Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:49381' (ECDSA) to the list of known hosts. 2022/11/01 12:48:35 fuzzer started 2022/11/01 12:48:36 dialing manager at localhost:42881 syzkaller login: [ 36.272671] cgroup: Unknown subsys name 'net' [ 36.401289] cgroup: Unknown subsys name 'rlimit' 2022/11/01 12:48:49 syscalls: 2217 2022/11/01 12:48:49 code coverage: enabled 2022/11/01 12:48:49 comparison tracing: enabled 2022/11/01 12:48:49 extra coverage: enabled 2022/11/01 12:48:49 setuid sandbox: enabled 2022/11/01 12:48:49 namespace sandbox: enabled 2022/11/01 12:48:49 Android sandbox: enabled 2022/11/01 12:48:49 fault injection: enabled 2022/11/01 12:48:49 leak checking: enabled 2022/11/01 12:48:49 net packet injection: enabled 2022/11/01 12:48:49 net device setup: enabled 2022/11/01 12:48:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/01 12:48:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/01 12:48:49 USB emulation: enabled 2022/11/01 12:48:49 hci packet injection: enabled 2022/11/01 12:48:49 wifi device emulation: enabled 2022/11/01 12:48:49 802.15.4 emulation: enabled 2022/11/01 12:48:49 fetching corpus: 0, signal 0/2000 (executing program) 2022/11/01 12:48:49 fetching corpus: 41, signal 31337/34903 (executing program) 2022/11/01 12:48:49 fetching corpus: 91, signal 42276/47408 (executing program) 2022/11/01 12:48:49 fetching corpus: 141, signal 52285/58850 (executing program) 2022/11/01 12:48:49 fetching corpus: 191, signal 63354/71180 (executing program) 2022/11/01 12:48:49 fetching corpus: 241, signal 67856/77067 (executing program) 2022/11/01 12:48:49 fetching corpus: 291, signal 73442/83950 (executing program) 2022/11/01 12:48:50 fetching corpus: 341, signal 79565/91233 (executing program) 2022/11/01 12:48:50 fetching corpus: 391, signal 84370/97222 (executing program) 2022/11/01 12:48:50 fetching corpus: 441, signal 90676/104522 (executing program) 2022/11/01 12:48:50 fetching corpus: 491, signal 97177/111915 (executing program) 2022/11/01 12:48:50 fetching corpus: 541, signal 100805/116596 (executing program) 2022/11/01 12:48:50 fetching corpus: 590, signal 104285/121139 (executing program) 2022/11/01 12:48:50 fetching corpus: 640, signal 109513/127249 (executing program) 2022/11/01 12:48:50 fetching corpus: 689, signal 112466/131150 (executing program) 2022/11/01 12:48:51 fetching corpus: 739, signal 115661/135250 (executing program) 2022/11/01 12:48:51 fetching corpus: 789, signal 117934/138511 (executing program) 2022/11/01 12:48:51 fetching corpus: 839, signal 121728/143003 (executing program) 2022/11/01 12:48:51 fetching corpus: 889, signal 124170/146323 (executing program) 2022/11/01 12:48:51 fetching corpus: 937, signal 126644/149660 (executing program) 2022/11/01 12:48:51 fetching corpus: 986, signal 129968/153685 (executing program) 2022/11/01 12:48:51 fetching corpus: 1036, signal 132856/157267 (executing program) 2022/11/01 12:48:51 fetching corpus: 1085, signal 134883/160102 (executing program) 2022/11/01 12:48:51 fetching corpus: 1135, signal 137237/163124 (executing program) 2022/11/01 12:48:52 fetching corpus: 1185, signal 139517/166136 (executing program) 2022/11/01 12:48:52 fetching corpus: 1235, signal 141362/168754 (executing program) 2022/11/01 12:48:52 fetching corpus: 1285, signal 143376/171464 (executing program) 2022/11/01 12:48:52 fetching corpus: 1335, signal 145607/174349 (executing program) 2022/11/01 12:48:52 fetching corpus: 1385, signal 147280/176755 (executing program) 2022/11/01 12:48:52 fetching corpus: 1435, signal 150907/180642 (executing program) 2022/11/01 12:48:52 fetching corpus: 1485, signal 152982/183323 (executing program) 2022/11/01 12:48:52 fetching corpus: 1535, signal 154915/185759 (executing program) 2022/11/01 12:48:53 fetching corpus: 1585, signal 156745/188134 (executing program) 2022/11/01 12:48:53 fetching corpus: 1635, signal 158965/190790 (executing program) 2022/11/01 12:48:53 fetching corpus: 1685, signal 160455/192893 (executing program) 2022/11/01 12:48:53 fetching corpus: 1735, signal 162253/195119 (executing program) 2022/11/01 12:48:53 fetching corpus: 1785, signal 164040/197408 (executing program) 2022/11/01 12:48:53 fetching corpus: 1834, signal 165481/199368 (executing program) 2022/11/01 12:48:53 fetching corpus: 1884, signal 167549/201823 (executing program) 2022/11/01 12:48:53 fetching corpus: 1934, signal 169468/204083 (executing program) 2022/11/01 12:48:54 fetching corpus: 1984, signal 171040/206104 (executing program) 2022/11/01 12:48:54 fetching corpus: 2034, signal 172771/208156 (executing program) 2022/11/01 12:48:54 fetching corpus: 2084, signal 174430/210141 (executing program) 2022/11/01 12:48:54 fetching corpus: 2134, signal 175800/211962 (executing program) 2022/11/01 12:48:54 fetching corpus: 2183, signal 177066/213697 (executing program) 2022/11/01 12:48:54 fetching corpus: 2232, signal 179890/216472 (executing program) 2022/11/01 12:48:54 fetching corpus: 2282, signal 181170/218145 (executing program) 2022/11/01 12:48:55 fetching corpus: 2332, signal 182521/219869 (executing program) 2022/11/01 12:48:55 fetching corpus: 2381, signal 183964/221644 (executing program) 2022/11/01 12:48:55 fetching corpus: 2431, signal 185607/223564 (executing program) 2022/11/01 12:48:55 fetching corpus: 2481, signal 186996/225266 (executing program) 2022/11/01 12:48:55 fetching corpus: 2530, signal 188071/226701 (executing program) 2022/11/01 12:48:55 fetching corpus: 2578, signal 189439/228318 (executing program) 2022/11/01 12:48:55 fetching corpus: 2628, signal 190690/229876 (executing program) 2022/11/01 12:48:56 fetching corpus: 2678, signal 192101/231496 (executing program) 2022/11/01 12:48:56 fetching corpus: 2728, signal 193164/232915 (executing program) 2022/11/01 12:48:56 fetching corpus: 2778, signal 194517/234443 (executing program) 2022/11/01 12:48:56 fetching corpus: 2826, signal 195214/235583 (executing program) 2022/11/01 12:48:56 fetching corpus: 2875, signal 197272/237513 (executing program) 2022/11/01 12:48:56 fetching corpus: 2925, signal 199132/239367 (executing program) 2022/11/01 12:48:56 fetching corpus: 2975, signal 200093/240607 (executing program) 2022/11/01 12:48:57 fetching corpus: 3025, signal 201048/241864 (executing program) 2022/11/01 12:48:57 fetching corpus: 3075, signal 201862/242997 (executing program) 2022/11/01 12:48:57 fetching corpus: 3125, signal 202904/244222 (executing program) 2022/11/01 12:48:57 fetching corpus: 3175, signal 203921/245441 (executing program) 2022/11/01 12:48:57 fetching corpus: 3225, signal 204698/246525 (executing program) 2022/11/01 12:48:57 fetching corpus: 3274, signal 205898/247770 (executing program) 2022/11/01 12:48:57 fetching corpus: 3324, signal 206983/248992 (executing program) 2022/11/01 12:48:57 fetching corpus: 3374, signal 207709/250035 (executing program) 2022/11/01 12:48:58 fetching corpus: 3424, signal 208916/251304 (executing program) 2022/11/01 12:48:58 fetching corpus: 3473, signal 209569/252234 (executing program) 2022/11/01 12:48:58 fetching corpus: 3523, signal 210367/253257 (executing program) 2022/11/01 12:48:58 fetching corpus: 3573, signal 211283/254331 (executing program) 2022/11/01 12:48:58 fetching corpus: 3623, signal 212238/255390 (executing program) 2022/11/01 12:48:58 fetching corpus: 3673, signal 213325/256531 (executing program) 2022/11/01 12:48:59 fetching corpus: 3723, signal 214178/257567 (executing program) 2022/11/01 12:48:59 fetching corpus: 3773, signal 215329/258722 (executing program) 2022/11/01 12:48:59 fetching corpus: 3823, signal 216504/259823 (executing program) 2022/11/01 12:48:59 fetching corpus: 3873, signal 217677/260941 (executing program) 2022/11/01 12:48:59 fetching corpus: 3923, signal 219037/262131 (executing program) 2022/11/01 12:48:59 fetching corpus: 3973, signal 220059/263151 (executing program) 2022/11/01 12:49:00 fetching corpus: 4023, signal 221044/264127 (executing program) 2022/11/01 12:49:00 fetching corpus: 4073, signal 222032/265078 (executing program) 2022/11/01 12:49:00 fetching corpus: 4123, signal 222522/265820 (executing program) 2022/11/01 12:49:00 fetching corpus: 4173, signal 223307/266635 (executing program) 2022/11/01 12:49:00 fetching corpus: 4223, signal 224063/267463 (executing program) 2022/11/01 12:49:00 fetching corpus: 4273, signal 225176/268419 (executing program) 2022/11/01 12:49:00 fetching corpus: 4323, signal 226246/269360 (executing program) 2022/11/01 12:49:01 fetching corpus: 4373, signal 227192/270241 (executing program) 2022/11/01 12:49:01 fetching corpus: 4422, signal 227944/271014 (executing program) 2022/11/01 12:49:01 fetching corpus: 4472, signal 228524/271711 (executing program) 2022/11/01 12:49:01 fetching corpus: 4522, signal 229248/272468 (executing program) 2022/11/01 12:49:01 fetching corpus: 4572, signal 229963/273237 (executing program) 2022/11/01 12:49:01 fetching corpus: 4622, signal 230806/274063 (executing program) 2022/11/01 12:49:01 fetching corpus: 4672, signal 231589/274821 (executing program) 2022/11/01 12:49:02 fetching corpus: 4722, signal 232050/275439 (executing program) 2022/11/01 12:49:02 fetching corpus: 4772, signal 232600/276110 (executing program) 2022/11/01 12:49:04 fetching corpus: 4822, signal 233149/276782 (executing program) 2022/11/01 12:49:04 fetching corpus: 4868, signal 234304/277738 (executing program) 2022/11/01 12:49:04 fetching corpus: 4918, signal 235021/278412 (executing program) 2022/11/01 12:49:04 fetching corpus: 4968, signal 235507/279000 (executing program) 2022/11/01 12:49:04 fetching corpus: 5018, signal 235966/279531 (executing program) 2022/11/01 12:49:04 fetching corpus: 5068, signal 236713/280165 (executing program) 2022/11/01 12:49:04 fetching corpus: 5118, signal 237339/280772 (executing program) 2022/11/01 12:49:04 fetching corpus: 5168, signal 238320/281466 (executing program) 2022/11/01 12:49:05 fetching corpus: 5218, signal 239120/282076 (executing program) 2022/11/01 12:49:05 fetching corpus: 5268, signal 240016/282741 (executing program) 2022/11/01 12:49:05 fetching corpus: 5318, signal 240406/283232 (executing program) 2022/11/01 12:49:05 fetching corpus: 5368, signal 240831/283742 (executing program) 2022/11/01 12:49:05 fetching corpus: 5418, signal 241534/284348 (executing program) 2022/11/01 12:49:05 fetching corpus: 5466, signal 242070/284878 (executing program) 2022/11/01 12:49:05 fetching corpus: 5516, signal 242774/285427 (executing program) 2022/11/01 12:49:05 fetching corpus: 5566, signal 243272/285932 (executing program) 2022/11/01 12:49:06 fetching corpus: 5615, signal 244067/286520 (executing program) 2022/11/01 12:49:06 fetching corpus: 5665, signal 244831/287091 (executing program) 2022/11/01 12:49:06 fetching corpus: 5714, signal 245255/287549 (executing program) 2022/11/01 12:49:06 fetching corpus: 5764, signal 246073/288110 (executing program) 2022/11/01 12:49:06 fetching corpus: 5814, signal 