.818346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.819547] RSP: 002b:00007f3833cce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.820085] RAX: ffffffffffffffda RBX: 00007f383686bf60 RCX: 00007f3836758b19 [ 259.820583] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000006 [ 259.821086] RBP: 00007f38367b2f6d R08: 0000000000000000 R09: 0000000000000000 [ 259.821579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.822084] R13: 00007ffcd85e998f R14: 00007f3833cce300 R15: 0000000000022000 [ 259.822590] [ 259.822759] Modules linked in: [ 259.822995] CR2: ffffed100fffc000 [ 259.823242] ---[ end trace 0000000000000000 ]--- [ 259.823575] RIP: 0010:__memset+0x24/0x50 [ 259.823883] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 259.825123] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 259.825509] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 259.826031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 259.826538] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 259.827033] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 259.827533] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 259.828050] FS: 00007f3833cce700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 259.828622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.829050] CR2: ffffed100fffc000 CR3: 00000000364a0000 CR4: 0000000000350ee0 12:00:06 executing program 6: socket$netlink(0x10, 0x3, 0x8) 12:00:06 executing program 1: setfsgid(0xee00) [ 259.920304] process 'syz-executor.7' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 260.012434] BUG: unable to handle page fault for address: ffffed100fffc000 [ 260.012961] #PF: supervisor write access in kernel mode [ 260.013316] #PF: error_code(0x0002) - not-present page [ 260.013662] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 260.014125] Oops: 0002 [#4] PREEMPT SMP KASAN NOPTI [ 260.014475] CPU: 1 PID: 7424 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 260.015112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 260.015649] RIP: 0010:__memset+0x24/0x50 [ 260.015956] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.017217] RSP: 0018:ffff888035577cc0 EFLAGS: 00010212 [ 260.017569] RAX: 0000000000000000 RBX: ffff88800c05a540 RCX: 1ffffe21fe603be4 [ 260.018046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.018515] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b4a8 [ 260.018990] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.019472] R13: ffff88800c05a540 R14: ffffffff815f2620 R15: 1ffff110011ad41f [ 260.019998] FS: 00007f48a5241700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.020572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.020963] CR2: ffffed100fffc000 CR3: 0000000030f64000 CR4: 0000000000350ee0 [ 260.021430] Call Trace: [ 260.021615] [ 260.021769] kasan_unpoison+0x23/0x60 [ 260.022047] mempool_exit+0x1c2/0x330 [ 260.022318] bioset_exit+0x2c9/0x630 [ 260.022582] disk_release+0x143/0x490 [ 260.022851] ? disk_release+0x0/0x490 [ 260.023118] ? device_release+0x0/0x250 [ 260.023393] device_release+0xa2/0x250 [ 260.023685] ? device_release+0x0/0x250 [ 260.023974] kobject_put+0x173/0x280 [ 260.024245] put_device+0x1b/0x40 [ 260.024489] put_disk+0x41/0x60 [ 260.024728] loop_control_ioctl+0x4d1/0x630 [ 260.025032] ? loop_control_ioctl+0x0/0x630 [ 260.025339] ? selinux_file_ioctl+0xb1/0x270 [ 260.025656] ? loop_control_ioctl+0x0/0x630 [ 260.025956] __x64_sys_ioctl+0x19a/0x220 [ 260.026251] do_syscall_64+0x3b/0xa0 [ 260.026521] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 260.026874] RIP: 0033:0x7f48a7ccbb19 [ 260.027132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.028346] RSP: 002b:00007f48a5241188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.028861] RAX: ffffffffffffffda RBX: 00007f48a7ddef60 RCX: 00007f48a7ccbb19 [ 260.029345] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000006 [ 260.029822] RBP: 00007f48a7d25f6d R08: 0000000000000000 R09: 0000000000000000 [ 260.030303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.030812] R13: 00007ffc9b21d16f R14: 00007f48a5241300 R15: 0000000000022000 [ 260.031309] [ 260.031471] Modules linked in: [ 260.031708] CR2: ffffed100fffc000 [ 260.031945] ---[ end trace 0000000000000000 ]--- [ 260.032267] RIP: 0010:__memset+0x24/0x50 [ 260.032573] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.033815] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 260.033826] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 260.033835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.033843] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 260.033852] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.033860] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 260.033870] FS: 00007f48a5241700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.033883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.033892] CR2: ffffed100fffc000 