Warning: Permanently added '[localhost]:17314' (ECDSA) to the list of known hosts. 2022/11/02 03:12:23 fuzzer started 2022/11/02 03:12:24 dialing manager at localhost:42881 syzkaller login: [ 36.340973] cgroup: Unknown subsys name 'net' [ 36.425444] cgroup: Unknown subsys name 'rlimit' 2022/11/02 03:12:38 syscalls: 2217 2022/11/02 03:12:38 code coverage: enabled 2022/11/02 03:12:38 comparison tracing: enabled 2022/11/02 03:12:38 extra coverage: enabled 2022/11/02 03:12:38 setuid sandbox: enabled 2022/11/02 03:12:38 namespace sandbox: enabled 2022/11/02 03:12:38 Android sandbox: enabled 2022/11/02 03:12:38 fault injection: enabled 2022/11/02 03:12:38 leak checking: enabled 2022/11/02 03:12:38 net packet injection: enabled 2022/11/02 03:12:38 net device setup: enabled 2022/11/02 03:12:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/02 03:12:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/02 03:12:38 USB emulation: enabled 2022/11/02 03:12:38 hci packet injection: enabled 2022/11/02 03:12:38 wifi device emulation: enabled 2022/11/02 03:12:38 802.15.4 emulation: enabled 2022/11/02 03:12:38 fetching corpus: 50, signal 25094/26932 (executing program) 2022/11/02 03:12:38 fetching corpus: 100, signal 42233/45750 (executing program) 2022/11/02 03:12:38 fetching corpus: 150, signal 50576/55695 (executing program) 2022/11/02 03:12:38 fetching corpus: 200, signal 56922/63590 (executing program) 2022/11/02 03:12:38 fetching corpus: 250, signal 64542/72658 (executing program) 2022/11/02 03:12:38 fetching corpus: 300, signal 73948/83311 (executing program) 2022/11/02 03:12:39 fetching corpus: 350, signal 81641/92223 (executing program) 2022/11/02 03:12:39 fetching corpus: 400, signal 86346/98218 (executing program) 2022/11/02 03:12:39 fetching corpus: 450, signal 89934/103096 (executing program) 2022/11/02 03:12:39 fetching corpus: 500, signal 93040/107481 (executing program) 2022/11/02 03:12:39 fetching corpus: 550, signal 97795/113349 (executing program) 2022/11/02 03:12:39 fetching corpus: 600, signal 100507/117300 (executing program) 2022/11/02 03:12:39 fetching corpus: 650, signal 105337/123123 (executing program) 2022/11/02 03:12:40 fetching corpus: 700, signal 108061/126968 (executing program) 2022/11/02 03:12:40 fetching corpus: 750, signal 110150/130218 (executing program) 2022/11/02 03:12:40 fetching corpus: 800, signal 114652/135649 (executing program) 2022/11/02 03:12:40 fetching corpus: 850, signal 121801/143484 (executing program) 2022/11/02 03:12:40 fetching corpus: 900, signal 123681/146405 (executing program) 2022/11/02 03:12:40 fetching corpus: 950, signal 126136/149858 (executing program) 2022/11/02 03:12:40 fetching corpus: 1000, signal 128737/153396 (executing program) 2022/11/02 03:12:40 fetching corpus: 1050, signal 132053/157497 (executing program) 2022/11/02 03:12:40 fetching corpus: 1100, signal 133406/159881 (executing program) 2022/11/02 03:12:41 fetching corpus: 1150, signal 135133/162605 (executing program) 2022/11/02 03:12:41 fetching corpus: 1200, signal 138086/166366 (executing program) 2022/11/02 03:12:41 fetching corpus: 1250, signal 140579/169660 (executing program) 2022/11/02 03:12:41 fetching corpus: 1300, signal 142809/172720 (executing program) 2022/11/02 03:12:41 fetching corpus: 1350, signal 144471/175289 (executing program) 2022/11/02 03:12:41 fetching corpus: 1400, signal 145692/177473 (executing program) 2022/11/02 03:12:41 fetching corpus: 1450, signal 148487/180918 (executing program) 2022/11/02 03:12:41 fetching corpus: 1500, signal 149794/183149 (executing program) 2022/11/02 03:12:42 fetching corpus: 1550, signal 151826/185892 (executing program) 2022/11/02 03:12:42 fetching corpus: 1600, signal 154272/188990 (executing program) 2022/11/02 03:12:42 fetching corpus: 1650, signal 156725/192074 (executing program) 2022/11/02 03:12:42 fetching corpus: 1700, signal 158047/194183 (executing program) 2022/11/02 03:12:42 fetching corpus: 1750, signal 160352/197095 (executing program) 2022/11/02 03:12:42 fetching corpus: 1800, signal 162121/199574 (executing program) 2022/11/02 03:12:42 fetching corpus: 1850, signal 163301/201554 (executing program) 2022/11/02 03:12:42 fetching corpus: 1900, signal 165060/203969 (executing program) 2022/11/02 03:12:42 fetching corpus: 1950, signal 166888/206443 (executing program) 2022/11/02 03:12:43 fetching corpus: 2000, signal 167868/208141 (executing program) 2022/11/02 03:12:43 fetching corpus: 2050, signal 169094/210089 (executing program) 2022/11/02 03:12:43 fetching corpus: 2100, signal 170326/212039 (executing program) 2022/11/02 03:12:43 fetching corpus: 2150, signal 171855/214183 (executing program) 2022/11/02 03:12:43 fetching corpus: 2200, signal 173744/216536 (executing program) 2022/11/02 03:12:43 fetching corpus: 2250, signal 175221/218545 (executing program) 2022/11/02 03:12:43 fetching corpus: 2300, signal 176682/220569 (executing program) 2022/11/02 03:12:44 fetching corpus: 2350, signal 178021/222499 (executing program) 2022/11/02 03:12:44 fetching corpus: 2400, signal 179726/224671 (executing program) 2022/11/02 03:12:44 fetching corpus: 2450, signal 180626/226259 (executing program) 2022/11/02 03:12:44 fetching corpus: 2500, signal 182090/228164 (executing program) 2022/11/02 03:12:44 fetching corpus: 2550, signal 183010/229711 (executing program) 2022/11/02 03:12:44 fetching corpus: 2600, signal 184088/231386 (executing program) 2022/11/02 03:12:44 fetching corpus: 2650, signal 185225/233071 (executing program) 2022/11/02 03:12:45 fetching corpus: 2700, signal 186166/234591 (executing program) 2022/11/02 03:12:45 fetching corpus: 2750, signal 187260/236294 (executing program) 2022/11/02 03:12:45 fetching corpus: 2800, signal 188397/238014 (executing program) 2022/11/02 03:12:45 fetching corpus: 2850, signal 189590/239710 (executing program) 2022/11/02 03:12:45 fetching corpus: 2900, signal 190667/241289 (executing program) 2022/11/02 03:12:45 fetching corpus: 2950, signal 191897/242933 (executing program) 2022/11/02 03:12:45 fetching corpus: 3000, signal 192958/244461 (executing program) 2022/11/02 03:12:45 fetching corpus: 3050, signal 194223/246164 (executing program) 2022/11/02 03:12:46 fetching corpus: 3100, signal 194963/247475 (executing program) 2022/11/02 03:12:46 fetching corpus: 3150, signal 196088/249022 (executing program) 2022/11/02 03:12:46 fetching corpus: 3200, signal 197087/250478 (executing program) 2022/11/02 03:12:46 fetching corpus: 3250, signal 198619/252241 (executing program) 2022/11/02 03:12:46 fetching corpus: 3300, signal 199931/253865 (executing program) 2022/11/02 03:12:46 fetching corpus: 3350, signal 200827/255208 (executing program) 2022/11/02 03:12:46 fetching corpus: 3400, signal 201663/256530 (executing program) 2022/11/02 03:12:47 fetching corpus: 3450, signal 202528/257852 (executing program) 2022/11/02 03:12:47 fetching corpus: 3500, signal 203368/259162 (executing program) 2022/11/02 03:12:47 fetching corpus: 3550, signal 204567/260698 (executing program) 2022/11/02 03:12:47 fetching corpus: 3600, signal 205947/262302 (executing program) 2022/11/02 03:12:47 fetching corpus: 3650, signal 207396/263898 (executing program) 2022/11/02 03:12:47 fetching corpus: 3700, signal 208222/265116 (executing program) 2022/11/02 03:12:47 fetching corpus: 3750, signal 208991/266333 (executing program) 2022/11/02 03:12:47 fetching corpus: 3800, signal 210495/267898 (executing program) 2022/11/02 03:12:48 fetching corpus: 3850, signal 211426/269184 (executing program) 2022/11/02 03:12:48 fetching corpus: 3900, signal 212573/270555 (executing program) 2022/11/02 03:12:48 fetching corpus: 3950, signal 213501/271780 (executing program) 2022/11/02 03:12:48 fetching corpus: 4000, signal 214848/273250 (executing program) 2022/11/02 03:12:48 fetching corpus: 4050, signal 215622/274391 (executing program) 2022/11/02 03:12:48 fetching corpus: 4100, signal 216504/275581 (executing program) 2022/11/02 03:12:48 fetching corpus: 4150, signal 217401/276817 (executing program) 2022/11/02 03:12:48 fetching corpus: 4200, signal 218064/277857 (executing program) 2022/11/02 03:12:49 fetching corpus: 4250, signal 218757/278865 (executing program) 2022/11/02 03:12:49 fetching corpus: 4300, signal 219734/280036 (executing program) 2022/11/02 03:12:49 fetching corpus: 4350, signal 220361/281039 (executing program) 2022/11/02 03:12:49 fetching corpus: 4400, signal 221460/282254 (executing program) 2022/11/02 03:12:49 fetching corpus: 4450, signal 222227/283327 (executing program) 2022/11/02 03:12:49 fetching corpus: 4500, signal 222975/284337 (executing program) 2022/11/02 03:12:49 fetching corpus: 4550, signal 223977/285497 (executing program) 2022/11/02 03:12:50 fetching corpus: 4600, signal 224498/286423 (executing program) 2022/11/02 03:12:50 fetching corpus: 4650, signal 225517/287561 (executing program) 2022/11/02 03:12:50 fetching corpus: 4700, signal 226098/288526 (executing program) 2022/11/02 03:12:50 fetching corpus: 4750, signal 226933/289570 (executing program) 2022/11/02 03:12:50 fetching corpus: 4800, signal 227570/290524 (executing program) 2022/11/02 03:12:50 fetching corpus: 4850, signal 228245/291470 (executing program) 2022/11/02 03:12:50 fetching corpus: 4900, signal 229000/292431 (executing program) 2022/11/02 03:12:50 fetching corpus: 4950, signal 229545/293250 (executing program) 2022/11/02 03:12:51 fetching corpus: 5000, signal 230198/294140 (executing program) 2022/11/02 03:12:51 fetching corpus: 5050, signal 230956/295097 (executing program) 2022/11/02 03:12:51 fetching corpus: 5100, signal 231609/296018 (executing program) 2022/11/02 03:12:51 fetching corpus: 5150, signal 232111/296855 (executing program) 2022/11/02 03:12:51 fetching corpus: 5200, signal 233033/297801 (executing program) 2022/11/02 03:12:51 fetching corpus: 5250, signal 233950/298782 (executing program) 2022/11/02 03:12:51 fetching corpus: 5300, signal 234442/299592 (executing program) 2022/11/02 03:12:52 fetching corpus: 5350, signal 235219/300510 (executing program) 2022/11/02 03:12:52 fetching corpus: 5400, signal 235700/301282 (executing program) 2022/11/02 03:12:52 fetching corpus: 5450, signal 236561/302211 (executing program) 2022/11/02 03:12:52 fetching corpus: 5500, signal 237078/303041 (executing program) 2022/11/02 03:12:52 fetching corpus: 5550, signal 237776/303906 (executing program) 2022/11/02 03:12:52 fetching corpus: 5600, signal 238431/304728 (executing program) 2022/11/02 03:12:52 fetching corpus: 5650, signal 239329/305615 (executing program) 2022/11/02 03:12:52 fetching corpus: 5700, signal 239973/306412 (executing program) 2022/11/02 03:12:53 fetching corpus: 5750, signal 240720/307251 (executing program) 2022/11/02 03:12:53 fetching corpus: 5800, signal 241271/308024 (executing program) 2022/11/02 03:12:53 fetching corpus: 5850, signal 242214/308889 (executing program) 2022/11/02 03:12:53 fetching corpus: 5900, signal 242790/309596 (executing program) 2022/11/02 03:12:53 fetching corpus: 5950, signal 243232/310291 (executing program) 2022/11/02 03:12:53 fetching corpus: 6000, signal 244005/311061 (executing program) 2022/11/02 03:12:53 fetching corpus: 6050, signal 244672/311791 (executing program) 2022/11/02 03:12:53 fetching corpus: 6100, signal 245167/312479 (executing program) 2022/11/02 03:12:54 fetching corpus: 6150, signal 245711/313217 (executing program) 2022/11/02 03:12:54 fetching corpus: 6200, signal 246423/313966 (executing program) 2022/11/02 03:12:54 fetching corpus: 6250, signal 247217/314692 (executing program) 2022/11/02 03:12:54 fetching corpus: 6300, signal 247663/315357 (executing program) 2022/11/02 03:12:54 fetching corpus: 6350, signal 248312/316076 (executing program) 2022/11/02 03:12:54 fetching corpus: 6400, signal 249082/316787 (executing program) 2022/11/02 03:12:54 fetching corpus: 6450, signal 249796/317454 (executing program) 2022/11/02 03:12:54 fetching corpus: 6500, signal 250257/318080 (executing program) 2022/11/02 03:12:55 fetching corpus: 6550, signal 250884/318740 (executing program) 2022/11/02 03:12:55 fetching corpus: 6600, signal 251406/319390 (executing program) 2022/11/02 03:12:55 fetching corpus: 6650, signal 251798/319995 (executing program) 2022/11/02 03:12:55 fetching corpus: 6700, signal 252228/320565 (executing program) 2022/11/02 03:12:55 fetching corpus: 6750, signal 252789/321242 (executing program) 2022/11/02 03:12:55 fetching corpus: 6800, signal 253335/321871 (executing program) 2022/11/02 03:12:55 fetching corpus: 6850, signal 253786/322467 (executing program) 2022/11/02 03:12:56 fetching corpus: 6900, signal 254268/323106 (executing program) 2022/11/02 03:12:56 fetching corpus: 6950, signal 254949/323750 (executing program) 2022/11/02 03:12:56 fetching corpus: 7000, signal 255628/324393 (executing program) 2022/11/02 03:12:56 fetching corpus: 7050, signal 256035/324941 (executing program) 2022/11/02 03:12:56 fetching corpus: 7100, signal 256861/325556 (executing program) 2022/11/02 03:12:56 fetching corpus: 7150, signal 257564/326137 (executing program) 2022/11/02 03:12:56 fetching corpus: 7200, signal 257987/326700 (executing program) 2022/11/02 03:12:56 fetching corpus: 7250, signal 258545/327285 (executing program) 2022/11/02 03:12:57 fetching corpus: 7300, signal 258988/327833 (executing program) 2022/11/02 03:12:57 fetching corpus: 7350, signal 259506/328350 (executing program) 2022/11/02 03:12:57 fetching corpus: 7400, signal 260113/328871 (executing program) 2022/11/02 03:12:57 fetching corpus: 7450, signal 260536/329398 (executing program) 2022/11/02 03:12:57 fetching corpus: 7500, signal 261120/329914 (executing program) 2022/11/02 03:12:57 fetching corpus: 7550, signal 261616/330387 (executing program) 2022/11/02 03:12:57 fetching corpus: 7600, signal 262064/330889 (executing program) 2022/11/02 03:12:57 fetching corpus: 7650, signal 262676/331389 (executing program) 2022/11/02 03:12:57 fetching corpus: 7700, signal 263180/331897 (executing program) 2022/11/02 03:12:58 fetching corpus: 7750, signal 263709/332414 (executing program) 2022/11/02 03:12:58 fetching corpus: 7800, signal 264169/332890 (executing program) 2022/11/02 03:12:58 fetching corpus: 7850, signal 264829/333382 (executing program) 2022/11/02 03:12:58 fetching corpus: 7900, signal 265241/333852 (executing program) 2022/11/02 03:12:58 fetching corpus: 7950, signal 265839/334310 (executing program) 2022/11/02 03:12:58 fetching corpus: 8000, signal 266560/334785 (executing program) 2022/11/02 03:12:58 fetching corpus: 8050, signal 267475/335225 (executing program) 2022/11/02 03:12:58 fetching corpus: 8100, signal 267907/335681 (executing program) 2022/11/02 03:12:59 fetching corpus: 8150, signal 268330/336088 (executing program) 2022/11/02 03:12:59 fetching corpus: 8200, signal 268984/336518 (executing program) 2022/11/02 03:12:59 fetching corpus: 8250, signal 269424/336938 (executing program) 2022/11/02 03:12:59 fetching corpus: 8300, signal 269911/337360 (executing program) 2022/11/02 03:12:59 fetching corpus: 8350, signal 270527/337773 (executing program) 2022/11/02 03:12:59 fetching corpus: 8400, signal 270974/338205 (executing program) 2022/11/02 03:12:59 fetching corpus: 8450, signal 271274/338504 (executing program) 2022/11/02 03:12:59 fetching corpus: 8500, signal 271692/338504 (executing program) 2022/11/02 03:13:00 fetching corpus: 8550, signal 272063/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8600, signal 272381/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8650, signal 272682/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8700, signal 273064/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8750, signal 273518/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8800, signal 273963/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8850, signal 274478/338505 (executing program) 2022/11/02 03:13:00 fetching corpus: 8900, signal 275377/338505 (executing program) 2022/11/02 03:13:01 fetching corpus: 8950, signal 275814/338511 (executing program) 2022/11/02 03:13:01 fetching corpus: 9000, signal 276124/338511 (executing program) 2022/11/02 03:13:01 fetching corpus: 9050, signal 276367/338511 (executing program) 2022/11/02 03:13:01 fetching corpus: 9100, signal 276682/338518 (executing program) 2022/11/02 03:13:01 fetching corpus: 9150, signal 277596/338518 (executing program) 2022/11/02 03:13:01 fetching corpus: 9200, signal 277965/338520 (executing program) 2022/11/02 03:13:01 fetching corpus: 9250, signal 278363/338520 (executing program) 2022/11/02 03:13:01 fetching corpus: 9300, signal 278778/338520 (executing program) 2022/11/02 03:13:01 fetching corpus: 9350, signal 279084/338520 (executing program) 2022/11/02 03:13:02 fetching corpus: 9400, signal 279494/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9450, signal 279973/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9500, signal 280360/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9550, signal 280724/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9600, signal 280958/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9650, signal 281377/338539 (executing program) 2022/11/02 03:13:02 fetching corpus: 9700, signal 281642/338539 (executing program) 2022/11/02 03:13:03 fetching corpus: 9750, signal 282164/338554 (executing program) 2022/11/02 03:13:03 fetching corpus: 9800, signal 282469/338557 (executing program) 2022/11/02 03:13:03 fetching corpus: 9850, signal 282939/338557 (executing program) 2022/11/02 03:13:03 fetching corpus: 9900, signal 283407/338558 (executing program) 2022/11/02 03:13:03 fetching corpus: 9950, signal 283806/338558 (executing program) 2022/11/02 03:13:03 fetching corpus: 10000, signal 284278/338558 (executing program) 2022/11/02 03:13:03 fetching corpus: 10050, signal 284601/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10100, signal 285070/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10150, signal 285471/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10200, signal 286000/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10250, signal 286314/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10300, signal 286687/338558 (executing program) 2022/11/02 03:13:04 fetching corpus: 10350, signal 287152/338579 (executing program) 2022/11/02 03:13:04 fetching corpus: 10400, signal 287422/338586 (executing program) 2022/11/02 03:13:04 fetching corpus: 10450, signal 287845/338586 (executing program) 2022/11/02 03:13:05 fetching corpus: 10500, signal 288239/338586 (executing program) 2022/11/02 