246600/288585 (executing program) 2022/11/01 12:49:06 fetching corpus: 5863, signal 247041/289052 (executing program) 2022/11/01 12:49:06 fetching corpus: 5913, signal 247630/289528 (executing program) 2022/11/01 12:49:06 fetching corpus: 5963, signal 248008/289961 (executing program) 2022/11/01 12:49:06 fetching corpus: 6012, signal 248611/290407 (executing program) 2022/11/01 12:49:07 fetching corpus: 6062, signal 249213/290849 (executing program) 2022/11/01 12:49:07 fetching corpus: 6112, signal 249885/291278 (executing program) 2022/11/01 12:49:07 fetching corpus: 6162, signal 250450/291711 (executing program) 2022/11/01 12:49:07 fetching corpus: 6212, signal 251190/292192 (executing program) 2022/11/01 12:49:07 fetching corpus: 6261, signal 251631/292588 (executing program) 2022/11/01 12:49:07 fetching corpus: 6311, signal 252213/293008 (executing program) 2022/11/01 12:49:08 fetching corpus: 6360, signal 252634/293337 (executing program) 2022/11/01 12:49:08 fetching corpus: 6410, signal 253107/293724 (executing program) 2022/11/01 12:49:08 fetching corpus: 6459, signal 253620/294107 (executing program) 2022/11/01 12:49:08 fetching corpus: 6509, signal 253890/294441 (executing program) 2022/11/01 12:49:08 fetching corpus: 6558, signal 254461/294801 (executing program) 2022/11/01 12:49:08 fetching corpus: 6608, signal 255057/295184 (executing program) 2022/11/01 12:49:08 fetching corpus: 6658, signal 255616/295487 (executing program) 2022/11/01 12:49:08 fetching corpus: 6708, signal 256153/295848 (executing program) 2022/11/01 12:49:08 fetching corpus: 6757, signal 256789/296232 (executing program) 2022/11/01 12:49:08 fetching corpus: 6807, signal 257112/296558 (executing program) 2022/11/01 12:49:09 fetching corpus: 6857, signal 257678/296859 (executing program) 2022/11/01 12:49:09 fetching corpus: 6907, signal 258335/297168 (executing program) 2022/11/01 12:49:09 fetching corpus: 6957, signal 258934/297512 (executing program) 2022/11/01 12:49:09 fetching corpus: 7007, signal 259203/297811 (executing program) 2022/11/01 12:49:09 fetching corpus: 7057, signal 259569/298093 (executing program) 2022/11/01 12:49:09 fetching corpus: 7107, signal 260035/298361 (executing program) 2022/11/01 12:49:09 fetching corpus: 7156, signal 260646/298646 (executing program) 2022/11/01 12:49:09 fetching corpus: 7206, signal 261235/298932 (executing program) 2022/11/01 12:49:10 fetching corpus: 7256, signal 261735/299167 (executing program) 2022/11/01 12:49:10 fetching corpus: 7306, signal 262274/299413 (executing program) 2022/11/01 12:49:10 fetching corpus: 7356, signal 263098/299665 (executing program) 2022/11/01 12:49:10 fetching corpus: 7406, signal 263418/299793 (executing program) 2022/11/01 12:49:10 fetching corpus: 7456, signal 263779/299793 (executing program) 2022/11/01 12:49:10 fetching corpus: 7506, signal 264257/299793 (executing program) 2022/11/01 12:49:10 fetching corpus: 7556, signal 264779/299794 (executing program) 2022/11/01 12:49:10 fetching corpus: 7605, signal 265706/299794 (executing program) 2022/11/01 12:49:11 fetching corpus: 7655, signal 266174/299794 (executing program) 2022/11/01 12:49:11 fetching corpus: 7705, signal 266696/299796 (executing program) 2022/11/01 12:49:11 fetching corpus: 7755, signal 267322/299796 (executing program) 2022/11/01 12:49:11 fetching corpus: 7805, signal 267643/299796 (executing program) 2022/11/01 12:49:11 fetching corpus: 7855, signal 268148/299796 (executing program) 2022/11/01 12:49:11 fetching corpus: 7905, signal 268502/299796 (executing program) 2022/11/01 12:49:11 fetching corpus: 7955, signal 269077/299796 (executing program) 2022/11/01 12:49:12 fetching corpus: 8004, signal 269772/299796 (executing program) 2022/11/01 12:49:12 fetching corpus: 8053, signal 270144/299796 (executing program) 2022/11/01 12:49:12 fetching corpus: 8103, signal 270755/299797 (executing program) 2022/11/01 12:49:12 fetching corpus: 8151, signal 271236/299851 (executing program) 2022/11/01 12:49:12 fetching corpus: 8200, signal 271703/299851 (executing program) 2022/11/01 12:49:12 fetching corpus: 8249, signal 272151/299851 (executing program) 2022/11/01 12:49:12 fetching corpus: 8298, signal 272645/299858 (executing program) 2022/11/01 12:49:12 fetching corpus: 8347, signal 273273/299859 (executing program) 2022/11/01 12:49:13 fetching corpus: 8397, signal 273687/299859 (executing program) 2022/11/01 12:49:13 fetching corpus: 8447, signal 274263/299962 (executing program) 2022/11/01 12:49:13 fetching corpus: 8493, signal 274801/299964 (executing program) 2022/11/01 12:49:13 fetching corpus: 8543, signal 275021/299964 (executing program) 2022/11/01 12:49:13 fetching corpus: 8593, signal 275335/300036 (executing program) 2022/11/01 12:49:13 fetching corpus: 8643, signal 275810/300036 (executing program) 2022/11/01 12:49:13 fetching corpus: 8692, signal 276291/300039 (executing program) 2022/11/01 12:49:13 fetching corpus: 8742, signal 276560/300039 (executing program) 2022/11/01 12:49:14 fetching corpus: 8792, signal 276920/300040 (executing program) 2022/11/01 12:49:14 fetching corpus: 8841, signal 277349/300040 (executing program) 2022/11/01 12:49:14 fetching corpus: 8890, signal 277915/300047 (executing program) 2022/11/01 12:49:14 fetching corpus: 8940, signal 278231/300059 (executing program) 2022/11/01 12:49:14 fetching corpus: 8990, signal 278691/300059 (executing program) 2022/11/01 12:49:14 fetching corpus: 9040, signal 278965/300060 (executing program) 2022/11/01 12:49:14 fetching corpus: 9090, signal 279360/300060 (executing program) 2022/11/01 12:49:14 fetching corpus: 9139, signal 279599/300064 (executing program) 2022/11/01 12:49:14 fetching corpus: 9189, signal 280048/300064 (executing program) 2022/11/01 12:49:15 fetching corpus: 9238, signal 280741/300064 (executing program) 2022/11/01 12:49:15 fetching corpus: 9285, signal 281097/300081 (executing program) 2022/11/01 12:49:15 fetching corpus: 9334, signal 281360/300081 (executing program) 2022/11/01 12:49:15 fetching corpus: 9384, signal 281873/300131 (executing program) 2022/11/01 12:49:15 fetching corpus: 9434, signal 282340/300132 (executing program) 2022/11/01 12:49:15 fetching corpus: 9484, signal 282893/300132 (executing program) 2022/11/01 12:49:15 fetching corpus: 9534, signal 283264/300132 (executing program) 2022/11/01 12:49:15 fetching corpus: 9582, signal 283530/300132 (executing program) 2022/11/01 12:49:16 fetching corpus: 9631, signal 284147/300141 (executing program) 2022/11/01 12:49:16 fetching corpus: 9679, signal 284614/300143 (executing program) 2022/11/01 12:49:16 fetching corpus: 9729, signal 284904/300143 (executing program) 2022/11/01 12:49:16 fetching corpus: 9778, signal 285665/300143 (executing program) 2022/11/01 12:49:16 fetching corpus: 9826, signal 286016/300143 (executing program) 2022/11/01 12:49:16 fetching corpus: 9874, signal 286435/300143 (executing program) 2022/11/01 12:49:16 fetching corpus: 9924, signal 286812/300144 (executing program) 2022/11/01 12:49:16 fetching corpus: 9974, signal 287179/300144 (executing program) 2022/11/01 12:49:16 fetching corpus: 10024, signal 287487/300144 (executing program) 2022/11/01 12:49:17 fetching corpus: 10071, signal 287811/300145 (executing program) 2022/11/01 12:49:17 fetching corpus: 10119, signal 288257/300147 (executing program) 2022/11/01 12:49:17 fetching corpus: 10168, signal 288740/300151 (executing program) 2022/11/01 12:49:17 fetching corpus: 10216, signal 289078/300159 (executing program) 2022/11/01 12:49:17 fetching corpus: 10265, signal 289458/300167 (executing program) 2022/11/01 12:49:17 fetching corpus: 10314, signal 289852/300167 (executing program) 2022/11/01 12:49:17 fetching corpus: 10364, signal 290154/300175 (executing program) 2022/11/01 12:49:17 fetching corpus: 10413, signal 290521/300193 (executing program) 2022/11/01 12:49:17 fetching corpus: 10463, signal 290887/300199 (executing program) 2022/11/01 12:49:18 fetching corpus: 10512, signal 291305/300199 (executing program) 2022/11/01 12:49:18 fetching corpus: 10561, signal 291643/300199 (executing program) 2022/11/01 12:49:18 fetching corpus: 10611, signal 291983/300199 (executing program) 2022/11/01 12:49:18 fetching corpus: 10660, signal 292338/300199 (executing program) 2022/11/01 12:49:18 fetching corpus: 10710, signal 292694/300219 (executing program) 2022/11/01 12:49:18 fetching corpus: 10756, signal 292983/300240 (executing program) 2022/11/01 12:49:18 fetching corpus: 10805, signal 293359/300240 (executing program) 2022/11/01 12:49:19 fetching corpus: 10855, signal 293786/300240 (executing program) 2022/11/01 12:49:19 fetching corpus: 10905, signal 294042/300240 (executing program) 2022/11/01 12:49:19 fetching corpus: 10954, signal 294297/300241 (executing program) 2022/11/01 12:49:19 fetching corpus: 10967, signal 294363/300241 (executing program) 2022/11/01 12:49:19 fetching corpus: 10967, signal 294363/300241 (executing program) 2022/11/01 12:49:21 starting 8 fuzzer processes 12:49:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 12:49:21 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:49:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001700)={0x2, 0x4e20, @empty}, 0x10) [ 81.622292] audit: type=1400 audit(1667306961.658:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:49:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000008f40)={0x2, &(0x7f0000008f00)=[{0x45}, {0x6}]}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:49:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x3}}) 12:49:21 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 12:49:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d35", 0xad}], 0x3, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a011043f2ec2cd82b71275b2aad4f99fce01a095307bf59006", 0xffd7fffe}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000009c0), 0x0, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980), 0x0, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x822d2, &(0x7f0000000800)={0x0, 0x2799, 0x0, 0x6, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x5f1) r4 = request_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x400, 0x200, r4) 12:49:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 82.876917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.878922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.880642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.882494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.883938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.884946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.886011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.889017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.890301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.893913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.896717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.941714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.942755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.952182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.954183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.957652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.959102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.960863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.962640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.970013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.973414] Bluetooth: hci1: HCI_REQ-0x0c1a [ 82.975455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.976511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.977679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.981816] Bluetooth: hci0: HCI_REQ-0x0c1a [ 82.981984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.983864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.987691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.988830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.990078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.991046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.992279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.001035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.001089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.004925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.009223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.011830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.013209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.014674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.015772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.021410] Bluetooth: hci2: HCI_REQ-0x0c1a [ 83.023086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.024625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.026176] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.027933] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.028952] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.029880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.031148] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.038389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.039303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.040568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.044524] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.048763] Bluetooth: hci3: HCI_REQ-0x0c1a [ 83.058453] Bluetooth: hci5: HCI_REQ-0x0c1a [ 83.059133] Bluetooth: hci7: HCI_REQ-0x0c1a [ 83.074427] Bluetooth: hci6: HCI_REQ-0x0c1a [ 85.015999] Bluetooth: hci0: command 0x0409 tx timeout [ 85.079660] Bluetooth: hci6: command 0x0409 tx timeout [ 85.079721] Bluetooth: hci7: command 0x0409 tx timeout [ 85.080376] Bluetooth: hci3: command 0x0409 tx timeout [ 85.080940] Bluetooth: hci5: command 0x0409 tx timeout [ 85.081260] Bluetooth: hci1: command 0x0409 tx timeout [ 85.081786] Bluetooth: hci4: command 0x0409 tx timeout [ 85.082224] Bluetooth: hci2: command 0x0409 tx timeout [ 87.064474] Bluetooth: hci0: command 0x041b tx timeout [ 87.127470] Bluetooth: hci4: command 0x041b tx timeout [ 87.128032] Bluetooth: hci1: command 0x041b tx timeout [ 87.128891] Bluetooth: hci5: command 0x041b tx timeout [ 87.129270] Bluetooth: hci3: command 0x041b tx timeout [ 87.129678] Bluetooth: hci7: command 0x041b tx timeout [ 87.130055] Bluetooth: hci6: command 0x041b tx timeout [ 87.130493] Bluetooth: hci2: command 0x041b tx timeout [ 89.112397] Bluetooth: hci0: command 0x040f tx timeout [ 89.176530] Bluetooth: hci2: command 0x040f tx timeout [ 89.176971] Bluetooth: hci6: command 0x040f tx timeout [ 89.177420] Bluetooth: hci7: command 0x040f tx timeout [ 89.177843] Bluetooth: hci3: command 0x040f tx timeout [ 89.178246] Bluetooth: hci5: command 0x040f tx timeout [ 89.178692] Bluetooth: hci1: command 0x040f tx timeout [ 89.179092] Bluetooth: hci4: command 0x040f tx timeout [ 91.160441] Bluetooth: hci0: command 0x0419 tx timeout [ 91.224530] Bluetooth: hci4: command 0x0419 tx timeout [ 91.224925] Bluetooth: hci1: command 0x0419 tx timeout [ 91.225290] Bluetooth: hci5: command 0x0419 tx timeout [ 91.226123] Bluetooth: hci3: command 0x0419 tx timeout [ 91.226500] Bluetooth: hci7: command 0x0419 tx timeout [ 91.226855] Bluetooth: hci6: command 0x0419 tx timeout [ 91.227212] Bluetooth: hci2: command 0x0419 tx timeout [ 135.430961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.431559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.433404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.747098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.747773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.749452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.579294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.580167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.582179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.773428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.774186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.776230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.848744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.849469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.851081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.062122] audit: type=1400 audit(1667307017.098:7): avc: denied { open } for pid=3818 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.063576] audit: type=1400 audit(1667307017.098:8): avc: denied { kernel } for pid=3818 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.142071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.142640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.144746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.163173] syz-executor.5 (3820) used greatest stack depth: 23864 bytes left 12:50:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d35", 0xad}], 0x3, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a011043f2ec2cd82b71275b2aad4f99fce01a095307bf59006", 0xffd7fffe}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000009c0), 0x0, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980), 0x0, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x822d2, &(0x7f0000000800)={0x0, 0x2799, 0x0, 0x6, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x5f1) r4 = request_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x400, 0x200, r4) 12:50:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d35", 0xad}], 0x3, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a011043f2ec2cd82b71275b2aad4f99fce01a095307bf59006", 0xffd7fffe}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000009c0), 0x0, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980), 0x0, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x822d2, &(0x7f0000000800)={0x0, 0x2799, 0x0, 0x6, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x5f1) r4 = request_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x400, 0x200, r4) [ 137.596284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.597001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.598251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.609357] hrtimer: interrupt took 19457 ns 12:50:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d35", 0xad}], 0x3, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a011043f2ec2cd82b71275b2aad4f99fce01a095307bf59006", 0xffd7fffe}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000009c0), 0x0, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980), 0x0, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x822d2, &(0x7f0000000800)={0x0, 0x2799, 0x0, 0x6, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x5f1) r4 = request_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x400, 0x200, r4) [ 137.780108] audit: type=1326 audit(1667307017.816:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3864 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbc51fcb19 code=0x0 [ 137.809238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.810144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.811427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:50:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) fstatfs(r0, &(0x7f0000000080)=""/224) 12:50:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fdatasync(r0) [ 138.136871] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 12:50:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) [ 138.248559] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 138.349385] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. [ 138.434681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.435284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.437167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.498989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.499922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.502034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.615156] audit: type=1326 audit(1667307018.651:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3864 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbc51fcb19 code=0x0 [ 138.776640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.777250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.778872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.904879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.905488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.907022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.949042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.949918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.951787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.015904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.016487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.017842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.052284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.052925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.054931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.082493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.083025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.084539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:50:19 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:50:19 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001700)={0x2, 0x4e20, @empty}, 0x10) 12:50:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 12:50:19 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 12:50:19 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) [ 139.711868] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:19 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) 12:50:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001700)={0x2, 0x4e20, @empty}, 0x10) 12:50:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 12:50:19 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:19 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:19 