CR3: 0000000030f64000 CR4: 0000000000350ee0 [ 260.140830] syz-executor.4: attempt to access beyond end of device [ 260.140830] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 260.141991] Buffer I/O error on dev loop4, logical block 10, lost async page write 12:00:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:06 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmat(0x0, &(0x7f0000fe6000/0xe000)=nil, 0x9000) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fed000/0x1000)=nil, 0x0) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x40200, 0x1e1, 0x1b}, 0x18) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 12:00:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300), 0x8001, 0x88ca0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 12:00:06 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:00:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66666c653000617874fac66c70ad65a98e1c0977cd286d4f7c0bce5346bac73b5cf28e66120fe05f4606d98962a783c70e8619a26f446558a2d731de618e8dc812cbdadbc730b26bd24a12454095b7d1b1bc1d496bf740c332b07e7b787647f562651258970f566fd3db2c9f2c50f0d9529e4703cc5219e0ec0ed60bfd30f4e8e6107580d75f44a292c3b87888acb8f44816a135da603cd11bc40211cc7a096474c42e8ddaf65e507384a192010c49dcfab7f48808af079d5c5eb63b8ca78166f4b20c59a506cc42f79cc396bef32ebfcb609966f4cca46f230f2620f940e2963fa3899b7a2babe2292eb58e6a5d70e7c45722b0d4f2de0f9b4fc72f838880c59c6402f88baa5a3e61d94a36381b3df033d25bb98b8a1935cdaf140f609c463723172c95db7587ee9c3d553c30686fd6fe0690b4ea288891de1ae6e810be7aca5fe4c89f52c1e14e38f9779354571c"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:06 executing program 1: setfsgid(0xee00) [ 260.730994] BUG: unable to handle page fault for address: ffffed100fffc000 [ 260.731582] #PF: supervisor write access in kernel mode [ 260.731972] #PF: error_code(0x0002) - not-present page [ 260.732329] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 260.732775] Oops: 0002 [#5] PREEMPT SMP KASAN NOPTI [ 260.733108] CPU: 1 PID: 7449 Comm: syz-executor.3 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 260.733726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 260.734257] RIP: 0010:__memset+0x24/0x50 [ 260.734548] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.735724] RSP: 0018:ffff8880375cfcc0 EFLAGS: 00010212 [ 260.736072] RAX: 0000000000000000 RBX: ffff88800c05a6c0 RCX: 1ffffe21fe603bea [ 260.736532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.736991] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b4d8 [ 260.737452] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.737910] R13: ffff88800c05a6c0 R14: ffffffff815f2620 R15: 1ffff1100111321f [ 260.738384] FS: 00007f5593316700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.738924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.739320] CR2: ffffed100fffc000 CR3: 000000003fdf8000 CR4: 0000000000350ee0 [ 260.739812] Call Trace: [ 260.739994] [ 260.740157] kasan_unpoison+0x23/0x60 [ 260.740431] mempool_exit+0x1c2/0x330 [ 260.740698] bioset_exit+0x2c9/0x630 [ 260.740997] disk_release+0x143/0x490 [ 260.741280] ? disk_release+0x0/0x490 [ 260.741544] ? device_release+0x0/0x250 [ 260.741827] device_release+0xa2/0x250 [ 260.742091] ? device_release+0x0/0x250 [ 260.742364] kobject_put+0x173/0x280 [ 260.742630] put_device+0x1b/0x40 [ 260.742873] put_disk+0x41/0x60 [ 260.743106] loop_control_ioctl+0x4d1/0x630 [ 260.743408] ? loop_control_ioctl+0x0/0x630 [ 260.743716] ? selinux_file_ioctl+0xb1/0x270 [ 260.744023] ? loop_control_ioctl+0x0/0x630 [ 260.744322] __x64_sys_ioctl+0x19a/0x220 [ 260.744608] do_syscall_64+0x3b/0xa0 [ 260.744880] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 260.745232] RIP: 0033:0x7f5595da0b19 [ 260.745500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.746803] RSP: 002b:00007f5593316188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.747318] RAX: ffffffffffffffda RBX: 00007f5595eb3f60 RCX: 00007f5595da0b19 [ 260.747812] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000006 [ 260.748293] RBP: 00007f5595dfaf6d R08: 0000000000000000 R09: 0000000000000000 [ 260.748779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.749252] R13: 00007ffe2a96d8ef R14: 00007f5593316300 R15: 0000000000022000 [ 260.749723] [ 260.749887] Modules linked in: [ 260.750114] CR2: ffffed100fffc000 [ 260.750348] ---[ end trace 0000000000000000 ]--- [ 260.750676] RIP: 0010:__memset+0x24/0x50 [ 260.751021] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.752275] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 260.752631] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 260.753113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.753592] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 260.754096] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.754600] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 260.755115] FS: 