03:13:05 fetching corpus: 10550, signal 288634/338586 (executing program) 2022/11/02 03:13:05 fetching corpus: 10600, signal 289076/338586 (executing program) 2022/11/02 03:13:05 fetching corpus: 10650, signal 289480/338587 (executing program) 2022/11/02 03:13:05 fetching corpus: 10700, signal 289775/338587 (executing program) 2022/11/02 03:13:05 fetching corpus: 10750, signal 290243/338587 (executing program) 2022/11/02 03:13:05 fetching corpus: 10800, signal 290792/338587 (executing program) 2022/11/02 03:13:05 fetching corpus: 10850, signal 291059/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 10900, signal 291470/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 10950, signal 291858/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11000, signal 292096/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11050, signal 292517/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11100, signal 292683/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11150, signal 293003/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11200, signal 293559/338588 (executing program) 2022/11/02 03:13:06 fetching corpus: 11250, signal 293854/338588 (executing program) 2022/11/02 03:13:07 fetching corpus: 11300, signal 294277/338588 (executing program) 2022/11/02 03:13:07 fetching corpus: 11350, signal 294838/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11400, signal 295347/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11450, signal 295635/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11500, signal 295823/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11550, signal 296153/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11600, signal 296495/338589 (executing program) 2022/11/02 03:13:07 fetching corpus: 11650, signal 296944/338589 (executing program) 2022/11/02 03:13:08 fetching corpus: 11700, signal 297376/338590 (executing program) 2022/11/02 03:13:08 fetching corpus: 11750, signal 297829/338601 (executing program) 2022/11/02 03:13:08 fetching corpus: 11800, signal 298272/338601 (executing program) 2022/11/02 03:13:08 fetching corpus: 11850, signal 298558/338601 (executing program) 2022/11/02 03:13:08 fetching corpus: 11900, signal 298960/338624 (executing program) 2022/11/02 03:13:08 fetching corpus: 11950, signal 299237/338624 (executing program) 2022/11/02 03:13:08 fetching corpus: 12000, signal 299636/338624 (executing program) 2022/11/02 03:13:09 fetching corpus: 12050, signal 300132/338624 (executing program) 2022/11/02 03:13:09 fetching corpus: 12094, signal 300432/338624 (executing program) 2022/11/02 03:13:09 fetching corpus: 12094, signal 300432/338624 (executing program) 2022/11/02 03:13:12 starting 8 fuzzer processes 03:13:12 executing program 0: clock_gettime(0x5, &(0x7f0000000000)) io_getevents(0x0, 0x81, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x8, 0x80000001}) mq_timedsend(r0, &(0x7f0000000140)="82aa55ea68464d5dee7d4618c8ce65e8612e41eb6ae503307614ceff0567b902fd9f99bf35b6261a5a1e6e1ba321e9ed5bfa5f9eaba78c48660c00f846a7f8776f2ef9819ae437184ca4388d8be881a2cc6c1a998d798adcba8f1de91f21a66b7ec52346a11d734f985f976e0f", 0x6d, 0x80, 0x0) io_getevents(0x0, 0x4, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)) futex(&(0x7f0000000280)=0x2, 0xb, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x1) clock_gettime(0x4, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex(&(0x7f0000000380)=0x1, 0x7, 0xfffffff9, &(0x7f0000000400)={r1, r2+60000000}, &(0x7f0000000440), 0x0) rt_sigtimedwait(&(0x7f0000000480)={[0x2398]}, &(0x7f00000004c0), &(0x7f0000000540), 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x61a400, 0x0) clock_gettime(0x0, &(0x7f0000007040)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000006e00)=[{{&(0x7f00000005c0), 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/1, 0x1}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/215, 0xd7}], 0x4}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/177, 0xb1}, {&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/5, 0x5}], 0x9, &(0x7f0000002ec0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f00)=""/19, 0x13}, {&(0x7f0000002f40)=""/68, 0x44}], 0x2}}, {{&(0x7f0000003000), 0x6e, &(0x7f0000003380)=[{&(0x7f0000003080)=""/119, 0x77}, {&(0x7f0000003100)=""/162, 0xa2}, {&(0x7f00000031c0)=""/144, 0x90}, {&(0x7f0000003280)=""/37, 0x25}, {&(0x7f00000032c0)=""/147, 0x93}], 0x5, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003500)}, {&(0x7f0000003540)=""/38, 0x26}], 0x2, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/63, 0x3f}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/75, 0x4b}, {&(0x7f0000004740)=""/217, 0xd9}, {&(0x7f0000004840)=""/255, 0xff}, {&(0x7f0000004940)=""/234, 0xea}], 0x6, &(0x7f0000004ac0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)}, {&(0x7f0000005b40)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/10, 0xa}], 0x4, &(0x7f0000006bc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000006c80)=@abs, 0x6e, &(0x7f0000006d80)=[{&(0x7f0000006d00)=""/92, 0x5c}], 0x1, &(0x7f0000006dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x9, 0x40012000, &(0x7f0000007080)={r4, r5+10000000}) clock_gettime(0x6, &(0x7f00000070c0)) rt_sigtimedwait(&(0x7f0000007100)={[0x1f]}, &(0x7f0000007140), &(0x7f00000071c0)={0x0, 0x3938700}, 0x8) clock_gettime(0x0, &(0x7f0000007200)) clock_gettime(0x4, &(0x7f0000007240)) clock_gettime(0x4, &(0x7f0000007280)) clock_gettime(0x2, &(0x7f00000072c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007380)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000007300)={0x220001, 0x100, 0x1}, &(0x7f0000007340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xff) 03:13:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x5b, 0x6, 0xfe, 0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0x7, 0x2, 0x9, 0xe4a6, 0x101, 0x5, 0x0, 0xb4, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x3, 0x0, 0xe, 0x0, 0x0, 0x2102, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x5}, 0x40, 0x2, 0x80000000, 0x0, 0x3, 0x3f, 0xbcb, 0x0, 0x9, 0x0, 0x3e0b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2c, 0x8, 0x2, 0x40, 0x0, 0x4, 0x11000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140)}, 0x1000, 0x0, 0x4, 0x9aa677596b1f60f3, 0x40, 0x100, 0x6, 0x0, 0x3, 0x0, 0x21c2c00000000000}, 0x0, 0xd, r1, 0xa) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x36d, 0x74dd4d32c858fea9) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3a, 0x5, 0x3, 0x3, 0x0, 0x3ff, 0x28, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0xfd}, 0x5350c, 0xffffffff, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x515, 0x0, 0x101}, 0x0, 0xe, r3, 0x2) pwritev(r4, &(0x7f00000015c0)=[{&(0x7f00000002c0)="658c697a9d1b8f67abd3f95bc92b2e77a8ed32eefaeea94b783c2a2addeb4a8922ee3f74c580fcf296bd09f9b4d019612ad25a189c4e2b2c872c158a1657aaa408616ce76e3e393c131003344f680917d7e5ce3c1165c1cd9eaf1ef79d0c9b11b12c3bc86a01405386f5318870bcda364711d438b27c616e83fc2215858edc3e2e786c126c7c41769b91ed76ee27780058a96be1546ab335a2ceb0999761e976fb3dfe9c4cb6e48ea11653d37ffddfa3b7279b8f5a5090d2f13845ab4881209068b3076e5921a1cecc3a59c941342da00f305444b10ad5e438156a28ad5416e2de35d2d8fea69fd302be85d224cd0447e6e7932f849af000", 0xf8}, {&(0x7f00000003c0)="e0474301baad287e453c6c5213800ea146c0279ea0e4e6560da5f3cc0e3b23b309ee", 0x22}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="33aff7a868669499fdfd6b9522f6f5fbb521c6e2d871a8bbcb0444109ccd338f7fab2d4009262fc58dd690b4795da74bd9a753fbc816e74613d46c7164a47d720f8bcbb2beeb9eb6fd2b5a7c80e2cc588deeb61b127fd18150a54c31577c455881c87b1e77e9432c98b55342a49e07b1570330578afdb74da83de7ec86b66352b3d421eacd65b6f0b08a245f60931ca0fce0cae78756b1dcd438a6eb5606dda81845e9524cfa410aebc2e2fa20c1a17c71844fa8f56174a08d41f0bff1ba8d432da2228fa28068f8b09ba99a6369f20018be79f017", 0xd5}, {&(0x7f0000001500)="17b34046c693d02b69fb2ae8eed5871375dff81c16d08330628c810fcc7a4874c3247e4df0be1d72627b18192449d016a9b38fe18e21c690d560324d6e11b653a1c3884fa28bf1e29b1827c04c015525cb5d69fe649d31fb7fb5b29204e2049a7dcd4edaca130b4303d42abd20bf066137b8994e162c909d1c0c8fae13153ec22306100e0f68e7c9554ef987aee508e5617b", 0x92}], 0x5, 0x4, 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001640)={0xe86, 0xdb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = getpid() perf_event_open(&(0x7f0000017300)={0x1, 0x80, 0x20, 0x6, 0x5, 0x6, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x4, 0x80000001}, 0xa060, 0x0, 0x27ba, 0x4, 0x40, 0xfff, 0x9, 0x0, 0x9000, 0x0, 0x2}, r6, 0x1, r0, 0x2) r7 = openat$cgroup_ro(r3, &(0x7f0000017380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) readv(r7, &(0x7f0000018540)=[{&(0x7f00000173c0)=""/249, 0xf9}, {&(0x7f00000174c0)=""/4096, 0x1000}, {&(0x7f00000184c0)=""/70, 0x46}], 0x3) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000018640)={0x0}, &(0x7f0000018680)=0xc) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000186c0), 0x0, 0x0) perf_event_open(&(0x7f00000185c0)={0x0, 0x80, 0x5, 0x8, 0x99, 0x2, 0x0, 0x8, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000018580)}, 0x6806, 0x886, 0x4, 0x1, 0x6, 0x80, 0x7, 0x0, 0x76}, r8, 0x7, r9, 0x0) sendmsg$AUDIT_TTY_GET(r5, &(0x7f00000187c0)={&(0x7f0000018700), 0xc, &(0x7f0000018780)={&(0x7f0000018740)={0x10, 0x3f8, 0x300, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) r10 = accept4$bt_l2cap(r9, &(0x7f0000018800), &(0x7f0000018840)=0xe, 0x80000) fallocate(r10, 0x14, 0x2, 0x8) 03:13:12 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="a92aa126a6eaa913a6a45d7659637571d9fb67dba2ff03866a385eea30eb11ed0241e23ffeaf5eaf8f322f290c916a1a6dc539591286aee60b0a2f153e42388b9a98d93b43b1da24a709e202b4e4847d01a44fbdb6143e16afb5a6123c6a94508b524a670510f119d68c77887d690363b7e7371e7fabd8434dc9835ae33b7fc46c9075e39b4c6454a575a80d0ede3fbd505041bc4e90e4b62847f63782f281a60b4be446d57481219813c27ef9b78ecac3a245", 0xb3}, {&(0x7f00000000c0)="70454f78c2ee67278b051bdac2d36418d43e4e8577a923a918814cacb89dcfe35bfda5dc43ba88b7ebf28252413b9ddad335d74d54017a3ecd5476d0cc4306aef1524874d0e7912dc14d3379dda530c5e59b868032dd7af1d0ed", 0x5a}, {&(0x7f0000000140)="4d3e2225dcf9c381a22da9c9b86841838cf6a3c960e8fd80cbb2a4d817080ab6ace3f4b1239bde811672dd12829a00a14861dee38d1a89bdb36f2053f40d081ca2c5de8583106858ebb03ca65b216bacece0dc957919aad738d9ca54e5e2674800b71c3d063053105417194778ff3666dae3b3436d1645fd2f6804d830249391c4d4c4685b0d61056e21ed87c21676b4f63e323045ea148c8885d8290261", 0x9e}, {&(0x7f0000000200)="036a7a5189016d67a2595082c50e376fa2d1be7c907251cde2452b777e", 0x1d}, {&(0x7f0000000240)="9130d171e9b32f875ed1eb52c09d7731224e7746b5c0bae14e738bfbd70c53bb268d01f00e0c9583b90cf69a97d4fb701cda1d66804c7efc78ff70ced81d6134faeeef6d80ac577304f3a43b515beedf906427acce48a05d8bb5e580a1294d7c221bd1749fc176b954f982747a40494e3d4ea325c33f2993f224f1fd112b00f1565ff16cf8307d72d891d4fd1eaf2ec28d6ff22b276ddeb24e26ad805789474febe362ffb177950823ebb85626c4a647b016cbcd38607c1de68233b43e398f786192994e78455b3b72a18f73c8feced576afe8", 0xd3}], 0x5) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x66}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000500)) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0)={[0xfffffffffffffffa]}, 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040015}, 0x6f617fb3e9f9cab1) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = signalfd(r2, &(0x7f00000007c0)={[0x5]}, 0x8) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0xffffffff, 0x400000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r5, 0x210, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = memfd_secret(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40850}, 0x11) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x4040014) openat(r3, &(0x7f0000000c00)='./file0\x00', 0x0, 0x16) epoll_create(0x1) epoll_create(0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x32240, 0x0) 03:13:12 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x9891, 0xffff, 0x0, 0x4, 0x1f, 0x7f, 0x3, 0x8, 0x8, 0x40, 0x2, 0x4, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x64}, 0x1, 0x0, 0x0, 0x48044}, 0x40) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000011c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001200)={{0x1, 0x1, 0x18, r1, {0x79e}}, './file0\x00'}) accept$packet(r1, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001280)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000012c0)={@rand_addr=0x64010100, @private=0xa010101, r3}, 0xc) r4 = accept4$packet(r1, 0x0, &(0x7f0000001300), 0x80000) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x74, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000026c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f00000014c0)={0x11a4, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1124, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x31, 0x2, "ded5c3477e29e2f6e457a242b0abd4dbd44adc0bf2314d7bb1c77c3f4045a9067ef5aa01683c077d86e40be5c3"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd9, 0x2, "4b3a9ba41faebec1339dd4829aa726a3b6e9a1db12023451dec19bcc16995cad3b328329d6341c83cee4ccb3b48cb4abc2021211df0c595973d1d5ab82dff48d9d3274e1e25c4edd025cd9da0d675c35a444c7114188dda75b31d7d4358286d595207570a9f3b1f852fb0b15880681a9bed01eeda6f3838d9bc3c632755366b6b6054cc8f28c6dc0379281120c6612a7ddb3c3c6b50cc1d1fdfd2f2cebb2ba436ae2f96c0d94826f9c3a23986110b5964103a0a7f41f4134fc690016844784bbfca2e3460f714d99d028b1f50c4fcb8495f81f5646"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "e6c431a39996a8018acecc5433bf00a9abae3f4d33626d46701fc885de90f0d0d4ade03dfc6ce1d6c06d263c41a4444dd45fc9abf916a726dc0ba5ce1ccfb25963dd9a784c30b665855dde471eff202b8edc6d4d09f5b3ed9f9cdbf6469b729fdc29718bdf074ce52f4bd64ee31f64569790db8b20b51f7526a90dbb010d08396173d73ef8c1b186250b7bbf484be5594af657e367c34dd5be409aba67463ffa602ae9ecd305d6f7c4a88db6502ccc6039c6d7e0aab8fb8409f42c60f8b68536e0ba082fed8c26eab9429cbf6bbd72d01675ea5dd78fa83343d32376bbe7a3e7a684c0cea560aa658b1aaceda0fe10e44e41f0af80b80833e126d056106a0091f4d1c18c6681567b4905104b1b5bd41e810ad4357e5a3e4f2921237056a1a42f8c7b4ece6806c91f228b5993bb3e896d3761f408bb0034176a45e5985ff649d0f96a0f9258269ec32e1d3984a3df16308346d47ed0ee7266115938b391fa0b125cdc581f148534f43349a259ecf19ddadce4a7f770eaec10cf33e2c630a0c53f2be2ca76304064de365947e23e9cb42fdd185c78190ac4e6d704cc178b5fe542078628da0c3df769588d24666d1cd2f3a6232cfbfdb312305138796261d20cc1eed6f84bc28d1549620c51063a061de26c85ffcf402f15049114737493a03ff9a6ac955fce8083592c95ce2f8b43ed24906454debc4b532df326dd72201652779a05463c78734476f318b951691cd01338d28485531b8d184d46034078060d8e62ececcda28cefc1bfc55c4608b8b15ac6cd7fef755c250a531ff45aa93f860d293403d84fcb7281b13b6e968d6b4615558e632ee99e31a07ce94b9c1be835fdf5b5ea6e1578effd35dead6b7291a4b6c09c298c8182cba514fbce81eadcc27188bd22a36352c1ad7df56f246b75ed999ef58ec48cd76640e9dc2863b1f0f6180d7790a8a9d0704a43b64beb16ab8a741e74d331d0c02b960533836b02e0bbaf1d17af0b034a98427b27865d81c628a351c9621901e1023cf370c8531343407f5543c3f791f2b53b0f0dd4bcc079fa8aeffd8ffc221c56419ac64f3675ca3e4e4e7a5127e4934318d680dc2e9fec768b3d72e5f0f573f84e6a2078b207ee53b1cd400272127a06465aea056efdead723034c4ac45d4ac03294e33c182dac9f57de869c244f20c2b024ff0c9459ba23d44f19e4849057fe53a881917e008dfc3be6171bc9af401a7aa68c3567f7ef07b607c9eb68c953c8191e584e040d16c130320f6a92924aa1ed306d8e89bf734af9d37dc5dda498692bf2628dcf1bb546e704ad88e6ea2a9a955e2260cc43c8217a5ee2f660971b3682a47b69dce621bee7507794e8b705b45edfa88d705da0ba9793c40f20f6ef5a67765dedb7fd470554861c40925a65bf39953b5206f0c8721d97b1bcdd0256d88d3fdb24601ba5bb021118d79b3a1a85aecebf2dbd5248bee4727b754fdbf6c394504fe23e01abae656236bea77e0abd5a5abc26b3b825d0bf36cd1042a1287e985bce5e990f3de47dcf99ac1844e0a4ecc86312c85c1bd030bc33645970a24eb5d702722cabac31beda96565cf8d5cdf26c62d2fa9bd1a1350d6b9c6ee53c5867c1a9ccae6d057d6aa3f4978df5b81488df7b9f57bcbe7087feb1fee0efb755f50c24c838c94581742ed75514a8161a1b6660f81a3b62ca9b7667db72851bcb177fa9be7bb478c5163049500bd987186b6052e7db6e8ad87f837904156a82aac85aad29774c1f124255b5687372b79cd75de682592debe0a44914e0cc6ac1a6a915be9f04f7e6e07f95275a65ad72a11b438ac63b0ba519da77e549a75c66b08be2522b309d0ef7dbfc2287789974393ebcd7ad6305294f002ec450bf898046b1ca230f39f6f8a42603fac4a23557638da5308a1e120ac8d37b5e95ce359a223eb3179988929a6a1faa0e5b48ecb4ba2435b430111922386e31bf874bd0f0233812e414dae9ee826f760fddafe8eb83b351c717ca99452881b7edb8f4d7b5eba96b1c93cd035c164f0e9bd54e00b1687af419b921f2ed1ad08e125ce66ba769c29cf8def9a7389db1b291318bb29f9671a3b410b66abc2fccdf1bb21a5fa1a037c4af56f5f230bb0a8eee0c965f0c70da36e937e9ea9719e5bf1a930c0bdce38f39eab59e0e73d2e452d2facaf7055604cb758ae2cc18613f618c88f281e3f54597ad67ac5cc98d6a520bcd00ac10c5903470c288d058a68ba00c427d68f3dbaf9ca98faaaa0a7ed51d6f57aa2549badcec1d29ff0168163cd7bfd7c7f90de4a268ca90a5c4ce0cdaeb52fad0e8ba49f1fde1d5ebd0517fdd9a205d363fb0490b7417f331bcc8879aa5ef6705568d4b7ef43998cc00baaeb93c87527ed76783df81b06027087dc3f81b6306fdd57ba2b30c7ee4efe9d48cd38273f446f14e673f7c674564ce23abf467e46f54bb399ad5256ff379ca486dab1c4f0016c70b07571a70627ebbe827d2c177a9a7d2742980b3640613b462b8babb8dcffb4eb5017dfefe21012f6c0b47bc152f3c2326f74aef3104f000d90f484c2e447fe6c31cd5ae8af03f5b922e9188b29762799a4f55977f88d537344911e45620388356d91f3e5de70fa7e29afb41097fb53505ca38951f03bd958bafc7eafe3cc26ccbf2cf9a8c2121e6e2e8ac64322585399a29282d2f059b4bdea883bf35fa563699462c44281172f9c82d7c002299f7aa78ef05e3217bf85b0bc8b65ef5aff0869c3f16a103738ec5a4e0b1b3002988d63bf4290f0cce7331d1503e57b1323b98f8b956cba506768a54f337e1ddbce1faac739cf3ad785f860692ddb4ee2f3f45df71acba394adc684db7e3bbf9ffe9014bbf591f323bfcc4e46adebf796b805dbe1d959c47320a6fcab1c65591dbd0acb62ff697b82013ee493d995a19fb9be38ce99442ce2aac289e8ac1da7db9f61f7d34c08abf405bfc8b5f0ead3accf6041ad21404ee747a06f23ed7fff0ec8044f4300f097547d2a7c0c85a15d4168b91189404234bbd11306770019ae5c934c7c3d0bd44256fee3947224a38ec24a6692edfc1d695dc6265d948fa8e8c36a767fc2a7b9c07b0e1ca9f53ce88429f01ea86288baf72cb2602d9e1e625b6a0d43940792b33cb0375f7dbe0b8718ac72395bbdd5df49fb192413eab3c9151811bf6e1eab737a091d7c80a318e573e13fb9144b7e7b4e6df35270ea037cc1bf485cc915e66e652064a971606f36a0e78d650852a40097f59447987dc8542c67641fc00712a1380371bdffc9d343949d7cc1e14f6ac5ddc1dee37993ea47ec96db7d47d620e033547f5f5964aa611db93810227d54f31ed3efc43235d208556e29f6a2e9a86780b0128ddbeadfa64ceeb3b3546722f0e2b76763eb2088470451039b189628336273cbdea40b0bc2fde64aff7e4997e473564ca8067d8abfccf4f9d41b88477405e6b1397aeea2c50afc5bafe401c68d9841758c3659a94d707f8d506b5bfbdaab22f61b2b2a1cbe461780da02b0f14b855ece958df8845ea970f01bdbfe30b8cfa3bfd70e9c16b718ba8b8b53d0e2fe048128a9ff58631b0f136bd7480499b0830df3b40f0c4ff2d7b0b7a220ba7ff6959e1cbef78c8b9f494964e1245ae394cd8f28b16c9c5333675010e3ab6563dd019