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:19 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) 12:50:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001700)={0x2, 0x4e20, @empty}, 0x10) 12:50:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) 12:50:20 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 12:50:20 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) 12:50:20 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 12:50:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x6, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x6, 0xffffffffffffff00}, 0x4000, 0x6, 0x2, 0x5, 0x7, 0x80, 0x3c4, 0x0, 0x41, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r1}}, 0xff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40e001, 0x37) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) 12:50:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getrusage(0x0, &(0x7f0000000440)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) 12:50:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001500)={'ip6gre0\x00', 0x0}) 12:50:20 executing program 4: delete_module(&(0x7f0000000000)='\x00', 0x0) 12:50:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 7: syz_io_uring_setup(0x14ae, &(0x7f0000000000)={0x0, 0xd66c, 0x8, 0x0, 0x3c7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(0xffffffffffffffff, 0x9) 12:50:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), 0x5) 12:50:20 executing program 4: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 12:50:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x1e00, 0x0, 0x0, "2fef89006aa5564d3c00"}) 12:50:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801000010000100000000000000000020010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000010000000032000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x138}}, 0x0) [ 140.642760] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:20 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x3, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff0000/0x2000)=nil, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) [ 142.112386] BUG: unable to handle page fault for address: ffffed100fffc000 [ 142.113239] #PF: supervisor write access in kernel mode [ 142.113872] #PF: error_code(0x0002) - not-present page [ 142.114500] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 142.116199] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 142.117684] CPU: 0 PID: 4070 Comm: syz-executor.0 Not tainted 6.1.0-rc3-next-20221101 #1 [ 142.120120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.121390] RIP: 0010:__memset+0x24/0x50 [ 142.121892] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.123915] RSP: 0018:ffff888042b67cc0 EFLAGS: 00010212 [ 142.124551] RAX: 0000000000000000 RBX: ffff88800bff40c0 RCX: 1ffffe21fe600aab [ 142.125356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.126153] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe818 [ 142.126956] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.127750] R13: ffff88800bff40c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 142.128567] FS: 00007f2cd57da700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 142.129472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.130134] CR2: ffffed100fffc000 CR3: 000000001778c000 CR4: 0000000000350ef0 [ 142.130938] Call Trace: [ 142.131242] [ 142.131511] kasan_unpoison+0x23/0x60 [ 142.131962] mempool_exit+0x1c2/0x330 [ 142.132431] bioset_exit+0x2c9/0x630 [ 142.132882] disk_release+0x143/0x490 [ 142.133346] ? disk_release+0x0/0x490 [ 142.133837] ? device_release+0x0/0x250 [ 142.134345] device_release+0xa2/0x250 [ 142.134843] ? device_release+0x0/0x250 [ 142.135346] kobject_put+0x173/0x280 [ 142.135810] put_device+0x1b/0x40 [ 142.136251] put_disk+0x41/0x60 [ 142.136686] loop_control_ioctl+0x4d1/0x630 [ 142.137239] ? loop_control_ioctl+0x0/0x630 [ 142.137786] ? selinux_file_ioctl+0xb1/0x270 [ 142.138346] ? loop_control_ioctl+0x0/0x630 [ 142.138893] __x64_sys_ioctl+0x19a/0x220 [ 142.139418] do_syscall_64+0x3b/0xa0 [ 142.139886] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 142.140533] RIP: 0033:0x7f2cd8264b19 [ 142.141002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.143171] RSP: 002b:00007f2cd57da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.144095] RAX: ffffffffffffffda RBX: 00007f2cd8377f60 RCX: 00007f2cd8264b19 [ 142.144977] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 [ 142.145850] RBP: 00007f2cd82bef6d R08: 0000000000000000 R09: 0000000000000000 [ 142.146680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.147471] R13: 00007ffd4ca26b5f R14: 00007f2cd57da300 R15: 0000000000022000 [ 142.148272] [ 142.148563] Modules linked in: [ 142.148934] CR2: ffffed100fffc000 [ 142.149329] ---[ end trace 0000000000000000 ]--- [ 142.149861] RIP: 0010:__memset+0x24/0x50 [ 142.150347] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.152338] RSP: 0018:ffff888042b67cc0 EFLAGS: 00010212 [ 142.152945] RAX: 0000000000000000 RBX: ffff88800bff40c0 RCX: 1ffffe21fe600aab [ 142.153743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.154532] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe818 [ 142.155331] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.156121] R13: ffff88800bff40c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 142.156919] FS: 00007f2cd57da700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 142.157819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.158473] CR2: ffffed100fffc000 CR3: 000000001778c000 CR4: 0000000000350ef0 [ 142.264992] BUG: unable to handle page fault for address: ffffed100fffc000 [ 142.265467] #PF: supervisor write access in kernel mode [ 142.265803] #PF: error_code(0x0002) - not-present page [ 142.266131] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 142.266559] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI [ 142.266875] CPU: 1 PID: 4079 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 142.267468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.267980] RIP: 0010:__memset+0x24/0x50 [ 142.268257] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.269385] RSP: 0018:ffff88804281fcc0 EFLAGS: 00010212 [ 142.269726] RAX: 0000000000000000 RBX: ffff88800bff4240 RCX: 1ffffe21fe600ab1 [ 142.270175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.270622] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe848 [ 142.271072] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.271522] R13: ffff88800bff4240 R14: ffffffff815f2620 R15: 1ffff110011ad81f [ 142.271971] FS: 00007f2cd5798700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 142.272493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.272860] CR2: ffffed100fffc000 CR3: 000000001778c000 CR4: 0000000000350ee0 [ 142.273306] Call Trace: [ 142.273477] [ 142.273628] kasan_unpoison+0x23/0x60 [ 142.273882] mempool_exit+0x1c2/0x330 [ 142.274138] bioset_exit+0x2c9/0x630 [ 142.274383] ? _raw_spin_unlock+0x24/0x50 [ 142.274667] ? blkg_destroy_all.isra.0+0x157/0x230 [ 142.274993] disk_release+0x143/0x490 [ 142.275247] ? disk_release+0x0/0x490 [ 142.275497] ? device_release+0x0/0x250 [ 142.275755] device_release+0xa2/0x250 [ 142.276008] ? device_release+0x0/0x250 [ 142.276268] kobject_put+0x173/0x280 [ 142.276519] put_device+0x1b/0x40 [ 142.276748] put_disk+0x41/0x60 [ 142.276969] loop_control_ioctl+0x4d1/0x630 [ 142.277253] ? loop_control_ioctl+0x0/0x630 [ 142.277541] ? selinux_file_ioctl+0xb1/0x270 [ 142.277837] ? loop_control_ioctl+0x0/0x630 [ 142.278122] __x64_sys_ioctl+0x19a/0x220 [ 142.278393] do_syscall_64+0x3b/0xa0 [ 142.278643] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 142.278975] RIP: 0033:0x7f2cd8264b19 [ 142.279216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.280339] RSP: 002b:00007f2cd5798188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.280835] RAX: ffffffffffffffda RBX: 00007f2cd83780e0 RCX: 00007f2cd8264b19 [ 142.281280] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000005 [ 142.281738] RBP: 00007f2cd82bef6d R08: 0000000000000000 R09: 0000000000000000 [ 142.282217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.282690] R13: 00007ffd4ca26b5f R14: 00007f2cd5798300 R15: 0000000000022000 [ 142.283170] [ 142.283330] Modules linked in: [ 142.283552] CR2: ffffed100fffc000 [ 142.283785] ---[ end trace 0000000000000000 ]--- [ 142.284098] RIP: 0010:__memset+0x24/0x50 [ 142.284390] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.285578] RSP: 0018:ffff888042b67cc0 EFLAGS: 00010212 [ 142.285931] RAX: 0000000000000000 RBX: ffff88800bff40c0 RCX: 1ffffe21fe600aab [ 142.286406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.286883] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe818 [ 142.287355] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.287829] R13: ffff88800bff40c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 142.288301] FS: 00007f2cd5798700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 142.288847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.289239] CR2: ffffed100fffc000 CR3: 000000001778c000 CR4: 0000000000350ee0 12:50:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="b70ce8fb5a4c316e545238e0ab3072648cb4112885ba6fbb2708b78f54536ca6a32a2225054d327cc4c2bd00ea44091a596882f5ff4e6443d91b21882e117fa45cc66fefc714c933137c647a4e9a43f760ed1e860bbb4bf4f1a89d6508730133f63f35e61b092c182e87cfe26b3c65b895ca63a9f2a325388609d1e077cdf58ef4e97e8c69394755480079c2fc6fcb9e45a884201e077ac6ddfd2e336bee3724adbaa0299c25d6a691623d32424903eb4fc6bc5b4512bdc797f23505d1093bd0c48685f45cacc4c9ce7b76e790da402166b1ab8ac7aa9c"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x10000, 0x10000000) socket$unix(0x1, 0x5, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)) 12:50:22 executing program 3: setreuid(0xffffffffffffffff, 0xee01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 12:50:22 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 12:50:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x1e00, 0x0, 0x0, "2fef89006aa5564d3c00"}) 12:50:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000380)=0xd, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8010000000105"], 0x1b8}}, 0x0) 12:50:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/tcp6\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 12:50:22 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x3, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff0000/0x2000)=nil, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 12:50:22 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801000010000100000000000000000020010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000010000000032000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x138}}, 0x0) [ 142.329378] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.6'. [ 142.349067] loop4: detected capacity change from 0 to 40 [ 142.372578] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.385041] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.466586] BUG: unable to handle page fault for address: ffffed100fffc000 [ 142.467118] #PF: supervisor write access in kernel mode [ 142.467474] #PF: error_code(0x0002) - not-present page [ 142.467824] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 142.468277] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI [ 142.468707] CPU: 1 PID: 4090 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 142.469322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.469871] RIP: 0010:__memset+0x24/0x50 [ 142.470171] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.471358] RSP: 0018:ffff8880191dfcc0 EFLAGS: 00010212 [ 142.471713] RAX: 0000000000000000 RBX: ffff88800bff43c0 RCX: 1ffffe21fe600ab7 [ 142.472185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.472667] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe878 [ 142.473139] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.473614] R13: ffff88800bff43c0 R14: ffffffff815f2620 R15: 1ffff110011af81f [ 142.474123] FS: 00007f2cd57da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 142.474683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.475088] CR2: ffffed100fffc000 CR3: 000000001e396000 CR4: 0000000000350ee0 [ 142.475561] Call Trace: [ 142.475738] [ 142.475903] kasan_unpoison+0x23/0x60 [ 142.476170] mempool_exit+0x1c2/0x330 [ 142.476450] bioset_exit+0x2c9/0x630 [ 142.476713] disk_release+0x143/0x490 [ 142.476993] ? disk_release+0x0/0x490 [ 142.477276] ? device_release+0x0/0x250 [ 142.477589] device_release+0xa2/0x250 [ 142.477898] ? device_release+0x0/0x250 [ 142.478210] kobject_put+0x173/0x280 [ 142.478512] put_device+0x1b/0x40 [ 142.478785] put_disk+0x41/0x60 [ 142.479050] loop_control_ioctl+0x4d1/0x630 [ 142.479395] ? loop_control_ioctl+0x0/0x630 [ 142.479717] ? selinux_file_ioctl+0xb1/0x270 [ 142.480069] ? loop_control_ioctl+0x0/0x630 [ 142.480398] __x64_sys_ioctl+0x19a/0x220 [ 142.480726] do_syscall_64+0x3b/0xa0 [ 142.481022] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 142.481412] RIP: 0033:0x7f2cd8264b19 [ 142.481696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.483039] RSP: 002b:00007f2cd57da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.483611] RAX: ffffffffffffffda RBX: 00007f2cd8377f60 RCX: 00007f2cd8264b19 [ 142.484129] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005 [ 142.484656] RBP: 00007f2cd82bef6d R08: 0000000000000000 R09: 0000000000000000 [ 142.485188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.485712] R13: 00007ffd4ca26b5f R14: 00007f2cd57da300 R15: 0000000000022000 [ 142.486260] [ 142.486439] Modules linked in: [ 142.486693] CR2: ffffed100fffc000 [ 142.486959] ---[ end trace 0000000000000000 ]--- [ 142.487329] RIP: 0010:__memset+0x24/0x50 [ 142.487659] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 142.488920] RSP: 0018:ffff888042b67cc0 EFLAGS: 00010212 [ 142.489328] RAX: 0000000000000000 RBX: ffff88800bff40c0 RCX: 1ffffe21fe600aab [ 142.489868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 142.490412] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe818 [ 142.490951] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 142.491482] R13: ffff88800bff40c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 142.492030] FS: 00007f2cd57da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 142.492641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.493103] CR2: ffffed100fffc000 CR3: 000000001e396000 CR4: 0000000000350ee0 [ 142.879751] syz-executor.4: attempt to access beyond end of device [ 142.879751] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 142.881600] Buffer I/O error on dev loop4, logical block 10, lost async page write 12:50:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801000010000100000000000000000020010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000010000000032000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x138}}, 0x0) 12:50:23 executing program 5: perf_event_open(0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:50:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=tcp,', {}, 0x2c, {[{@dfltuid}, {@privport}]}}) 12:50:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:50:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x1e00, 0x0, 0x0, "2fef89006aa5564d3c00"}) 12:50:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}, 0x22}]}) 12:50:23 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x3, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff0000/0x2000)=nil, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 12:50:23 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 143.275082] tmpfs: Bad value for 'mpol' [ 143.276872] loop4: detected capacity change from 0 to 40 [ 143.279276] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.6'. [ 143.279883] 9pnet_fd: p9_fd_create_tcp (4115): problem connecting socket to 127.0.0.1 [ 143.282884] tmpfs: Bad value for 'mpol' [ 143.308940] 9pnet_fd: p9_fd_create_tcp (4123): problem connecting socket to 127.0.0.1 12:50:23 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 12:50:23 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5330, 0x0) 12:50:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:50:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801000010000100000000000000000020010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000010000000032000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x138}}, 0x0) 12:50:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x1e00, 0x0, 0x0, "2fef89006aa5564d3c00"}) 12:50:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=tcp,', {}, 0x2c, {[{@dfltuid}, {@privport}]}}) [ 143.427495] loop5: detected capacity change from 0 to 40 [ 143.456120] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.6'. [ 143.478714] syz-executor.4: attempt to access beyond end of device [ 143.478714] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 143.480266] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 143.533916] 9pnet_fd: p9_fd_create_tcp (4138): problem connecting socket to 127.0.0.1 12:50:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:50:23 executing program 2: clock_gettime(0x4, &(0x7f00000046c0)) 12:50:23 executing program 6: openat$cdrom(0xffffffffffffff9c, &(0x7f0000001d40), 0x40880, 0x0) 12:50:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=tcp,', {}, 0x2c, {[{@dfltuid}, {@privport}]}}) 12:50:23 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x3, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff0000/0x2000)=nil, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) [ 143.802081] 9pnet_fd: p9_fd_create_tcp (4149): problem connecting socket to 127.0.0.1 [ 146.015686] syz-executor.5: attempt to access beyond end of device [ 146.015686] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 146.017602] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 148.377775] BUG: unable to handle page fault for address: ffffed100fffc000 [ 148.378572] #PF: supervisor write access in kernel mode [ 148.379130] #PF: error_code(0x0002) - not-present page [ 148.379693] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 148.380452] Oops: 0002 [#4] PREEMPT SMP KASAN NOPTI [ 148.380996] CPU: 1 PID: 4148 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 148.382005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.382893] RIP: 0010:__memset+0x24/0x50 [ 148.383377] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 148.385294] RSP: 0018:ffff88801e97fcc0 EFLAGS: 00010212 [ 148.385879] RAX: 0000000000000000 RBX: ffff88800bff4540 RCX: 1ffffe21fe600abd [ 148.386643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 148.387412] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe8a8 [ 148.388167] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 148.388930] R13: ffff88800bff4540 R14: ffffffff815f2620 R15: 1ffff110011af01f [ 148.389685] FS: 00007f2cd57da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 148.390540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.391151] CR2: ffffed100fffc000 CR3: 0000000019bde000 CR4: 0000000000350ee0 [ 148.391906] Call Trace: [ 148.392194] [ 148.392491] kasan_unpoison+0x23/0x60 [ 148.392919] mempool_exit+0x1c2/0x330 [ 148.393357] bioset_exit+0x2c9/0x630 [ 148.393792] disk_release+0x143/0x490 [ 148.394216] ? disk_release+0x0/0x490 [ 148.394649] ? device_release+0x0/0x250 [ 148.395087] device_release+0xa2/0x250 [ 148.395536] ? device_release+0x0/0x250 [ 148.395972] kobject_put+0x173/0x280 [ 148.396437] put_device+0x1b/0x40 [ 148.396851] put_disk+0x41/0x60 [ 148.397249] loop_control_ioctl+0x4d1/0x630 [ 148.397759] ? loop_control_ioctl+0x0/0x630 [ 148.398236] ? selinux_file_ioctl+0xb1/0x270 [ 148.398746] ? loop_control_ioctl+0x0/0x630 [ 148.399221] __x64_sys_ioctl+0x19a/0x220 [ 148.399687] do_syscall_64+0x3b/0xa0 [ 148.400129] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 148.400758] RIP: 0033:0x7f2cd8264b19 [ 148.401194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.403261] RSP: 002b:00007f2cd57da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.404136] RAX: ffffffffffffffda RBX: 00007f2cd8377f60 RCX: 00007f2cd8264b19 [ 148.404960] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000005 [ 148.405781] RBP: 00007f2cd82bef6d R08: 0000000000000000 R09: 0000000000000000 [ 148.406596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.407438] R13: 00007ffd4ca26b5f R14: 00007f2cd57da300 R15: 0000000000022000 [ 148.408276] [ 148.408583] Modules linked in: [ 148.408971] CR2: ffffed100fffc000 [ 148.409385] ---[ end trace 0000000000000000 ]--- [ 148.409929] RIP: 0010:__memset+0x24/0x50 [ 148.410436] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 148.412516] RSP: 0018:ffff888042b67cc0 EFLAGS: 00010212 [ 148.413121] RAX: 0000000000000000 RBX: ffff88800bff40c0 RCX: 1ffffe21fe600aab [ 148.413933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 148.414745] RBP: ffff88800c016a00 R08: 0000000000000005 R09: ffffed10017fe818 [ 148.415561] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c016a00 [ 148.416379] R13: ffff88800bff40c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 148.417195] FS: 00007f2cd57da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 148.418128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.418810] CR2: ffffed100fffc000 CR3: 0000000019bde000 CR4: 0000000000350ee0 [ 148.504223] loop4: detected capacity change from 0 to 40 12:50:28 executing program 2: clock_gettime(0x4, &(0x7f00000046c0)) 12:50:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 12:50:28 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 12:50:28 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 12:50:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) 12:50:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=tcp,', {}, 0x2c, {[{@dfltuid}, {@privport}]}}) 12:50:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000200)=""/94, 0x5e}], 0x2) [ 148.547962] audit: type=1400 audit(1667307028.584:11): avc: denied { read } for pid=4159 