00007f5593316700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.755653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.756044] CR2: ffffed100fffc000 CR3: 000000003fdf8000 CR4: 0000000000350ee0 12:00:07 executing program 1: setfsgid(0xee00) [ 260.829832] BUG: unable to handle page fault for address: ffffed100fffc000 [ 260.830358] #PF: supervisor write access in kernel mode [ 260.830730] #PF: error_code(0x0002) - not-present page [ 260.831077] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 260.831532] Oops: 0002 [#6] PREEMPT SMP KASAN NOPTI [ 260.831903] CPU: 1 PID: 7451 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 260.832538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 260.833109] RIP: 0010:__memset+0x24/0x50 [ 260.833422] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.834622] RSP: 0018:ffff88804201fcc0 EFLAGS: 00010212 [ 260.834976] RAX: 0000000000000000 RBX: ffff88800c05a840 RCX: 1ffffe21fe603bf0 [ 260.835453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.835947] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b508 [ 260.836447] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.836943] R13: ffff88800c05a840 R14: ffffffff815f2620 R15: 1ffff110011f9e1f [ 260.837415] FS: 00007f48a5241700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.837950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.838340] CR2: ffffed100fffc000 CR3: 000000003fd78000 CR4: 0000000000350ee0 [ 260.838837] Call Trace: [ 260.839035] [ 260.839203] kasan_unpoison+0x23/0x60 [ 260.839496] mempool_exit+0x1c2/0x330 [ 260.839801] bioset_exit+0x2c9/0x630 [ 260.840091] disk_release+0x143/0x490 [ 260.840381] ? disk_release+0x0/0x490 [ 260.840665] ? device_release+0x0/0x250 [ 260.840954] device_release+0xa2/0x250 [ 260.841233] ? device_release+0x0/0x250 [ 260.841521] kobject_put+0x173/0x280 [ 260.841802] put_device+0x1b/0x40 [ 260.842068] put_disk+0x41/0x60 [ 260.842330] loop_control_ioctl+0x4d1/0x630 [ 260.842667] ? loop_control_ioctl+0x0/0x630 [ 260.842997] ? loop_control_ioctl+0x0/0x630 [ 260.843329] __x64_sys_ioctl+0x19a/0x220 [ 260.843636] do_syscall_64+0x3b/0xa0 [ 260.843939] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 260.844313] RIP: 0033:0x7f48a7ccbb19 [ 260.844582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.845851] RSP: 002b:00007f48a5241188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.846391] RAX: ffffffffffffffda RBX: 00007f48a7ddef60 RCX: 00007f48a7ccbb19 [ 260.846899] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000006 [ 260.847402] RBP: 00007f48a7d25f6d R08: 0000000000000000 R09: 0000000000000000 [ 260.847905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.848413] R13: 00007ffc9b21d16f R14: 00007f48a5241300 R15: 0000000000022000 [ 260.848919] [ 260.849089] Modules linked in: [ 260.849318] CR2: ffffed100fffc000 [ 260.849566] ---[ end trace 0000000000000000 ]--- [ 260.849898] RIP: 0010:__memset+0x24/0x50 [ 260.850202] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.851478] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 260.851869] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 260.852372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.852877] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 260.853381] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.853881] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 260.854385] FS: 00007f48a5241700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.854958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.855370] CR2: ffffed100fffc000 CR3: 000000003fd78000 CR4: 0000000000350ee0 [ 260.913814] audit: type=1400 audit(1667304007.236:10): avc: denied { read } for pid=7459 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 260.987405] BUG: unable to handle page fault for address: ffffed100fffc000 [ 260.987947] #PF: supervisor write access in kernel mode [ 260.988296] #PF: error_code(0x0002) - not-present page [ 260.988635] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 260.989079] Oops: 0002 [#7] PREEMPT SMP KASAN NOPTI [ 260.989417] CPU: 1 PID: 7462 Comm: syz-executor.2 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 260.990033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 260.990574] RIP: 0010:__memset+0x24/0x50 [ 260.990865] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 260.992036] RSP: 0018:ffff88803d71fcc0 EFLAGS: 00010212 [ 260.992383] RAX: 0000000000000000 RBX: ffff88800c05a9c0 RCX: 1ffffe21fe603bf6 [ 260.992843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 260.993311] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b538 [ 260.993778] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 260.994239] R13: ffff88800c05a9c0 R14: ffffffff815f2620 R15: 1ffff110011f9c1f [ 260.994707] FS: 00007fd3bfab0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 260.995230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.995613] CR2: ffffed100fffc000 CR3: 0000000033f4a000 CR4: 0000000000350ee0 [ 260.996086] Call Trace: [ 260.996267] [ 260.996429] kasan_unpoison+0x23/0x60 [ 260.996704] mempool_exit+0x1c2/0x330 [ 260.996988] bioset_exit+0x2c9/0x630 [ 260.997260] disk_release+0x143/0x490 [ 260.997538] ? disk_release+0x0/0x490 [ 260.997812] ? device_release+0x0/0x250 [ 260.998094] device_release+0xa2/0x250 [ 260.998375] ? device_release+0x0/0x250 [ 260.998655] kobject_put+0x173/0x280 [ 260.998929] put_device+0x1b/0x40 [ 260.999181] put_disk+0x41/0x60 [ 260.999419] loop_control_ioctl+0x4d1/0x630 [ 260.999744] ? loop_control_ioctl+0x0/0x630 [ 261.000057] ? selinux_file_ioctl+0xb1/0x270 [ 261.000382] ? loop_control_ioctl+0x0/0x630 [ 261.000693] __x64_sys_ioctl+0x19a/0x220 [ 261.000985] do_syscall_64+0x3b/0xa0 [ 261.001263] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 261.001621] RIP: 0033:0x7fd3c253ab19 [ 261.001884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.003106] RSP: 002b:00007fd3bfab0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.003631] RAX: ffffffffffffffda RBX: 00007fd3c264df60 RCX: 00007fd3c253ab19 [ 261.004123] RDX: 0000000000000006 RSI: 0000000000004c81 RDI: 0000000000000006 [ 261.004609] RBP: 00007fd3c2594f6d R08: 0000000000000000 R09: 0000000000000000 [ 261.005101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.005590] R13: 00007ffddd2953ff R14: 00007fd3bfab0300 R15: 0000000000022000 [ 261.006085] [ 261.006254] Modules linked in: [ 261.006491] CR2: ffffed100fffc000 [ 261.006733] ---[ end trace 0000000000000000 ]--- [ 261.007059] RIP: 0010:__memset+0x24/0x50 [ 261.007356] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 261.008601] RSP: 0018:ffff888032b87cc0 EFLAGS: 00010212 [ 261.008971] RAX: 0000000000000000 RBX: ffff88800c05a0c0 RCX: 1ffffe21fe603bd2 [ 261.009468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 261.009958] RBP: ffff88800c0753c0 R08: 0000000000000005 R09: ffffed100180b418 [ 261.010444] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c0753c0 [ 261.010920] R13: ffff88800c05a0c0 R14: ffffffff815f2620 R15: 1ffff1100112321f [ 261.011409] FS: 00007fd3bfab0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 261.011966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.012370] CR2: ffffed100fffc000 CR3: 0000000033f4a000 CR4: 0000000000350ee0 12:00:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66666c653000617874fac66c70ad65a98e1c0977cd286d4f7c0bce5346bac73b5cf28e66120fe05f4606d98962a783c70e8619a26f446558a2d731de618e8dc812cbdadbc730b26bd24a12454095b7d1b1bc1d496bf740c332b07e7b787647f562651258970f566fd3db2c9f2c50f0d9529e4703cc5219e0ec0ed60bfd30f4e8e6107580d75f44a292c3b87888acb8f44816a135da603cd11bc40211cc7a096474c42e8ddaf65e507384a192010c49dcfab7f48808af079d5c5eb63b8ca78166f4b20c59a506cc42f79cc396bef32ebfcb609966f4cca46f230f2620f940e2963fa3899b7a2babe2292eb58e6a5d70e7c45722b0d4f2de0f9b4fc72f838880c59c6402f88baa5a3e61d94a36381b3df033d25bb98b8a1935cdaf140f609c463723172c95db7587ee9c3d553c30686fd6fe0690b4ea288891de1ae6e810be7aca5fe4c89f52c1e14e38f9779354571c"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300), 0x8001, 0x88ca0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 12:00:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66666c653000617874fac66c70ad65a98e1c0977cd286d4f7c0bce5346bac73b5cf28e66120fe05f4606d98962a783c70e8619a26f446558a2d731de618e8dc812cbdadbc730b26bd24a12454095b7d1b1bc1d496bf740c332b07e7b787647f562651258970f566fd3db2c9f2c50f0d9529e4703cc5219e0ec0ed60bfd30f4e8e6107580d75f44a292c3b87888acb8f44816a135da603cd11bc40211cc7a096474c42e8ddaf65e507384a192010c49dcfab7f48808af079d5c5eb63b8ca78166f4b20c59a506cc42f79cc396bef32ebfcb609966f4cca46f230f2620f940e2963fa3899b7a2babe2292eb58e6a5d70e7c45722b0d4f2de0f9b4fc72f838880c59c6402f88baa5a3e61d94a36381b3df033d25bb98b8a1935cdaf140f609c463723172c95db7587ee9c3d553c30686fd6fe0690b4ea288891de1ae6e810be7aca5fe4c89f52c1e14e38f9779354571c"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:07 executing program 0: perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:00:07 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x1278, &(0x7f0000000980)=@disckey={0x2, 0x0, "aafce814e79ba4c40b771fdf992daf946962261788c79cf680f7fe944dfeea464dfc868945312cefd4074a2f44fbfdfd1d46e241c3fc8bf7d537074b234356f0ba9b1dec584de8324e547b36ab66ead37e285432f5845d1ddcae2bf99ac8d164bc4a5e821609fa3b3a72ab92b7c768b17116dde5a096e9744beb2f05b1a1197426bb784af797b1a9a18f963ebd14ed1b580dc3458633e59c6b791b31575fa2b2ec6cd8b85e16afd67f60d2d43f903135ba03edad0f8990225544ad0db262f9f34bb5a1be04940232e8fc5e1cf96f2147c4ab0cd6bae874ede232cc1242fcf2d84ea04dc7f45ad392d05e18dca95badf5629de8aa2bdddef8003617ca5f4d4bfcc3010d9e408ec72eb3b5d3455c1a0fdf032d828002d8a1106d73b0cf4f7cb358e4b1c2013a369a5bc6fdd3c8fda927801bc25f9fef01f83fc4ca9118c65ef597bfb55edf337ac25c07a91d9c79b5acc9da3682734343eea66d6595925ddebee146df6ab37bcd6a5503318233251c90f691f00bf8410efaab08d3b8a0276c5ae0d3fbdcf19cfa61e114f0176cc9e8c32716146e46eb2181acfc