f7c270d2347f11f52ad27992b1ea5ad63ca4f5c977f293ad08b397462a1d484e12b043ad7a059f10c495ccc180f4826de902e0ad011d99f1d7405d88c337cdaa1671f38f85028b409e98f2653c09e72e3e65bf7c4c629d6ce0f4c69a1da55160d4655c75028a39e8d5842c2ca4233e88906055df7686e5c9c653b814cc8865b5d97106d586e91c3d2f09ae2f4f25de2056be198bc0b069ed938aed9bbae20967c460c922b33bb0ad9540d071e95439274325307a29c0320f3e79309d80b9a1685ca1d6b9e450f8a83310b4dfb8ab379029dd2af3c30e7450f220449c0cf80dd457e21422d6eab5cd5045ba9c37dbcb6dcfd8a7d0303a44bcb72c09efa2a2d9fe6a34c9c2065685b890f7f0246d8ddd61f1bfcca2618bbe24f1bc16317965d1390b63b29501430e8833d544f5ac11704e98aac749a1e51417e7151af6028973dbb16289bc3344e31033d340cfb2d6b805c6f56e91c3bf4c630dbdace8129ae6041d76fffe20ca2b0b23b57229a921db9956c9fba61b1365cd69d7ab027bd6117c84d484b300fbdcc8693181539a459367deb730b3d0ebb80878654f215e5e5055969571211030f57a264413501ef00a4525afa179dee21a155d8d2469ef318a9ef2c48d0925269081ad7f31b414c1180c7cf350c0e534ffbd623150d048912f4ee8ed42c4879b166d25f9d6035ab6ab3d360994b6edba4b2ddaf171cab0ef30b85627b72f151bd154be75ebedfb2f9c14fcdb1d8b2d78e22d714635ff534dd5f0ec90b552d4127cf4e2653c60cc8196b0744b5376952ebf1a0256e1ecf5166b511a872290039579ab65f95ac8304e626667c82c4fef69b9e51f6d8a960c83f0afc736c8a210d5b57636864f5ed36c7022a8133f76f0b47834bfbbfb9d46f16fee4a997676acbb242a6236982cf6fd43fb7e648185d099ecb408c6b9448a68efa9d8d247b5b65b2b57a16bca8c2a468c8fba5611bd83ae9cd66eecdf31f67051deaa8224a30418cbef9a89b9c98d2eb91aff48a403900bef57d46593fe3d7a76f27d83c9d6aa02722fc61060a0f626b1850d02790375f188a9f7139490e6631e6f9eff2b47f29e68e16dab625b1fea1774dd87a1e1f0472a0fcdef126ba69c97f9b5d29401dc2520153e2526edaa8adeffce1683796148626f1527024858da56ed92896e29604afb0f5fbdf319c7c0833a29c25852ca485231d76ee9fd6b0a4dcc9a308a33a674224add1091f824eae4e16f94d8292ecff9a6324db7c9c3a4a67b855ba840b9ff3cab0a04b0a8aeb740089811e3175bc1d20c3f7c2d9bb669d9f55d0821b4c9b4aa1f8848966c1b426db69e47630b7402be38154e54dc27114baa05b9543288afbac08be1158852d10aa7a7a62940b76ae535c6458c349f9faa3eef83fba4ff6cd3588856b82e43d0e155aaad3799c1630beb941632befe467c481b7e238a336a6bafee0a64b380f0a8441f3f79092a0cb3c56f9215528ca98909386b91c60780c8d88fffa3272cbfa814ec06937a36dce282468ff66e7ed9d9c7ed11db0b1477b68869eb2a5cff03178cf626405be4ac78d601d188a408f878da61e1f26d6e9c9d10a6c25be52c081e49a8b8bcb7ab89a29390120fe546fadbd07225e6ac3cabc3dc0c6fad834b59541bc7d9d23d6f78193f02ebf0a5be19085a90bba1e6add56c38069a455de918d040bd8a58101e8399ca8d12dfa3ef0cf235ec67e974e02978f4bf65ac27499734f4bd452f45e600e4797b867e5c7ac2bf54401e1cd5fbdb94476b5f718232e39a29a37008cc3eeb21db1f429a4396337aba27f163edf4edbbac565fa35c058bd6369e2c3ca739d040d99cce3c5a24d1ce53c643e37e22f6fb4d4f285ba38046c48851dc6f21d2f7d79d3d23fde1a2a3b22697b6dc3e7da80ba993a72fec94305fe6c9671450fd9d21ad9cfe7c11bf1e73b68c216e33f94c8ee581642ca78e206d566103c2e2b499ac6bffb92e0281c402d41c3dba98dccb9ee1b9b7ffb97025faa9e7f69e47f59e1ad8030eb8065da147e7a5350232886a8879fdf504b8664253321ce80e6c2f000643a7ef98b16737e46a7148bdfe8540cd76da1e0b038ed4ed61c9c5901843d9d0ab42762e70cbef13b94f6686e94423"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x28, 0x2, "b6aeb68604e918018bfcd7efb326d0fbaa3bca6e5136dbf0f25ec457f491ccbbb2578f2c"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x26d}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0xc) sendmmsg(r1, &(0x7f0000003500)=[{{&(0x7f0000002880)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002900)="e34d0306ed6f09f6e440", 0xa}, {&(0x7f0000002940)="828ad444561ab298bb045a9ec2783ad680eb00dc0168a8e535a7d28561a245f4211f3845c53b6e0d523a0ed151ec84b99516c57e767c4e9721055d90dedc5428231419bf5aaf8170a28e3ae8752b3e204e38bc448b5d35eaff63226bba094717a7a1942b19fc42e9def45cd6cfd0bc28d6d9834d8e3bfb6026d33937ff14a07b8231149cc13b1baf5f688483ff755170a5b7ee359980", 0x96}, {&(0x7f0000002a00)="a09cbaaff230b64fcf13ff50e158c482403f2bd67d2cba5f7c198b336ee6c2ee762c282d1e357eb8d7f10b15b637106635065788bc5b9dcaddc6dc3426098d1588a27576f7128c5625f8676bdedfbaecd4f5581a1108af1095542c60ead760a4de26382f9a4f3144217539e35347addd07ba5e1b2527bfde40885a8523918db7c607e872b0da049b110343b6", 0x8c}, {&(0x7f0000002ac0)="5c64179e74755c955aa7097c69712aec398167228b1d44eaddcb8e5c4c5d5112301c2d499cb7d586ec49e79aa76558a6265144c0ec5e4440ac4a0fabf8b12d30953b2d90bcf1e5370a0666eb1faac8fd9b358388054847b6185a746c55bafd8e3b83cf7c6284c7abc8039fa241119b0ea5b0aa3607f8d1263ff55590bd2d2028a5f2cfd0cb276d96a34117cf679df111c6343e4194381022c08a155838446b5e59a42f7d4057c4f77182a1548887f2a2b44790c88161ab364e82ce3b9c820b7a3d3a0735bf63dfcd4f59d8b7129362a4e8578c00cd484e1695a17d342da17421e53debd7184c5063409a", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c00)="b2cb74e59cb24aeddea9108359821a76bc180551171060b40ddec74b6dae30da56dde1be7f4fefb6ff9c6bdacc20035a0b6eae3ea07957f3e8afdc5f534bc01c27006d06e94e5810c18d3db55afe14aa80f007382735c42cac271114a09763d867c08f3202e50657424c2c278db71b37aa06d5748902dccdddd9eae8a3521f949913ae59b7acebc0e2c2f952c3823d9ddf991f624618205efb3ae1edf3171f8bc85e89da123e1438376d30cba986cf05", 0xb0}, {&(0x7f0000002cc0)="115061e7fc44d8a49434a59232", 0xd}, {&(0x7f0000002d00)="91e0d34629861f6390a336510a39ca8f3dd3d151ed3db867bb0463981adaf5b628f0192e9c625829986b58e5e528", 0x2e}, {&(0x7f0000002d40)="fa03ad92ae2db0a214636297126619f64dca093b32a5b3353e056782b6095331403a7d28b4bbde378ce698a319318efd64a46786ad744aa52a279a04cfaef8f2c72f60850b2cfd55b12dc4e281449e498ed2bd796921922fa60029c7d6861c922da82d98991b126146e8b6dbb26962b7122bd0d530f0dee3298bf3c7ef05", 0x7e}], 0x4}}, {{&(0x7f0000002e00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002e80)="f09c9ecc92f2b974e0a75c3a26483ab6833bc1e2b0662e3d9835a77d6a5fab69a88fe29f867ea686c46b6ea732931b23ad5ab9581b7bbf4a481a9f238cda94a7220489ab105659077a4171b02d5e92c2e016020f3eb2598c9c4ac82960752bb2dc02b46fd2870ffa114643cd7695db2d098be9aac0de9586bd", 0x79}, {&(0x7f0000002f00)="c0c78a7c1e192369179b8e1dc338a80765f50e73bd07c78fa671ba453c8bdc872e3a27e0baae127f8bb5dc778800f6ef57", 0x31}, {&(0x7f0000002f40)="24d3aa4ff0f2dc", 0x7}, {&(0x7f0000002f80)="5f6587dd07cf10f290d07c4141ddc502023f5a9ecad31302cd595cea9af2135817e8288730f4b1dc934b6cb94578960b42aa9e6ce4615e73f3b7ba7ac773e0ddb4f73b4b92596549a4d1c4b5547e4e3f4acb9a82be55d4fc0b4d0b336b1068c856389a7994fad3ab3b2fe899b4864d59c3e532c55ebf14297fe9d8adb36bb3719280bcd32a7efc141b488b1d60c5a28b67cb4a1a92afdecc0b5e209a5835d4571a5c99d1b1b1577a2ab069f55f454d7f0dc27b24f7694fbc9bd4d118a02f580d", 0xc0}, {&(0x7f0000003040)="69adfbb9d1ea7384d31ca9bef5dde4fd694e59824124307b67fd761a07104c9c9a9aa0a550e3f5218744016ec2aa4017d27179ebf379a2bd5f862d65c5b85eab5cc3db21fec86077e00c0bce561888fdf236ecb43875f34e7644ee70742fb3e26e022d6b2569e74faab5a32d45fdca1d668d977668e5e77cadf3c3a14ac620e12b527c0478a482b41f1f2ef98d52fe9c66722d5d35f89dc48be4b404596c48214caf83375541aa9799052989d1eae968417abdc1aa3157c21642e1", 0xbb}, {&(0x7f0000003100)="d54779ad159bc692e2a0ead98341e3617163e55f1e45eb19504c1ab4a073024a1c699b94834c7d989e51d90f39dd309241a4d38834ec185cda169733f77af4fc7821268ea0f8315c2252789f659bc7b4b3b9d78d5a55722905ee441d65c45e186abf9111705e0bec3587d46e77b78bb73daa2e5c7b", 0x75}, {&(0x7f0000003180)="22a87a14e14b37ec0bb542854d7b9f634c29cc599874a8932ef48789cc670ba8883e0c67c97b8287d84f876f5406d7a28c8edc930826187b95a8f0e1bf3432b50f5809f0f22e0acc2c054447474689e8719c59247cc3983a1e812432764fafc8", 0x60}, {&(0x7f0000003200)="5012ee58f2d9dba335831fee0574de0569aab60699c6e6eb1fc28605af9d94318c1981a1b9127199352c9a54f59e10078fd8ed619113412bdb0c888e7e4d5d685eb961f5da9cbcf53ec567eabdde05a09902e0becee59e27f1687f58caa4d1bde9770134692cba39cd5be028484574ca1d81513dda2f3d80e6a2c9781b34cf05e352d62d477187e356896e70bbb5224f09", 0x91}, {&(0x7f00000032c0)="2963845141ef3c69690cd0e00943ced2e7500e5ce0b3f5e058c91807bf616059f96730acabd40917743564", 0x2b}], 0x9, &(0x7f00000033c0)=[{0x10, 0x107, 0x2}, {0xb0, 0x104, 0x20, "e1f1952b081df38b52ad0f3664182f4391870f1828d6979d0b5fb4d94be3fe77be323bbf2ca5d0238689427cf6e57a4400547417104075819d1f6807e1f0cc1290e9bb94e153eb23f4da1ee5ba7b34e8188ae7efecff484ad4b95e7f6bd679ff30ac957f3b724b04ca3023b482723f94a7e0852c11336c7c965846b3f376022f229bfa60888169ea559d5c4d06ef314daa28bec002623dd7e67348eb1e"}, {0x70, 0x114, 0x0, "b7ac3d68c61321a9eb9581695c5abb1fa8892535379eab56e7029b7588c108cfd7f07dc23c4892ff18d48e6dd508bbe5df19e77361138c239691cdcc52bb6e604bff3a565cd11b8ebe4da4066639c6ad032f977a5aa9872725fbd7b5"}], 0x130}}], 0x3, 0xd000) r7 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000035c0), 0x2, 0x0) r8 = dup3(r7, r2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000003d00)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003640)={0x664, 0x0, 0xe3d, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']).!]