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 148.557591] loop5: detected capacity change from 0 to 40 [ 148.570026] 9pnet_fd: p9_fd_create_tcp (4166): problem connecting socket to 127.0.0.1 perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:50:28 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$ptp(r0, &(0x7f0000000180)=""/173, 0xad) 12:50:28 executing program 2: clock_gettime(0x4, &(0x7f00000046c0)) 12:50:28 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x5, 0x10, 0x0) 12:50:28 executing program 2: clock_gettime(0x4, &(0x7f00000046c0)) 12:50:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 12:50:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) [ 148.827948] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 148.880702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:50:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) 12:50:28 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3743, &(0x7f0000000700)={0x0, 0x5740, 0x10, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() r2 = syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) ftruncate(r4, 0xfffffffffffffff7) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) finit_module(r0, 0x0, 0x0) [ 148.916015] syz-executor.7 (4160) used greatest stack depth: 22680 bytes left [ 148.970952] syz-executor.5: attempt to access beyond end of device [ 148.970952] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 148.972233] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 149.018166] syz-executor.4: attempt to access beyond end of device [ 149.018166] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 149.019323] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 149.220241] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 149.221572] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 149.222660] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 149.223566] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 149.224585] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 12:50:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2d53a4ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0xd000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)="bedcc1df281fd63d64ef45214a2151fed81d07a1e445c64adf7f352195c27564237bd025a7e4b043a2d57cf04e661516d73d9423b06e9ace607ba8754f49817b0b15b1a6a114caec173f12e7bc45133f5c613f75c193f9fe25ce5967876ce53e2d61bbe479ec5156fbe09ff94a5eef955ac01811bac72793273844a71a8c2171ce878f48d4a691f2d33f1712dbe1256996dc65ad839754fff74edcefc0da149816c175764c57f145820eaedaf2ddf4bd96096347251663e65686d684a596922c13c6ff79ef63252e4cb93b20c4a4d9be22e0fedbfcbf53da26f04b3a7eb781f1d120e477d94ccfd739cb1046f6f42787", 0xf0, r3}, 0x68) openat(r3, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 12:50:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="601100001500000225bd7000fedbdf250a07c9000100eb79b9a20ae4cc343a17141bba32dfd01afa7d74cc08d720766a41f3cb4f81ba36645c350d5e1f3a588f8812877e82da62e452e829fdeeb80f97373235b17226a45fcfa6c200d7f593af16b024e48df86b8974425ee2c9838517ead7af992eb779726d80a32a238562cee367c33f4ed427b76222276eee42688848ca552b4e336953135c4c15cf06195ddfe042775107c6365e018f66992ccb593bdb59e6e8de0bf6343c7b976d6f906f5a9f5472a452158078998ac087184b4ba6dc014d4f56d96fbe51bc0000004a0001001c0f922c1a7f67fc424c2157d351b0dea37f10a2e03ad735ddeec2dd90cbb9ee930ba7ab181446d220d45a5e4b48441f8d6fd4718656535d8ef783f8da22a30cef846310a7cc00002d000100f0ba692721c03e89ad685327376ff7d6d0b958af4218b596578c0133d94fb64c339b50655d78234f85000000041001008f33a1f76d60ba957e99dbdda801ca4a3b7a958e6e620b037607151fe6a8b095111b9635852304db0e51312ab1fcf26f211cfc6ba576842cc8504365e16ba07955659ea77f4048c7cf423f4699ab763021fa8ff6ab437410c374a7fbe9ca8218a820bb14636b3a6aa1f46561496af1560e650bdf815a3f390efebb2c83502989dd4a82eb1c62d57b63d588874902666e0f1ba96a644e0d85ac67395a57f521d4ead404ea9c14990f1c430221ad04a2bae6a60628f67b86d5d5360979a54476168f8c0950b94302232edca9b8eabbeca2b66be5eecf89e9e3df413d9c7a363b40493b4c1976941fbf2b61cd96da1da1cc02b55bb46ed90065c65726a0800c2176ed279c41a47869fe71c3600b24597ef31953994135437fcd5b6a13957fb3e6967f7591a9a92895ead391029393b2b188b68886d7285173869544b58d5fbe5a11a97aac857d2df506062b35964e0b698e3164fcd6dab4f1bbed74a20eed5bac4e26b5aaa6a6cf2801082ffd1c3d48ac4c9b2e38a5eb130468211a67d2e1ed9415db7033ef4745998d0e36b51e4eabbe17cc46d3cab5728d23afcd289ce3951736752878884ba6c55f8c739d985be65cbb01b52d40c6f5fa82ed2839365e299c1029761660c84aee2a27ebb681123004fe2fdad7af2dba905279084b6809a6e424c34b882c0bde1c16fd5fa839dfc65892149bec2abcf5a5c1a065380273c9df7f5cce6f49477a81ac7eda9df8c1546780c1366cbcce134dda84c716be9a1bdd77cd3bf7a631b9a78f7427fef7d1fa6a0f8739dfb8ca69661f983be429ca03aa87586fe1351941070ade2145e967af75a74545cb12e2f551458ba77eeedc8e1ff8c2d35c6a36944a7055c9514b10b7a5e7c8bb431909b2d39f091e4ee4c5eeddbe683163bec9f0ee12ba534418ced35cb631d8dcd966cb7161de529c9789ef24137c6bed520afd3a5d66ee13c1485ac63931051f23ccbfb789d4346e8762defe04dcbcca90ab005f9c76538a83a0507faa75355698bb0784fc28e3173ad13cb9e149b1c6f4110236f427028f956a7015f4406db5ec7a1964c97d37baff2f019b42661885883e5605c205a287e6061683c52662f665c5cd4f56e28754433d376bf60cca862500d1377bb62e7f017a86be93e2b32ac6301b9d86d1b2c4792e0d3bb44bd352554dea29918065d2bf466ccfac3cb423500f1aa7cd6204c2c6f6882562cfe1866f8a4bf4c208ecb3a2485b81394c5b1592aeb561a5da685ed1fff64e255d5964ec419f9ca6300bb1e29676779447ee098b0f3d77845770e0a4d629e50630de5d59075bd2788c14e8eaa3f27e56777942c806fcb927d109fd001cf4a9edeedbacc6f3f5c1c0b8d250accf0e2b9a321462b5a3b06981b6dd256b7034655b1aa9249ddd54959232de0166e58f5386281c7b7b679f25e5c14f9f732b82a68b1cb8f600934079f03c1bcf15e68bbc9cf894594b7d39d8f3ea3fd8e50fa226ac3c3dc3bfb0b3f876429909667341369ad1e47ab3e09124b183029689a85fab82de6be036a54c329be579eca34086a04f4f37fe0f4bf2abc9f7b967468826eb2c7aabfd6bca90c725a8fffd831b5d08e6983b9e5582d72578891faa4dbe25d24f754302464b5545d6cdd95f30cb6a05d65e3c122f56a8be35e215347be640fdcf04282423cd164755a69d5a47534cd02a4cfbf0404f58a05e1f0b02c578c2eb4029d4e4785c516c0ef122540db8c2dc71a831f4b578c794cade07b6159badcd94cc95d22ba692c323d4fbf6f33fcdea9734f7838a694eb574e5cf768a560aa2d0f2156e8679a1fc8cd3d510e7cef1bbd7903cdcc2c04aca4d25aba331f4e5909859c224054bddd54f4674c279368e4d9ce293d57fc734b0205959d4dba22d237f4c97d98bb616854bb4139701f9bd53ebf094585b4f0a16b0d2a0791ba4dcc90768d4bf3c6650b4b16b7e9f6e5c0bec128f7110c33919e7aaadfc433abb865315b11f619e27b953dca6092025d37db9b5039f0a3262e8db168992538e3d061e51aab1925f197f393f9ab5d47be8b5ed39842879343e74e4a95a686350d079ae9f0cd26b7b8b431ba94ad2ae4a20fafc379c3e66922ebef747764ff3540307e739cb0d1d3655146dc5d58fea4c8b12421483d621e1691d161a93b5a0cd1d25d41b7592508ae63bc74288cdb9197cd4601a4934de758232c9ce95d1d62ddc77dea9b33c02d0b8810a831f75577340207fc2acbb78c8b5b45f8c2d6be033ad9bea68450630b2d35cc7e3ff5ac0b96af6b44b9cc712412bdbfc479b5387c2839f4870a4e695eb9bc9fb53cca1b660a76079c29bc1203d763f439ff04463ae1183b8284f5330c176318f2943b763b67cf22124fa2bd3422f4b6ad7df3c92c8847f009820e3d5b07f9484c19075359314dd566e88a8c1dd51c54931f802fb5ca2d4e268e5829343c405998da958ec7eadd95f47dbab28ed52b1bca5c8f5206d70f349717b9e85b2e77495c420d67fbfbe09de4576dd3c74de134a50da0a0bd08d88e2463da7f9eef8b172bcb7edfdf319ed50201766d2a0e28799e74e8b9331dc671589ef2dad3ac6ef40baf1eade8fefb8e887daa7f27a974c4be98ad58bf2200db44c587ee71e5a78d83488235f200198331e5fc8919a0189d1acb275e516c30dc6a6610a4e8ce22868cf1cac3b55b43e77d9ac81a95536661620fe6fd2aa4537f9d284c0c66c1b4b8e8a14b3be9a3d5e1f9abc24d2f7f52752e983189206e39f716dbbd4b78958b4971eea773d8b86d76bf02c783e25ba954556610a91da6fdee4be4348e5272e0676b5af987158688ee671d9f645cd5cacaf4789ec93a70501ee11673d4950a7a68e63aee91af4eb29a84c1086d1e89bc37f6e567364bdc6dc5a88f7083d56f31853e405ae86f3857ac2666eb7db3862dc5acd251b3ecd6cc88c5df382e15ee4fe30e4b9fcd6b32cd89fb1c856c0dcf9bd36b70ae43ee296d6f2b494f8dd478f0511217975221605632237227a60513b70936ce928f17c45d5b4a9b0af5378d5c8cb5a7a6b8f62eb242810da3f80d1beabf6fda1f2d917cc93e72a15ae5161d641e9369556e213cbc5faa58efd887c217ad8bbf5f4e66c3627c765a1edd6a554bd0a524344d1fdfc97eb0e35ce15e26555fb3272713ac12bcf4810d6c164daeeb5e811f7176a393be8a07f7f63865b6671a567f9134782db20b735c50ab7bcfeecd6f3feeda30f992625e93c3a7f789b127d6d9f40b19e73ebc1c830e636517d1f841c938c07799a1c4be331b9e58e1c3c494ce7010b28c868e2a7e802faa03dfc6904261199eba7cc1068081b70340fa0a3f8d9d96a46a6754a1a504e08a7508e82568d8aa4fcec741c6891d16cbc5bd955eb2c8445af9fe7a960df1c685802ae2d4b5ae71c0a6996f5cb0f825035ff6faf19e50d9d6bca00ae173d877a47c1ff66e7e77f81c9d0b51bc2d20829e9ae222a740c204903217f115323761be2f5f9ae60df5515e7046946262e3387d72f2569bcc8285b950bc33d4c18845bf70bcd2418deadc6eeffa2a9f4917f179b4004d6e781cac2af7034bb253f46cfa1a7f5fbb91ab8ad84e1fbbb735a9801ade351d55a0b91f386af0b94e1bdf4c3d82d333068e4ddcc3876dfdbee416e0bf1e6c275e626256776577edb8e2c16e0139593f2f8e4585973b7aedabc9e2ecf574ded44f3f1b9b99eec95de77a5516c17da9e0351e1f3ce55704ec25ba12136a46adcadd9caf2476bd947fd1470cf2760d4afbe5b9ab278cb2a624d1817bb54cb355d7c526698b588d3f6f3e94ef1e134342f536916bbc1c94469b2766efd637305f7b770cc2562189fc269afbab04fb8eebf44a4e92e374e6643b734cd83c7575388659888d1d15bbdb912f6d681ab5da0fa7fe428578b46ba33d3188c99551aa301cac60ab8c59382e7ccbea3e3e1eddd2a3b6b3d64dd8d756bd94a22c8c2f01c7fb1f1ae0024e3aca8615c60313e556aeda3199edd8ef01e9b1ac9b0d2d7282d2965a3d91e9ff708beefb2b0a649f9a7cfd46dfe915ea25ff8fe5bf1b27147853afaeb0c2cdb35946ee49fc655eace4323e142e094c953c5127e1bb224ca0829570ba392939241403117f241d872b3c3eff94166d16be188242a2ecd565e449d1dfba55da5db40330d0a361a125c92c89f61a26300845c55e35efb04bf25f0d5d7282d438002673f8e8402c576a5b402874e44fa71224e8dbc2afb80276cab9244ab70282fded63510a4965035dcc90680d4c07fa4dc3bf1b384227926b7aacd4f1465f1c6c25547684b119f06e0161909e9b2468c8195489da99ec6cccd8f10089f478c8667fe0d86befdc03eabb7eacadf9146c3e8284cf2ce908fe8096d7bd4aa6b42f97399b35ce8334e0bcae2f652414350a00d9e99b1b38132c7418afe7db75537c141cfd71b1e3ea1c154193d81f414a3b9b1bc314fe13e37c702cd1f197dedd3d41b795f5af43c0f75fcf83b5abff0815ecc09211c2059614cc9597639d52066cd48c36063b35744ae6af3d78f16e0feb61992ef0ec9a864ea69a97f0c93535b1c9e70f1335b044d71d6008ed9290a2111d672b601e92524fb1b0f91b061193741dcfc958ad09bcaa888405a50a04622a1fa09398228bb51a401112782d33a58342daf32e49cd3135a5becda21b82b21b29006bef9dfb90f037ae50ed079b5d8a8a42057b24d644e1685bb4f54ac8876c4d5ce42c4ba8b818796fe4050626862181ea6e15fe9a5123a45a967fbb8d3c3cd402dcd867574cca3256de3c0184cfc153490866570566513b51fb439e9f4b9154eb63ab065400664b27098ee73a215c89d5e6592ac426f751d6dbbc3321ccb62c43a147924a40ee69e2921a0fd990f2156d5c811cfd000aa4671294aa6d4b1c470a8bb5fbea40ab6f6ef2ed17b230cd9ecae00d3ad90fd4eb8adcd614f73e725706483704f0d28187900589a7dbb9db45317a4cef42bfd96afdffe8af1c7eaa2236420c0b99ef228ec255e56f6fdebfee22e1643b843cead36c9b18824363add91839391e0a192394b31c3024efbac231acf9542fba430b4b87d6d5c157326faf731dd82adce8cbac11700fbc4d4b8559b0adee65a0bc15d519c7f1410e20d3e530f59668163cbcae512f87c60a999852288961898147badba3f76cd725ed87dab7c2d3004372332a2c5275381767b21135c3df9ae257fd814db366e833460fdf0ea5034223b2a79e39941662f75163efb7896fcac72b0d8c8947c63e44e3a1dbfef867c920197423544eee09fde95f39447c3d99d60665ecf337122e61fdcbe961dfee212e558001cd8c64b4e2248039ecfbe77ad5e832510b45b188bff1a6abd7434c4275678c7f02618d4aa5795336583c7d317fe4c5c1cc4b47536f4b40590d13cdfeb1c2e3757b6d544dc8053d94d83b7ee952d126939da0bec0c6f0c8296d0d17e681fa04bc4492dce754cb502f68dbcad1e787614fb1c67a141e776b25ed48d07a2acb0c26f781e524f69173aee86f4f53a95bd27b6bf33b1a7825c2a8ce18175d2a718f592c810f0824a067d9d022e7b94534ea8eef219d3dcf73a50ef5620f8842fad15b05ced9ee0e2d285a4d24a3ad934766f224a94f939f242576cc8ff0b717815d645ac5594afe0646ead4655f7d2f8154c61e97ed8d559f3e4a9cef8291aa4c518cf6821e4c5fbe77a1cfbafaa24825b756dd79bf96719840d3db348e21cbb45224f315559b19b20703f868503942801be391a70bfa95c1c06db21e2867822b4424c4a952f9843cea0b491a5ea70e90000591f378a93d04d714e8d3ea4e5c041d96acace9eb30df772581f6e4b7802cee79bc5e0ddf0b6b363787111420b6ac94fc78acb2578916724402fc46fcf6f35fba2c47c53c7a60dddef434c7bf7ee6c651eb0dbfcd112c48a6829c31068d0364235aee6875143cfb92446f2513c"], 