87316cfaf9439809a6a4e9859e0c09a98e8bddb2f50e148d8edcc7b2082ddd94b7cdcce6a36a4cada51fb88e6e38346485c2702547e1fa031a49dfa9f4df80cd5f05907bc82e96d9bb5cb9adbe53301f7a33310d1b67b4bf3e7c7adfb89ed750f9ef2734efa6912b28caff37a8f79272bdc5038cf2f0553fcf542a401a53b9f7171ac7424a83c8aa73761468855076980ea45d078ade4b68be71eaa1dcbf5d9c6a3810a7a33a594ac6c0fa829eea5955b6725a5bfb4fe2cf820fa7d9c89a63cfc1b053de356d57c6c34b690ee808fa1d8d442fbf0c7228446df6f37a17c3ea4d01c5cf311063def31879512a6efecfb25203fc9b24697826b63c9fee28f236191b3b3baf1fd97ec23400c793d354d00177bddcd2e4ccc2c15ed8996de2bce8b7d48726a6845aca5eeb11f3d0ac4467503f4984944f55dc628b8ac04f78e28420948b73123ebb07b67b6440765a9d800f649dc3a469e486a39d00e2ec935bbfaa3aac8a91afcd532098f7db918f8e1d3823cd2fb86524609518d6d989c7ca4cd61fcb776686e53b0be08d58be424c3cb55633133664924773b64930fcdc7233a96421e65af9632decb5856545756e90bbb546e26c55999cf63370ebd86197eb906c81d1a7a7f712e3dc215035a1f74e18a2070c6dee15708548434e42b0f8756ece5c93ab726457da066e3129157389e820cac27858907ea152b8695223aec399436ac95b91bc292d84967019b185fae036b8b5f05ce9b4b445a7440a817ac13596091aba91c613a12c115467d738bf193908ad43377bebbb6ae45302cb574d3a09e070f0ef3028d73e7d27bbb059f6753700545cd666d21b25c24f62f7069a0740d098bde801ee2c47868581f99c044e36185f809fc35be2fd5fa9e4be6d23d405f0b4d222b1d206b5d06447c1fc2fd19890f0be4780e95654c0374d9ec31a9bbbe6afdc64fb6c02cf70f6ef500d92addc962e01c1ae226c6830641ee44dbf89abdc7ad213e6c4c5c032a893cff30aa8556f0dc397fd37e13807626a895aee6533694a56f0b7c0e3fb5dabd392269084122b631e8abecc154bf10f0de97210f321317266b2b2db45614d3b083d7c037a0b9ec6c5aa738cac3d2c6f39b41454bc908997eb5db3af7700afb62c127c974f7ac6c9272cb90a80981f8c6c2ac285c1df0839bda6156e0434bb0fc2009a0a9f3e057b955a6756de14de6b50ade77211b173af74365428071cec5523b6c70712c51ca37c89abc24c05e1f3683de154d9d55cbee4da6a2247f3f02f562925bd621e89840427ff135d917520dd29461cc35d0ca32f7a4e3765ba953692eb1fd37e387f8b18c0ea9e0902b25d894b10b7cd5a6727ddcf15cfba6343c1f4ad0185e257da94dff6747cdd9b99bc705e1bca2a73cdd593a9d309176f91c6a4b7c510449846a0afe9372b762c2c5a8746c5cff5a5f9855d81b8aa829ab136857c792ec539049dc7004fa90eb54d259c9f280c6ffbdd466ebdbd5668cd8d621030022df7c39cf68501cd38f8ba4ef1662488ea65ab0d723c8b839310efc949a1e0b4aba68ba181924e25b6c0bc9d0e3270c4344e0a08610d528494db7485f81cd5a7c8a9c966630c5eea096eae60f7d79d78fd9e1cdfd734439d4def5e5948cba1fdfa8ee1829ff65fc5258c2b46f2fbae7660c6428e7a73344fd752dab931d13720bb54c3b2687a954c6a5c270af82e988627134ed13c741aae17e69088345626505eede5b9e7c7a12af7cc1a0d288061d0d68ad20cacb791c97a31ae00e17e6c8eed63bb648b1d1492295ed8a6df6468d160cc2b472305aa5639fae7231cab95d873ac8cd3fb460ca42413b3ffcf1ad23b03daa2b4d6b0aec5146a415de1f490aad062df09a1de6cf49e8f702ff8eb6b1f6760610ef3e63dc1b133556521838db50cfc910f2bfcfb5899df02ffd63214f0a7ccd8fe083444296a180df7a54baf733e40ecd1cd0c80de30d208e3beac31296358326052c0bf0d61091d658c0a5335c77765e50603ee4d1de50eebc5738e26beda971b40460bcdca5a483a08f395b8169fccbe24d5db8b2dec304609dfb9aa316cc773269ecebe5486497d2eaff6a098ec30f24dc61fddfa1cc884f172377b2a334aa49dc132c371eabc4a6451a61e33f4145710d3b7a4270ca7cedd0ac488514a6f5e94066b4cf8e4f30f38cb833b50994bb760e3f0495f3cad44ad67bb4da5cd13b3b1ca5cdb5f885775f37c1c571e5ab43794cd242aa2b004fdcd40105bd4442fb59d4ab1750c0d2036d4afb07b64ffa701bddd1e6838de60afed67495daab1f5176dadb5a5db"}) 12:00:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:00:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x32, 0x0, 0x0) 12:00:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:00:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66666c653000617874fac66c70ad65a98e1c0977cd286d4f7c0bce5346bac73b5cf28e66120fe05f4606d98962a783c70e8619a26f446558a2d731de618e8dc812cbdadbc730b26bd24a12454095b7d1b1bc1d496bf740c332b07e7b787647f562651258970f566fd3db2c9f2c50f0d9529e4703cc5219e0ec0ed60bfd30f4e8e6107580d75f44a292c3b87888acb8f44816a135da603cd11bc40211cc7a096474c42e8ddaf65e507384a192010c49dcfab7f48808af079d5c5eb63b8ca78166f4b20c59a506cc42f79cc396bef32ebfcb609966f4cca46f230f2620f940e2963fa3899b7a2babe2292eb58e6a5d70e7c45722b0d4f2de0f9b4fc72f838880c59c6402f88baa5a3e61d94a36381b3df033d25bb98b8a1935cdaf140f609c463723172c95db7587ee9c3d553c30686fd6fe0690b4ea288891de1ae6e810be7aca5fe4c89f52c1e14e38f9779354571c"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0xab358d1624cd19e7}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000340), 0x4) 12:00:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300), 0x8001, 0x88ca0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 12:00:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:00:08 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000b40), 0xc000, 0x0) 12:00:08 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004c00)) 12:00:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc) io_uring_setup(0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) 12:00:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') pread64(r0, &(0x7f0000000100)=""/143, 