*#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe25}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x41268b2a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*w\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'^&})\x81\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "8d77dd99297f23596d77fe8e6602c567f9366545cc289fb6c342606a2e92c210352dad13c52043b895ecb64d2b99b5"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "e3ccf7db843fb595a04d6bc1dd5e7d4199941f6076df1d6a487a92f2f538d512867302f8396b176be5112023048bf5ecf4ca0ba8dfd3c34187e129dda10f3c05baa7"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "ab2c31305ca4449547"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91b2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa61}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf2}]}]}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "e73fdab631ab0e137653dff5ce6c48f4b18265514c36035c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ca0d85}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#@@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "97bf801238a2cfab0727fe959f06bec4f887d5a212402547cec629678fcda86b074ef48ad12c35b0d4dfc1dfacae02bd5b247b13f52768727471942fce312d84b77ac406b0a23b62c25a6d9cf2a5f0925fa737829340e80af4063466391ee8707dc2989c55e27f4bc6cef44b2cc41ba5856f41fda4c0677915fa8ee045432bb13cdfc912678082f189f27dd73959a3a6d678b37504725258ddd02781d656a25f"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26ed0671}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}#-\x1b\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ctr-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x448c4}, 0x844) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x44, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) r9 = openat$cgroup_ro(r2, &(0x7f0000003e80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000003f40)={'ip6_vti0\x00', &(0x7f0000003ec0)={'ip6tnl0\x00', r3, 0x4, 0x1, 0xdd, 0x1, 0x30, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x1}}) 03:13:12 executing program 3: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x98f}, 0x4}}, 0x18) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x800, 0x1, 0x0, 0xff}, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000380)={0x10000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/146, 0x92, &(0x7f0000000240)=""/185, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, r0], 0x3}, 0x58) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000400)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x800) write$P9_RWALK(r2, &(0x7f0000000480)={0x16, 0x6f, 0x2, {0x1, [{0x80, 0x3, 0x2}]}}, 0x16) r3 = open_tree(r2, &(0x7f00000004c0)='./file0\x00', 0x8000) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000500)={@empty}, &(0x7f0000000540)=0x14) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000580)={0x9, 0x1, 0x4, 0x6, 0x0, "52fce22afe56fdc20ff39925d89ec9a9f9dd03", 0x9, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0xaa8}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000640)={"1b216ee9c290b428cf58ae99f0d5b2e0", r5, 0x0, {0xcd65, 0x2}, {0x6, 0x5}, 0x3, [0x2, 0x8, 0x76c2958b, 0x6, 0x2, 0xf1, 0x8, 0x80000000, 0x401, 0xe3f1, 0x4, 0x2, 0x7, 0x5, 0x7, 0xfffffffffffffff8]}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000740)='\x00', &(0x7f0000000780)='./file0\x00', r6) r7 = socket(0x29, 0x5, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002000)={'wg0\x00'}) ioctl$KDSKBLED(r3, 0x4b65, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000002040)=@generic={0x3, 0x4, 0x10001}) 03:13:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x2c}}, 0x24008814) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x53ed755df04782bc, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x51) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r4, 0xd20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040001) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r9, 0x624, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 84.328284] audit: type=1400 audit(1667358792.268:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:13:12 executing program 6: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/4096}) r0 = syz_open_procfs(0x0, &(0x7f0000001140)='timerslack_ns\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = accept$inet6(r0, &(0x7f0000001200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001240)=0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[r0, r2, r0, r3, r0]}, 0x5) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000001300)=0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = open_tree(r1, &(0x7f0000001340)='./file0\x00', 0x1000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000001380)={0x71, 0xfff}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000013c0)={0x9, 0x17, 0x2, 0x3, 0x7, 0x6d9, 0x5, 0xbd}) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000001400)={0x896, "677282859c688b66ba936ccb563e8df77874bfa5d2e85d2300a20c0d1856e1b839afcdb2012ee0159a7e0ef5ef59da54990da9785b7922d0448e7d5e20067bde998480a85af90d7a59ea58a792148652541ffaad22a44f6577c40f80368aafd68453cdaa959d3d212e5100d95cb909fd74c49d0ab4b446fb94a652f09c3582c77173df33b861994d996b62ddfed53f0bf6a560566953cf62459dd149d12d893cc6cbeecbd92bc5c1b28c3dc34846207fdfb8622d5cfe028f11d609bf73b2dcd9aac38d4f94d3f5e4fc4235c3e00b4059023c1577450bb60594eb6813f5fb6b12db8ae077ca105982af4452caaeaf9cf5fdcab0053e525a0d1d296936d6bc188f02e3d8c4e8ba33c3a8de6da0be3119e169bc2334f02088e67d192b8576e247b7a241dd160348c3188948c470eae1a3e79b0b12ef6a91e442f412d9694f27051e3cfcb47bec222ad70fd3c7c123cc295344ca0b130c8d42f9b897e7d619fbe89914d29827331eb23292bbdd1e55c3a7dd70925d43914ece82175112a19c8746357fe20d8f1125f37036c42eb055f7012f3ba94fd43bf5fdbc2400c3b15786d705c28146e307db974102f01616c579129beaa3be4c111e769c0879d70e1191d9a7c8375b76766a08691ec4d38b2ff04be566ebe246c89854fe4d32107f8c49307f989556bccadc8b563aa35a433c547208c35f0a9fad00327de73b5f0942635b7536c33665b644ce74b4ce7d57c2fedcc419aa8f564a6cd975a4cc4cebfde4ef7e88834e840352cc0f778e33c67b82da4fa499728d3f5faeb60bde414cfc1ed105262b266880457f7c466a751cd650f189492561082287898f9a5aef82f2da9b91c6c650a87c97f3fd8d24623d15a7f2600dd4786b0f9141b3d49ec8f674367ce08c3e445e7171646801254602fb76dcdf42295a690833f537feb3224fb7d0d69ab3bc52aace486f56a67ca856c6ded92b24bc2f698757410f0512704da1745096efb74e53ea4f3fa4ee095334c71b8e4e6c66410f2bbc659d1070b570c1b1b8bd59461e9aa762e6ed69b0100e55cb552625f8ecbf10993fd0f40cec2c70c59138d4b22ae3ca72c1e40924fea74f62e33b2d99f19264b8d3df4bbe8ef10a9ed78688a7fa23294051d6b8d98f2cf73d3df2bb9dfa948fba5861fadfa228c1e795b6d984103c9d99e15dfb5ea8f0fb9914ced0d63065bbdb529da6afa04cd9efe0f36d22e94ac3564a326e08faaeb30cbb054de9fb40c8047d7116b8aad81f5c5e95a1eaea7bb4d3a9cbfb990eb3d8181d17ec9f2eaff055b3597bda8f9529009518dbf7a4478b320b050bc674461be0241a64bfcf5e37104228ed8d53c151ae77edfebde462873a89d3cae330c5114851c1284cfadfa2b8d256f600abefbb0d500e317af553351f2d9b613f210b67c2e0f367a91a5a90a41e0aed2c6168952cd017a76bdbf49aa7da42c00b22b2a582617bdb92fe3c02410fca5ee13310382909ab72881067fc6c22f2a41e49bde255843e726bedc2bc7d3e9f09c8591c7627bdd687115ac4711a1092045522de7d33f05815e424be3dd016c8985a68ea53570e4b92063ce7a98950066b2407634bb5b4f99efc7834b79dcbeeffbbf4f792a38b43889c6efe939514f5ff497e265bfaab022f147829da628ab5a93de50bd2a91e44431307aff470d2fac3f1f666e61a8adf3e3d00c6ce15c2a65ffa486720b671ebe1b5674bf62b0dcf4c50ca6868430f85c17728f4f4c9ed5e7193daa5fc8d29deff6dab6c500721d47c3d03a76597ed93378ce3fe862b562b4e848ed8dc3e5c94afb953e9a2fffbc487958227476e58f4d4d6d5634bdcb7e0543158c426f51851332ae5e98c41e5fdd3b115fa2bc7777512b4983c2461093263598e0b6e9a13dd8491069524a26ba74f19d7aee7cb4ee2ce74d16a5eb1eb059ef18193a40e6cc40b40c8ef30ffb420ed9701b74c36923ce58399a09f7c699bc4f9151102233c3da09820a274087384c88fe7ec35d09546e18330feb9ebf70ed5a172400df0b08587405116c3bcc08513522de0a4e678ef1b7478c28a460d78a9643dcf55c60ef7012788c31c194831af59a9fc74dcbcbfd5ddf63050749c2488f729eac5c7d8b16fabf2dcc89d95e9f78047b2be1aa5167d2d1c9bc104609cae0cd22ca7fab0c88adcd36f31923061f1c3caa9b90058c1547f188bf9e527e952db57d4d6be5c57b1b9395c9dd5af82c385f7690d77b6419e2e0988a15e98dcfe7ea0d0087cd6a8ef0807cd5b51fd6a718465f6cd4f8d7a869feb963943ad59d4b1826cdbb8e2f54eaa686b1239f3ac10c1a32615068a48560a7cca303fc9130220a83ae156e205c4f5eb950cc26e0db90eb7f8678661afa88e5adc20b2a77c4c21ab5d14f3a61c583c48a119c97efc63f880ef74fd48c66aacfe8fe6d98459e07b3d8137b3320bf6575b224bdb4c789cb1c788850ac0acf3795b3f60e80847eca4513b9fff20445c43db89c664699c6d071d84e571c908c5e8d5cd3f52533f26dc8b195cdd5ee92a84dc100c94fe248da572b94732d9ee068aa2a185f3388f5c3a2bea602beb3a76bcca0fb707b574391d44c017e5431dcedaad2d268a3320169e2bf3f73656b6ae499a5a8fc332151901260668f50f0d35d3068ef8b27d4cee005d413429e43d34da888e96340735ef57d8c9db33adb7cc230db447ca1a48de6886ca1c2e57be723cf3080c163c9dc4171ad40259ccf5ba5d310ff716f5d267481925927a63e641ae237f7f8b5af79623d0932862d6759129a7a65305ce1dede58b24fee0c25406329b2e8e9bfa72f1e1338ab8caef178e8ff7fb9eb5761172b2c3c9acc2476144141cd048d46cd0d6d491870c344601c88d419475bd733f3ddf472b7495f7514817fe9889ffd8669154bd3000d5cc795da3476756190ca888cb75c8805629da168e4ebfbbcd25e8e905369fc61cebc1176ced1b83542b3d6b63080987f096b3c9c0b675cbbb742aa05d51e90d9d4dd3e4cbe55c5ef05fe122ec2ecd0019be9ae90842382129136f10b9a916418ceb38bc4c668274bd1d5a10472baf88378a5e700580ab89f74cddcdd5d19341d26ff5ec7cc59567a5"}) r6 = openat$cgroup(r4, &(0x7f0000001cc0)='syz0\x00', 0x200002, 0x0) write$binfmt_aout(r6, &(0x7f0000001d00)={{0x108, 0x20, 0xbe, 0x2ac, 0x29a, 0x18, 0x333, 0x8}, "991c15e09ad0b40d7a2503bd0dc2302029aa2a500d71f0ef9ff03c82f050b9f28231a57ab3519e3e102e5b5ef3b9d737bdcfbb29bd5c61fd46a6e4720e59b8e2ced5f5e332e0c3d0b9c59342a392a95a5054fad240021d5471ceafa7c315118c3a41d59ee7614704f3f6b380edf0994489e7ed7b51f95c9b9e8ef5c81efb9a072c76adc66c867758c1dbf1f05d14ed8695a6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9b2) r7 = mq_open(&(0x7f00000026c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x2, 0x220, &(0x7f0000002700)={0xffffffff, 