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000200)=""/94, 0x5e}], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:50:29 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 12:50:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) 12:50:29 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) openat(r0, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000340)='./file0\x00', 0x80000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 149.281819] loop5: detected capacity change from 0 to 40 [ 149.283051] loop4: detected capacity change from 0 to 40 12:50:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) 12:50:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3743, &(0x7f0000000700)={0x0, 0x5740, 0x10, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() r2 = syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) ftruncate(r4, 0xfffffffffffffff7) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) finit_module(r0, 0x0, 0x0) 12:50:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) [ 149.387359] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:50:29 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 149.436625] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 149.437920] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 149.438859] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 149.439754] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 149.440771] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 149.446823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.447234] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.447822] Buffer I/O error on dev sr0, logical block 0, async page read 12:50:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000200)=""/94, 0x5e}], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:50:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) [ 149.455686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.456082] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.456858] Buffer I/O error on dev sr0, logical block 1, async page read [ 149.461752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.462135] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.462725] Buffer I/O error on dev sr0, logical block 2, async page read [ 149.468916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.469281] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.469842] Buffer I/O error on dev sr0, logical block 3, async page read [ 149.472624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.473002] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.473570] Buffer I/O error on dev sr0, logical block 4, async page read [ 149.475299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.475672] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.476235] Buffer I/O error on dev sr0, logical block 5, async page read [ 149.477986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.478358] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.478903] Buffer I/O error on dev sr0, logical block 6, async page read [ 149.481714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 149.482077] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.482690] Buffer I/O error on dev sr0, logical block 7, async page read 12:50:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) [ 149.539635] syz-executor.4: attempt to access beyond end of device [ 149.539635] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 149.798248] audit: type=1400 audit(1667307029.834:12): avc: denied { write } for pid=4211 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:50:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3743, &(0x7f0000000700)={0x0, 0x5740, 0x10, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() r2 = syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) ftruncate(r4, 0xfffffffffffffff7) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) finit_module(r0, 0x0, 0x0) 12:50:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2d53a4ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0xd000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)="bedcc1df281fd63d64ef45214a2151fed81d07a1e445c64adf7f352195c27564237bd025a7e4b043a2d57cf04e661516d73d9423b06e9ace607ba8754f49817b0b15b1a6a114caec173f12e7bc45133f5c613f75c193f9fe25ce5967876ce53e2d61bbe479ec5156fbe09ff94a5eef955ac01811bac72793273844a71a8c2171ce878f48d4a691f2d33f1712dbe1256996dc65ad839754fff74edcefc0da149816c175764c57f145820eaedaf2ddf4bd96096347251663e65686d684a596922c13c6ff79ef63252e4cb93b20c4a4d9be22e0fedbfcbf53da26f04b3a7eb781f1d120e477d94ccfd739cb1046f6f42787", 0xf0, r3}, 0x68) openat(r3, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 12:50:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) 12:50:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000003880)=[{{&(0x7f0000000000)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/212}, {&(0x7f0000003800)=""/23}, {&(0x7f0000000700)=""/4096}, {&(0x7f0000000200)=""/19}, {&(0x7f0000001700)=""/4096}]}}, {{&(0x7f00000002c0), 0x0, &(0x7f0000003780)=[{&(0x7f0000000440)=""/247}, {&(0x7f0000000340)=""/127}, {&(0x7f0000002700)=""/4096}, {&(0x7f0000000540)=""/130}, {&(0x7f0000000600)=""/56}, {&(0x7f0000000640)=""/79}, {&(0x7f0000003700)=""/108}], 0x0, &(0x7f0000003900)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}], 0x2, 0x0, 0x0) 12:50:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r0, 0xbb, 0x0) close(r0) syz_read_part_table(0x0, 0x0, 0x0) 12:50:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001000)={[{@fat=@nfs}, {@utf8}]}) 12:50:29 executing program 5: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff4000/0x2000)=nil) 12:50:29 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000015c0)={0x0, r1+10000000}, 0x0, 0x0) 12:50:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3743, &(0x7f0000000700)={0x0, 0x5740, 0x10, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() r2 = syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) ftruncate(r4, 0xfffffffffffffff7) close(r3) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) finit_module(r0, 0x0, 0x0) 12:50:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xe000, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 12:50:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 12:50:30 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:30 executing program 6: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 150.045939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.050818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.068769] random: crng reseeded on system resumption [ 150.093394] random: crng reseeded on system resumption [ 150.242721] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.568260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.570467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:50:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2d53a4ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0xd000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)="bedcc1df281fd63d64ef45214a2151fed81d07a1e445c64adf7f352195c27564237bd025a7e4b043a2d57cf04e661516d73d9423b06e9ace607ba8754f49817b0b15b1a6a114caec173f12e7bc45133f5c613f75c193f9fe25ce5967876ce53e2d61bbe479ec5156fbe09ff94a5eef955ac01811bac72793273844a71a8c2171ce878f48d4a691f2d33f1712dbe1256996dc65ad839754fff74edcefc0da149816c175764c57f145820eaedaf2ddf4bd96096347251663e65686d684a596922c13c6ff79ef63252e4cb93b20c4a4d9be22e0fedbfcbf53da26f04b3a7eb781f1d120e477d94ccfd739cb1046f6f42787", 0xf0, r3}, 0x68) openat(r3, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 12:50:30 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="601100001500000225bd7000fedbdf250a07c9000100eb79b9a20ae4cc343a17141bba32dfd01afa7d74cc08d720766a41f3cb4f81ba36645c350d5e1f3a588f8812877e82da62e452e829fdeeb80f97373235b17226a45fcfa6c200d7f593af16b024e48df86b8974425ee2c9838517ead7af992eb779726d80a32a238562cee367c33f4ed427b76222276eee42688848ca552b4e336953135c4c15cf06195ddfe042775107c6365e018f66992ccb593bdb59e6e8de0bf6343c7b976d6f906f5a9f5472a452158078998ac087184b4ba6dc014d4f56d96fbe51bc0000004a0001001c0f922c1a7f67fc424c2157d351b0dea37f10a2e03ad735ddeec2dd90cbb9ee930ba7ab181446d220d45a5e4b48441f8d6fd4718656535d8ef783f8da22a30cef846310a7cc00002d000100f0ba692721c03e89ad685327376ff7d6d0b958af4218b596578c0133d94fb64c339b50655d78234f85000000041001008f33a1f76d60ba957e99dbdda801ca4a3b7a958e6e620b037607151fe6a8b095111b9635852304db0e51312ab1fcf26f211cfc6ba576842cc8504365e16ba07955659ea77f4048c7cf423f4699ab763021fa8ff6ab437410c374a7fbe9ca8218a820bb14636b3a6aa1f46561496af1560e650bdf815a3f390efebb2c83502989dd4a82eb1c62d57b63d588874902666e0f1ba96a644e0d85ac67395a57f521d4ead404ea9c14990f1c430221ad04a2bae6a60628f67b86d5d5360979a54476168f8c0950b94302232edca9b8eabbeca2b66be5eecf89e9e3df413d9c7a363b40493b4c1976941fbf2b61cd96da1da1cc02b55bb46ed90065c65726a0800c2176ed279c41a47869fe71c3600b24597ef31953994135437fcd5b6a13957fb3e6967f7591a9a92895ead391029393b2b188b68886d7285173869544b58d5fbe5a11a97aac857d2df506062b35964e0b698e3164fcd6dab4f1bbed74a20eed5bac4e26b5aaa6a6cf2801082ffd1c3d48ac4c9b2e38a5eb130468211a67d2e1ed9415db7033ef4745998d0e36b51e4eabbe17cc46d3cab5728d23afcd289ce3951736752878884ba6c55f8c739d985be65cbb01b52d40c6f5fa82ed2839365e299c1029761660c84aee2a27ebb681123004fe2fdad7af2dba905279084b6809a6e424c34b882c0bde1c16fd5fa839dfc65892149bec2abcf5a5c1a065380273c9df7f5cce6f49477a81ac7eda9df8c1546780c1366cbcce134dda84c716be9a1bdd77cd3bf7a631b9a78f7427fef7d1fa6a0f8739dfb8ca69661f983be429ca03aa87586fe1351941070ade2145e967af75a74545cb12e2f551458ba77eeedc8e1ff8c2d35c6a36944a7055c9514b10b7a5e7c8bb431909b2d39f091e4ee4c5eeddbe683163bec9f0ee12ba534418ced35cb631d8dcd966cb7161de529c9789ef24137c6bed520afd3a5d66ee13c1485ac63931051f23ccbfb789d4346e8762defe04dcbcca90ab005f9c76538a83a0507faa75355698bb0784fc28e3173ad13cb9e149b1c6f4110236f427028f956a7015f4406db5ec7a1964c97d37baff2f019b42661885883e5605c205a287e6061683c52662f665c5cd4f56e28754433d376bf60cca862