0x8f, 0x1) 12:00:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001100), 0x4) 12:00:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:00:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="49e9ab22005a", 0x0, 0x7, 0x0, 0x0, 0x0}) 12:00:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') pread64(r0, &(0x7f0000000100)=""/143, 0x8f, 0x1) 12:00:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="23217f5d09"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 12:00:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 12:00:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="49e9ab22005a", 0x0, 0x7, 0x0, 0x0, 0x0}) 12:00:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') pread64(r0, &(0x7f0000000100)=""/143, 0x8f, 0x1) 12:00:09 executing program 7: read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5, 0x1, 0xd6c2, 0x0, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@empty, @dev={0xac, 0x14, 0x14, 0x3a}, r6}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r7, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000300000a18000000", @ANYRES32=r1, @ANYBLOB="01f8ffff000000002e2f66696c653100"]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @remote}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:00:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:00:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 12:00:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1\x00') 12:00:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300), 0x8001, 0x88ca0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 12:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 12:00:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="49e9ab22005a", 0x0, 0x7, 0x0, 0x0, 0x0}) 12:00:09 executing program 5: futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:00:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 12:00:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="49e9ab22005a", 0x0, 0x7, 0x0, 0x0, 0x0}) 12:00:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') pread64(r0, &(0x7f0000000100)=""/143, 0x8f, 0x1) 12:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 12:00:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x0) 12:00:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x2}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x483e}, {0x0}], 0x0, &(0x7f0000000300)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xf791}}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@hash}, {@uid_eq}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 263.336618] Zero length message leads to an empty skb 12:00:09 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x20000010000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001580)={0x0, 0x0, "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", "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"}) 12:00:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@access_client}]}}) 12:00:09 executing program 6: futex(&(0x7f0000000300), 0x5, 0x0, 0x0, &(0x7f0000000380), 0x1f000000) 12:00:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x2}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x483e}, {0x0}], 0x0, &(0x7f0000000300)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xf791}}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@hash}, {@uid_eq}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 12:00:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 12:00:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 263.537240] loop7: detected capacity change from 0 to 264192 12:00:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) [ 263.553100] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 263.563774] device lo entered promiscuous mode 12:00:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) bind$netlink(r0, &(0x7f0000000000), 0xc) 12:00:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 12:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 12:00:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@access_client}]}}) 12:00:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) 12:00:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:10 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) [ 263.795515] device lo left promiscuous mode 12:00:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 263.906881] device lo entered promiscuous mode [ 264.168175] device lo entered promiscuous mode 12:00:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x2}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x483e}, {0x0}], 0x0, &(0x7f0000000300)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xf791}}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@hash}, {@uid_eq}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 12:00:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@access_client}]}}) 12:00:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) 