0x1000, 0x100, 0x10e}) fcntl$getflags(r7, 0xb) 03:13:12 executing program 7: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1141, 0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000080)="17cd9721e6cb7ae9cb221353de9a3b60a6a5cac87383955276cc58dff0272e8a257c7dee657de5983f9d564ee1cf8d6646feaad39f9e404e8fde8d17692055b70a1d69be8d0673ae28128cfacc66590c7ae3b732aa353cda963cab5ebf0294f2c32ccffe8f9dede3e30d72e77b6bca709298308213a3f9ef0eaa", 0x7a, 0x9, 0x0, 0x2}, &(0x7f0000000140)) r2 = dup(r1) r3 = dup(r2) io_submit(r0, 0x1, &(0x7f00000011c0)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000180)="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", 0x1000, 0xffffffff, 0x0, 0x1, r2}]) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000001200)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x301002, 0x0) io_cancel(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0xf, 0x7f, r1, &(0x7f0000001240)="7b675be72a8c05d40cf024fa7f0d9dc6bdaed31bd21a0796b56c7292cbd52c187847da6dbd7b12e8668be095c149126d6607a9d35b5b46a27bcf373de11e39ecfd49ff97f8c42c95870a0ac9f9eda50efbe2ece10b48311ade036a758372e241e2cf1eb84bbf2e936aa90887a057c8300cd98c251877e5f1ad66b62217ae9731324c3c59cbce978f0930", 0x8a, 0x5, 0x0, 0x2, r4}, &(0x7f0000001380)) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f00000013c0)) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000001400)) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000001440)={'veth1_to_team\x00', 0x1ff}) syz_open_procfs(0x0, &(0x7f0000001480)='sessionid\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000018c0)={0x2, 0x1, 0x17, 0x6, 0x55, &(0x7f00000014c0)="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"}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001900), 0x80, 0x0) poll(&(0x7f0000001940)=[{r3, 0x18}, {r6, 0x80a2}, {r5, 0x2010}, {r1, 0x5000}], 0x4, 0x3) io_submit(r0, 0x1, &(0x7f0000001a00)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x3, 0x200, r6, &(0x7f0000001980)="c4e57a", 0x3, 0x10001}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a40)) connect$inet6(r2, &(0x7f0000001a80)={0xa, 0x4e24, 0x8, @empty, 0x100}, 0x1c) [ 85.678458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.679911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.681628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.683398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.684980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.696202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.697138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.698231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.699467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.715650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.716748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.718875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.720719] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.721771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.723848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.724933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.725875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.726810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.727853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.729657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.731150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.732118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.735138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.737373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.738657] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.740184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.742881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.743975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.745953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.747244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.749037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.750214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.751678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.752618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.753595] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.757174] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.759046] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.759763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.760678] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.765867] Bluetooth: hci0: HCI_REQ-0x0c1a [ 85.765989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.767814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.769049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.770829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.778698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.779865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.781397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.787269] Bluetooth: hci5: HCI_REQ-0x0c1a [ 85.790627] Bluetooth: hci2: HCI_REQ-0x0c1a [ 85.791389] Bluetooth: hci4: HCI_REQ-0x0c1a [ 85.791393] Bluetooth: hci7: HCI_REQ-0x0c1a [ 85.796732] Bluetooth: hci1: HCI_REQ-0x0c1a [ 85.797428] Bluetooth: hci3: HCI_REQ-0x0c1a [ 85.828743] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.830187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.834982] Bluetooth: hci6: HCI_REQ-0x0c1a [ 87.793965] Bluetooth: hci0: command 0x0409 tx timeout [ 87.858031] Bluetooth: hci6: command 0x0409 tx timeout [ 87.858652] Bluetooth: hci5: command 0x0409 tx timeout [ 87.859151] Bluetooth: hci7: command 0x0409 tx timeout [ 87.859660] Bluetooth: hci3: command 0x0409 tx timeout [ 87.860134] Bluetooth: hci2: command 0x0409 tx timeout [ 87.860622] Bluetooth: hci1: command 0x0409 tx timeout [ 87.861119] Bluetooth: hci4: command 0x0409 tx timeout [ 89.841664] Bluetooth: hci0: command 0x041b tx timeout [ 89.905850] Bluetooth: hci4: command 0x041b tx timeout [ 89.906712] Bluetooth: hci1: command 0x041b tx timeout [ 89.907417] Bluetooth: hci2: command 0x041b tx timeout [ 89.908196] Bluetooth: hci3: command 0x041b tx timeout [ 89.908928] Bluetooth: hci7: command 0x041b tx timeout [ 89.909658] Bluetooth: hci5: command 0x041b tx timeout [ 89.910351] Bluetooth: hci6: command 0x041b tx timeout [ 91.889606] Bluetooth: hci0: command 0x040f tx timeout [ 91.953625] Bluetooth: hci6: command 0x040f tx timeout [ 91.954106] Bluetooth: hci5: command 0x040f tx timeout [ 91.954537] Bluetooth: hci7: command 0x040f tx timeout [ 91.954926] Bluetooth: hci3: command 0x040f tx timeout [ 91.955309] Bluetooth: hci2: command 0x040f tx timeout [ 91.955714] Bluetooth: hci1: command 0x040f tx timeout [ 91.956112] Bluetooth: hci4: command 0x040f tx timeout [ 93.937620] Bluetooth: hci0: command 0x0419 tx timeout [ 94.001695] Bluetooth: hci4: command 0x0419 tx timeout [ 94.002091] Bluetooth: hci1: command 0x0419 tx timeout [ 94.002446] Bluetooth: hci2: command 0x0419 tx timeout [ 94.002857] Bluetooth: hci3: command 0x0419 tx timeout [ 94.003223] Bluetooth: hci7: command 0x0419 tx timeout [ 94.003603] Bluetooth: hci5: command 0x0419 tx timeout [ 94.003962] Bluetooth: hci6: command 0x0419 tx timeout [ 140.721436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.722400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.723671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.787123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.787887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.789166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.980163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.980971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.982436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.191443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.192878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.195396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.006600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.007752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.012239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.146163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.147280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.149692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x9, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ed8d6543a5a8d727e8dd300bed4d9b7373ca0cde78b19ac0fb42f80a764f70e3f79f68fc5b2389a5329fe1e1d5be5a4cea634c634dd155b53fb5eaf2a09188e1faecab013acedd3d42c5edb589b3509e0439e9"]) [ 142.575737] audit: type=1400 audit(1667358850.515:7): avc: denied { open } for pid=3750 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.580425] audit: type=1400 audit(1667358850.515:8): avc: denied { kernel } for pid=3750 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.613077] FAT-fs (loop7): Unrecognized mount option "íeC¥¨×'èÝ0 íM›ssÊ Þx±šÀûBø [ 142.613077] vOpã÷Ÿhü[#‰¥2ŸááÕ¾ZLêcLcMÑUµ?µêò ‘ˆáúì«:ÎÝ=BÅíµ‰³Pž9é" or missing value [ 142.646316] FAT-fs (loop7): Unrecognized mount option "íeC¥¨×'èÝ0 íM›ssÊ Þx±šÀûBø [ 142.646316] vOpã÷Ÿhü[#‰¥2ŸááÕ¾ZLêcLcMÑUµ?