500d1377bb62e7f017a86be93e2b32ac6301b9d86d1b2c4792e0d3bb44bd352554dea29918065d2bf466ccfac3cb423500f1aa7cd6204c2c6f6882562cfe1866f8a4bf4c208ecb3a2485b81394c5b1592aeb561a5da685ed1fff64e255d5964ec419f9ca6300bb1e29676779447ee098b0f3d77845770e0a4d629e50630de5d59075bd2788c14e8eaa3f27e56777942c806fcb927d109fd001cf4a9edeedbacc6f3f5c1c0b8d250accf0e2b9a321462b5a3b06981b6dd256b7034655b1aa9249ddd54959232de0166e58f5386281c7b7b679f25e5c14f9f732b82a68b1cb8f600934079f03c1bcf15e68bbc9cf894594b7d39d8f3ea3fd8e50fa226ac3c3dc3bfb0b3f876429909667341369ad1e47ab3e09124b183029689a85fab82de6be036a54c329be579eca34086a04f4f37fe0f4bf2abc9f7b967468826eb2c7aabfd6bca90c725a8fffd831b5d08e6983b9e5582d72578891faa4dbe25d24f754302464b5545d6cdd95f30cb6a05d65e3c122f56a8be35e215347be640fdcf04282423cd164755a69d5a47534cd02a4cfbf0404f58a05e1f0b02c578c2eb4029d4e4785c516c0ef122540db8c2dc71a831f4b578c794cade07b6159badcd94cc95d22ba692c323d4fbf6f33fcdea9734f7838a694eb574e5cf768a560aa2d0f2156e8679a1fc8cd3d510e7cef1bbd7903cdcc2c04aca4d25aba331f4e5909859c224054bddd54f4674c279368e4d9ce293d57fc734b0205959d4dba22d237f4c97d98bb616854bb4139701f9bd53ebf094585b4f0a16b0d2a0791ba4dcc90768d4bf3c6650b4b16b7e9f6e5c0bec128f7110c33919e7aaadfc433abb865315b11f619e27b953dca6092025d37db9b5039f0a3262e8db168992538e3d061e51aab1925f197f393f9ab5d47be8b5ed39842879343e74e4a95a686350d079ae9f0cd26b7b8b431ba94ad2ae4a20fafc379c3e66922ebef747764ff3540307e739cb0d1d3655146dc5d58fea4c8b12421483d621e1691d161a93b5a0cd1d25d41b7592508ae63bc74288cdb9197cd4601a4934de758232c9ce95d1d62ddc77dea9b33c02d0b8810a831f75577340207fc2acbb78c8b5b45f8c2d6be033ad9bea68450630b2d35cc7e3ff5ac0b96af6b44b9cc712412bdbfc479b5387c2839f4870a4e695eb9bc9fb53cca1b660a76079c29bc1203d763f439ff04463ae1183b8284f5330c176318f2943b763b67cf22124fa2bd3422f4b6ad7df3c92c8847f009820e3d5b07f9484c19075359314dd566e88a8c1dd51c54931f802fb5ca2d4e268e5829343c405998da958ec7eadd95f47dbab28ed52b1bca5c8f5206d70f349717b9e85b2e77495c420d67fbfbe09de4576dd3c74de134a50da0a0bd08d88e2463da7f9eef8b172bcb7edfdf319ed50201766d2a0e28799e74e8b9331dc671589ef2dad3ac6ef40baf1eade8fefb8e887daa7f27a974c4be98ad58bf2200db44c587ee71e5a78d83488235f200198331e5fc8919a0189d1acb275e516c30dc6a6610a4e8ce22868cf1cac3b55b43e77d9ac81a95536661620fe6fd2aa4537f9d284c0c66c1b4b8e8a14b3be9a3d5e1f9abc24d2f7f52752e983189206e39f716dbbd4b78958b4971eea773d8b86d76bf02c783e25ba954556610a91da6fdee4be4348e5272e0676b5af987158688ee671d9f645cd5cacaf4789ec93a70501ee11673d4950a7a68e63aee91af4eb29a84c1086d1e89bc37f6e567364bdc6dc5a88f7083d56f31853e405ae86f3857ac2666eb7db3862dc5acd251b3ecd6cc88c5df382e15ee4fe30e4b9fcd6b32cd89fb1c856c0dcf9bd36b70ae43ee296d6f2b494f8dd478f0511217975221605632237227a60513b70936ce928f17c45d5b4a9b0af5378d5c8cb5a7a6b8f62eb242810da3f80d1beabf6fda1f2d917cc93e72a15ae5161d641e9369556e213cbc5faa58efd887c217ad8bbf5f4e66c3627c765a1edd6a554bd0a524344d1fdfc97eb0e35ce15e26555fb3272713ac12bcf4810d6c164daeeb5e811f7176a393be8a07f7f63865b6671a567f9134782db20b735c50ab7bcfeecd6f3feeda30f992625e93c3a7f789b127d6d9f40b19e73ebc1c830e636517d1f841c938c07799a1c4be331b9e58e1c3c494ce7010b28c868e2a7e802faa03dfc6904261199eba7cc1068081b70340fa0a3f8d9d96a46a6754a1a504e08a7508e82568d8aa4fcec741c6891d16cbc5bd955eb2c8445af9fe7a960df1c685802ae2d4b5ae71c0a6996f5cb0f825035ff6faf19e50d9d6bca00ae173d877a47c1ff66e7e77f81c9d0b51bc2d20829e9ae222a740c204903217f115323761be2f5f9ae60df5515e7046946262e3387d72f2569bcc8285b950bc33d4c18845bf70bcd2418deadc6eeffa2a9f4917f179b4004d6e781cac2af7034bb253f46cfa1a7f5fbb91ab8ad84e1fbbb735a9801ade351d55a0b91f386af0b94e1bdf4c3d82d333068e4ddcc3876dfdbee416e0bf1e6c275e626256776577edb8e2c16e0139593f2f8e4585973b7aedabc9e2ecf574ded44f3f1b9b99eec95de77a5516c17da9e0351e1f3ce55704ec25ba12136a46adcadd9caf2476bd947fd1470cf2760d4afbe5b9ab278cb2a624d1817bb54cb355d7c526698b588d3f6f3e94ef1e134342f536916bbc1c94469b2766efd637305f7b770cc2562189fc269afbab04fb8eebf44a4e92e374e6643b734cd83c7575388659888d1d15bbdb912f6d681ab5da0fa7fe428578b46ba33d3188c99551aa301cac60ab8c59382e7ccbea3e3e1eddd2a3b6b3d64dd8d756bd94a22c8c2f01c7fb1f1ae0024e3aca8615c60313e556aeda3199edd8ef01e9b1ac9b0d2d7282d2965a3d91e9ff708beefb2b0a649f9a7cfd46dfe915ea25ff8fe5bf1b27147853afaeb0c2cdb35946ee49fc655eace4323e142e094c953c5127e1bb224ca0829570ba392939241403117f241d872b3c3eff94166d16be188242a2ecd565e449d1dfba55da5db40330d0a361a125c92c89f61a26300845c55e35efb04bf25f0d5d7282d438002673f8e8402c576a5b402874e44fa71224e8dbc2afb80276cab9244ab70282fded63510a4965035dcc90680d4c07fa4dc3bf1b384227926b7aacd4f1465f1c6c25547684b119f06e0161909e9b2468c8195489da99ec6cccd8f10089f478c8667fe0d86befdc03eabb7eacadf9146c3e8284cf2ce908fe8096d7bd4aa6b42f97399b35ce8334e0bcae2f652414350a00d9e99b1b38132c7418afe7db75537c141cfd71b1e3ea1c154193d81f414a3b9b1bc314fe13e37c702cd1f197dedd3d41b795f5af43c0f75fcf83b5abff0815ecc09211c2059614cc9597639d52066cd48c36063b35744ae6af3d78f16e0feb61992ef0ec9a864ea69a97f0c93535b1c9e70f1335b044d71d6008ed9290a2111d672b601e92524fb1b0f91b061193741dcfc958ad09bcaa888405a50a04622a1fa09398228bb51a401112782d33a58342daf32e49cd3135a5becda21b82b21b29006bef9dfb90f037ae50ed079b5d8a8a42057b24d644e1685bb4f54ac8876c4d5ce42c4ba8b818796fe4050626862181ea6e15fe9a5123a45a967fbb8d3c3cd402dcd867574cca3256de3c0184cfc153490866570566513b51fb439e9f4b9154eb63ab065400664b27098ee73a215c89d5e6592ac426f751d6dbbc3321ccb62c43a147924a40ee69e2921a0fd990f2156d5c811cfd000aa4671294aa6d4b1c470a8bb5fbea40ab6f6ef2ed17b230cd9ecae00d3ad90fd4eb8adcd614f73e725706483704f0d28187900589a7dbb9db45317a4cef42bfd96afdffe8af1c7eaa2236420c0b99ef228ec255e56f6fdebfee22e1643b843cead36c9b18824363add91839391e0a192394b31c3024efbac231acf9542fba430b4b87d6d5c157326faf731dd82adce8cbac11700fbc4d4b8559b0adee65a0bc15d519c7f1410e20d3e530f59668163cbcae512f87c60a999852288961898147badba3f76cd725ed87dab7c2d3004372332a2c5275381767b21135c3df9ae257fd814db366e833460fdf0ea5034223b2a79e39941662f75163efb7896fcac72b0d8c8947c63e44e3a1dbfef867c920197423544eee09fde95f39447c3d99d60665ecf337122e61fdcbe961dfee212e558001cd8c64b4e2248039ecfbe77ad5e832510b45b188bff1a6abd7434c4275678c7f02618d4aa5795336583c7d317fe4c5c1cc4b47536f4b40590d13cdfeb1c2e3757b6d544dc8053d94d83b7ee952d126939da0bec0c6f0c8296d0d17e681fa04bc4492dce754cb502f68dbcad1e787614fb1c67a141e776b25ed48d07a2acb0c26f781e524f69173aee86f4f53a95bd27b6bf33b1a7825c2a8ce18175d2a718f592c810f0824a067d9d022e7b94534ea8eef219d3dcf73a50ef5620f8842fad15b05ced9ee0e2d285a4d24a3ad934766f224a94f939f242576cc8ff0b717815d645ac5594afe0646ead4655f7d2f8154c61e97ed8d559f3e4a9cef8291aa4c518cf6821e4c5fbe77a1cfbafaa24825b756dd79bf96719840d3db348e21cbb45224f315559b19b20703f868503942801be391a70bfa95c1c06db21e2867822b4424c4a952f9843cea0b491a5ea70e90000591f378a93d04d714e8d3ea4e5c041d96acace9eb30df772581f6e4b7802cee79bc5e0ddf0b6b363787111420b6ac94fc78acb2578916724402fc46fcf6f35fba2c47c53c7a60dddef434c7bf7ee6c651eb0dbfcd112c48a6829c31068d0364235aee6875143cfb92446f2513c"], 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000200)=""/94, 0x5e}], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:50:30 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:30 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) creat(&(0x7f0000000100)='./file0/file0\x00', 0xa) 12:50:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0}, {@in=@broadcast}, @in6=@private0}}}, 0xf8}}, 0x0) 12:50:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:50:30 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 150.833010] random: crng reseeded on system resumption 12:50:30 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) [ 150.895208] random: crng reseeded on system resumption [ 150.937647] loop4: detected capacity change from 0 to 256 [ 150.940502] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:50:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:50:30 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:31 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 150.975749] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 151.037303] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.209649] random: crng reseeded on system resumption 12:50:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1ab}], 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:50:31 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:31 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) 12:50:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:50:31 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 12:50:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2d53a4ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0xd000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)="bedcc1df281fd63d64ef45214a2151fed81d07a1e445c64adf7f352195c27564237bd025a7e4b043a2d57cf04e661516d73d9423b06e9ace607ba8754f49817b0b15b1a6a114caec173f12e7bc45133f5c613f75c193f9fe25ce5967876ce53e2d61bbe479ec5156fbe09ff94a5eef955ac01811bac72793273844a71a8c2171ce878f48d4a691f2d33f1712dbe1256996dc65ad839754fff74edcefc0da149816c175764c57f145820eaedaf2ddf4bd96096347251663e65686d684a596922c13c6ff79ef63252e4cb93b20c4a4d9be22e0fedbfcbf53da26f04b3a7eb781f1d120e477d94ccfd739cb1046f6f42787", 0xf0, r3}, 0x68) openat(r3, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 12:50:31 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 151.550897] random: crng reseeded on system resumption 12:50:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x4, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:31 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) [ 151.610010] random: crng reseeded on system resumption 12:50:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000009e00)) 12:50:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:50:31 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:50:31 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x5, 0x4) [ 151.776640] random: crng reseeded on system resumption VM DIAGNOSIS: 12:50:22 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82451491 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff888042b67508 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451480 RIP=ffffffff824514e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2cd57da700 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe71ab190000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe71ab18e000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed100fffc000 CR3=000000001778c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11003ec7260 RBX=ffff88801f6392c8 RCX=ffffffff811ea5f7 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88801f639300 RBP=ffffe8ffffd3dd80 RSP=ffff8880095afd78 R8 =0000000000000000 R9 =ffff88800bf49e07 R10=ffffed10017e93c0 R11=0000000000000001 R12=dffffc0000000000 R13=ffffffff820fdd86 R14=ffffffff820fdd86 R15=0000000000000092 RIP=ffffffff817f04cd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3a409e4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3a409e2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b3d68c41b0 CR3=000000000b78e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000