12:00:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:00:10 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) 12:00:10 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000026c0)=[{&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/72, 0x48}], 0x2) 12:00:10 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$SG_IO(r0, 0x2282, 0x0) [ 264.266226] device lo left promiscuous mode [ 264.274030] device lo left promiscuous mode [ 264.285718] device lo entered promiscuous mode 12:00:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:00:10 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) pread64(r0, &(0x7f0000019300)=""/206, 0xce, 0xac4) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010001040000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/102389, 0x18ff5, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x1000}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x80000001}, 0x330, 0x8, 0x7, 0x4, 0x8, 0x3, 0x4, 0x0, 0x7f1460ba, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, 0x0) syncfs(r2) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001f40)={{{@in6=@dev, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002040)=0xe8) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000) 12:00:10 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) 12:00:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x2}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x483e}, {0x0}], 0x0, &(0x7f0000000300)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xf791}}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@hash}, {@uid_eq}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 12:00:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@access_client}]}}) 12:00:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x227a, 0x0) 12:00:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) [ 264.521067] device lo entered promiscuous mode 12:00:10 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) 12:00:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) [ 264.910489] device lo left promiscuous mode [ 264.917161] device sit0 entered promiscuous mode [ 264.918973] device lo entered promiscuous mode [ 264.936540] device sit0 left promiscuous mode [ 264.943821] device sit0 entered promiscuous mode [ 264.945018] device sit0 left promiscuous mode 12:00:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 12:00:11 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:00:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x40086602, 0xffffffffffffffff) 12:00:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) 12:00:11 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) 12:00:11 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018d10000", @ANYRES32, @ANYBLOB="00000080040000002e65300000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80044584, &(0x7f0000000180)=""/170) 12:00:11 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) [ 265.389895] device sit0 entered promiscuous mode [ 265.404609] device lo left promiscuous mode 12:00:11 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) [ 265.432334] device sit0 entered promiscuous mode [ 265.433670] device sit0 left promiscuous mode [ 265.434692] device sit0 left promiscuous mode [ 265.474198] device lo entered promiscuous mode 12:00:11 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) 12:00:11 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) [ 265.576178] Bluetooth: hci2: command 0x0406 tx timeout 12:00:11 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:00:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) 12:00:12 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:00:12 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:12 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) [ 265.901101] loop7: detected capacity change from 0 to 264192 [ 265.960287] I/O error, dev loop7, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.243164] device sit0 entered promiscuous mode [ 266.253577] device sit0 entered promiscuous mode [ 266.257739] device sit0 left promiscuous mode [ 266.258586] device sit0 left promiscuous mode 12:00:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) 12:00:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 12:00:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) 12:00:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev}, 0x10) 12:00:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:13 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:13 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) [ 267.343658] device sit0 entered promiscuous mode [ 267.344896] device sit0 left promiscuous mode [ 267.406870] device sit0 entered promiscuous mode [ 267.412768] device sit0 left promiscuous mode [ 267.427934] loop7: detected capacity change from 0 to 264192 12:00:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:14 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) 12:00:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7af33237, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[]) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="77d76688a173640a8805dc0fa2330ff300750758a214f882305b079e9d5bcf398afc7dc5247d5f582dd51c69de7077c234da7b5d3de03c", 0x37}, {&(0x7f0000000300)="f1a49296eafcebac780e9c0da1016ae592a861ed45f67ee84fc484dd9bddfcef41d4ac62552d436040b0c4e37b82bfc625291b58738fbf39599fad2f6ea78f361ddfec7dd352e231a98b67195ae77356eab00b0fd8de3ba05d4cbb4c20b320123519ed33b0d1c148536df18721ae09400e91b9245ecc267456b36e157c1b88c577f34b0787b0169b8bc9700876e4f5563ba0c08e3497ebc5", 0x98}, {&(0x7f00000003c0)}, {&(0x7f0000000180)="bdfe2cac76ec20e0b674d95aac59f7547283b2f6d61b53bcfb389a4de35db2332bbaba22c16bf98b7111bc3cd266adda71366385e41bc60e9a741d42a5cb88d8ed6d91227ee673498dbeacb0dfd186cae0895fc737884fb67b869848638f2deb5bfbeaa86e6fe1ff03e3f40af764723584fbbda4e0", 0x75}, {&(0x7f0000000480)="98fc316023ee87e6927010f9829c7146f576710f712ba5a4a50499608aa89a8ebba203cdf2665d95dc30d1e93efc5e0d2084aa3488ad44af4831faaa47588fcf3d821c65e737514073221fdb65449abc4bbd39d415b8f6b0ae0e6470bda4f57f80c5dc52e2b543af7d3894", 0x6b}, {&(0x7f0000000500)="56d02ea3b01c3a662da62b9454decbfc7eb27e4148b98937d4763115bd28c188e49b88b33e80ef7cd4aea55e971d5109820adda120526949669855dc69459e370899b27a21ea11683a4d1028aafcf66dce4eb8b471fded9649295c30fc88ae00743a9d5aad77e253fbf7807da3ae026b64479c70ef553b47eae0b254df4a7842982895b627f5941fdb4d9e7b0d1fc25ba292d1c42c4878e9ec93e38e3ccb36997b1d38be708813910304021a3687eccda3f8f70c11fdd8e2341b889b5ad5014a36cf25a76703e7a1a19e909b73eb3f3f3d9b5a3d8b596a150f86ff66c04db151e333a9e7bd0df7511e9d922e0e00", 0xee}, {&(0x7f0000000600)="5367d00378ca74f4d9560427cf7b8f4ad385809034c51f82c5d09b7dccb0e4a87c963558b8d25865fea693564b2df89a1e122edf2ae2bf9464a27713001470a59dc71a7789311d2143e964a24636a451d10fc9fb3422b4bc16288629b5685f73abd3c75be5e0146a1046e855091ed9b28599f4788453046f32116889a7fcd3c6f39ea3ecec6b54c8b9f5ac291a9b224b1abb76ca9caf339b5d64644ab566ccfe946030040a5247520708599ecf8abb", 0xaf}], 0x7, 0x8, 0x7fff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=default,size=53p,huge=never,nr_inodes=1']) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 12:00:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 12:00:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) accept4$inet(r1, 0x0, 0x0, 0x0) [ 267.849365] loop7: detected capacity change from 0 to 264192 12:00:14 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) r2 = gettid() rt_sigqueueinfo(r2, 0x41, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x2, 0x0, 0x56, 0x0, 0x7f, 0xa1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x11, 0x0, 0x24000, 0x0, 0xffff, 0x9a8, 0x1, 0x0, 0xfffffff9, 0x0, 0x4}, r2, 0x8, r0, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "b03a0a89d4875ccf15016bb94a793223af2896d9e99868e90b1cdea9443d257bfc73241298fbc891d4ce70d26e70438fc92ae91351195b1fda70a2061ebedd83708f97007d4afda6d1439d9400421716e0bc9d9259eac610075c7b5169a4af48d4b8c5aa5e352938679e2391914c3d6be1b22d0decce5db1773a09b8b88c538d6ba4ba25f93367fdb9e1810552599a5520a5bcca9bfbb3e50547a60472ff6c827c016e459b598daa6697ef08446dd33d6b1e3cb50dfd4b2357fcefa8eba4abc2062e8d894ffdc3850b3a5cfb30e1570ccf69196c5ecc225065a3728d03bdc0a516a57680f48d334e981b3c7ed76b3b822486e7ab619964fe22fa4de52e33eae5", "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 VM DIAGNOSIS: 12:00:05 Registers: info registers vcpu 0 RAX=000000000000004d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82451491 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff888032b87548 R8 =0000000000000001 R9 =000000000000000a R10=000000000000004d R11=0000000000000001 R12=000000000000004d R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451480 RIP=ffffffff824514e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f48a5220700 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe4aaff0b000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe4aaff09000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed100fffc000 CR3=00000000377ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=00000000000000000000000000000000 XMM03=ffffffff81359d6affffffff810a4eb0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=80000000372fd007 RCX=ffffffff816cfdcb RDX=ffffea0000dcbf40 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88803e668ba8 RSP=ffff88803cb5f730 R8 =0000000000000000 R9 =ffffea0000dcbf47 R10=fffff940001b97e8 R11=0000000000000001 R12=ffffea0000dcbf40 R13=dffffc0000000000 R14=ffffea0000dcbf40 R15=0000000000000010 RIP=ffffffff81482594 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555717d400 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe729bc7b000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe729bc79000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc1c0644620 CR3=0000000034b7a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000