µêò ‘ˆáúì«:ÎÝ=BÅíµ‰³Pž9é" or missing value 03:14:10 executing program 7: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@fat=@time_offset}]}) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0xffffff80, 0xfffffffb, 0x0, 0x9}, {0x1, 0x0, 0x81, 0x81}}}, &(0x7f00000000c0), 0x400) [ 142.853687] FAT-fs (loop7): bogus number of reserved sectors [ 142.854730] FAT-fs (loop7): Can't find a valid FAT filesystem [ 142.892655] FAT-fs (loop7): bogus number of reserved sectors [ 142.893325] FAT-fs (loop7): Can't find a valid FAT filesystem 03:14:10 executing program 7: getpgid(0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x8, 0xf0, 0x1f, 0x0, 0x8, 0x82840, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x48b6, 0x2, @perf_config_ext={0xd93, 0x1800000000000}, 0x6000, 0x2, 0x8, 0x4, 0xfffffffffffffffd, 0x5, 0x8, 0x0, 0x100, 0x0, 0x5}, r2, 0x9, r2, 0x8) syslog(0xa, &(0x7f0000000300)=""/162, 0xa2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x8000, 0xad) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@loopback}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/71, 0x47}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/14, 0xe}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/172, 0xac}], 0x1, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/206, 0xce}, {&(0x7f0000000980)=""/61, 0x3d}, {&(0x7f00000009c0)=""/156, 0x9c}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/180, 0xb4}, {&(0x7f0000000bc0)=""/26, 0x1a}, {&(0x7f0000000c00)=""/204, 0xcc}], 0x7}}], 0x3, 0x1, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x2a, 0x1, 0xbd, 0x0, 0x2, 0x1a2, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0xdc0}, 0x40, 0x6, 0xffff0000, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x3}, r4, 0x6, 0xffffffffffffffff, 0x0) [ 143.127524] hrtimer: interrupt took 48360 ns 03:14:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc3, 0xffffffffffffffff, &(0x7f0000000700)="8f2fbb08e0da7eac042fd584f986f1fa5da3528930937376ff6d52906a11814b69351c615d5e80f88a701954e1959d43b07b394aae5b4b3432f24d7fdd8b5144d9af18123cf9a04302abfc16ea7dc0c0425748bc95d3ffcac54af3acf0437c90e6e1be2d4734da1096f2fb95965e83acbdcd25936af000de14fc4a6e34ad33bf72f1410d4825fb1464936907bc50196eb7f1134210db9fda45aebdcdb30afb0f5f0efd174bb7a75d55f05b2a68ec6a5bd829902b38384d36a6b14dfd5fad1b34", 0xc0, 0x1f, 0x0, 0x1}, &(0x7f00000007c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read(0xffffffffffffffff, &(0x7f0000000800)=""/136, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x2) memfd_secret(0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c9397e83e5ca7e7a13e2dbc30cd3c26b1a90bba95bb649877b6deabc90000000000", 0x26, 0x200000000000004, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000140)="bcf3b4f072b97e9c8e5e4369e89892cd3b9aaf8d0633f79e97d0ab5f7d6d5d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9df5e253655a756b0e6102eb227a7c78135a792babdfabf2d7ac9e5df9869c9a34d26bfc396c9c57739f747776d136e53ecd58e57d17ab74e069af1f3b192c7eaea24df505a24a8ad18f1c7d80b65da4f7d9817335fffbb5da20be13db9ff000000000000000000000000000000520f79e4afebe7e9fff92e09efe21d91b76ba30f068f0966e2761c85ac2e707b64ce53ddb4e3e62e8a621387a8138e6de9ea101fe7f62a990ad87122a9b5a7a66bc19ef63700", 0x113, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f00000008c0)="4500010000f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd02d6990828f2337c678ba378fcc4d8c7e48bdeb60547a10c9005fedc12dd0b7aee3fd1e3b6340e2b0e5225347550117b0e0f32f287bc5bd89e4b8d26f2b06e37906cc52009fd253dd26a99370a3d8aab35f683c44c368a6e949803dfbb7fae753", 0x89, 0xffff, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x0, r3}]) 03:14:11 executing program 5: clock_settime(0x7, &(0x7f0000000000)={0x77359400}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x7015, 0xffff, 0x6, 0x81, 0x80000001, 0x5fe, 0x5, 0x7}, &(0x7f00000000c0)={0x6c3a, 0xffffffffffffffe0, 0x1, 0x74, 0x53f942a4, 0x7fffffff, 0x8, 0x6}, &(0x7f0000000100)={0x0, 0x0, 0x11b, 0x5, 0x6, 0x2f5b0758, 0x65f, 0x2}, &(0x7f0000000180)={r0, r1+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) epoll_pwait2(r3, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x5]}, 0x8) 03:14:11 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x1f, 0x80, 0x1, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x4000, 0x5, 0xd2, 0x6, 0x8, 0x5e, 0x0, 0x0, 0x9, 0x0, 0x3}, r0, 0x9, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:14:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x1e, 0x0, &(0x7f00000000c0)) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r7, 0x40081271, &(0x7f0000002340)) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/17, 0x10000}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5], 0x40}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x12}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x810) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) 03:14:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc3, 0xffffffffffffffff, &(0x7f0000000700)="8f2fbb08e0da7eac042fd584f986f1fa5da3528930937376ff6d52906a11814b69351c615d5e80f88a701954e1959d43b07b394aae5b4b3432f24d7fdd8b5144d9af18123cf9a04302abfc16ea7dc0c0425748bc95d3ffcac54af3acf0437c90e6e1be2d4734da1096f2fb95965e83acbdcd25936af000de14fc4a6e34ad33bf72f1410d4825fb1464936907bc50196eb7f1134210db9fda45aebdcdb30afb0f5f0efd174bb7a75d55f05b2a68ec6a5bd829902b38384d36a6b14dfd5fad1b34", 0xc0, 0x1f, 0x0, 0x1}, &(0x7f00000007c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read(0xffffffffffffffff, &(0x7f0000000800)=""/136, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x2) memfd_secret(0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c9397e83e5ca7e7a13e2dbc30cd3c26b1a90bba95bb649877b6deabc90000000000", 0x26, 0x200000000000004, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000140)="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", 0x113, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f00000008c0)="4500010000f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd02d6990828f2337c678ba378fcc4d8c7e48bdeb60547a10c9005fedc12dd0b7aee3fd1e3b6340e2b0e5225347550117b0e0f32f287bc5bd89e4b8d26f2b06e37906cc52009fd253dd26a99370a3d8aab35f683c44c368a6e949803dfbb7fae753", 0x89, 0xffff, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x0, r3}]) [ 143.886946] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 144.050325] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 144.179784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.180351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.189733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.258433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.259024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.260591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.257085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.267715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.269448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.273430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.275733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.279202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.285167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.285216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.287225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.288909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.293982] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.295292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.298930] Bluetooth: hci3: HCI_REQ-0x0c1a [ 147.302065] Bluetooth: hci4: HCI_REQ-0x0c1a [ 149.169918] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 149.361551] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 149.361714] Bluetooth: hci3: command 0x0409 tx timeout [ 149.362709] Bluetooth: hci4: command 0x0409 tx timeout [ 149.363464] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 151.409581] Bluetooth: hci4: command 0x041b tx timeout [ 151.410998] Bluetooth: hci3: command 0x041b tx timeout [ 151.678287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.679251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.680914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.682770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.683941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.684795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.688908] Bluetooth: hci0: HCI_REQ-0x0c1a [ 152.004397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.006119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.007668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.012848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.014006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.014885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.018172] Bluetooth: hci6: HCI_REQ-0x0c1a [ 153.457852] Bluetooth: hci3: command 0x040f tx timeout [ 153.457902] Bluetooth: hci4: command 0x040f tx timeout [ 153.713592] Bluetooth: hci0: command 0x0409 tx timeout [ 153.905679] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 154.033630] Bluetooth: hci6: command 0x0409 tx timeout [ 155.506269] Bluetooth: hci4: command 0x0419 tx timeout [ 155.506286] Bluetooth: hci3: command 0x0419 tx timeout [ 155.761553] Bluetooth: hci0: command 0x041b tx timeout [ 156.082581] Bluetooth: hci6: command 0x041b tx timeout [ 157.809565] Bluetooth: hci0: command 0x040f tx timeout [ 158.129645] Bluetooth: hci6: command 0x040f tx timeout [ 158.513564] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 159.858600] Bluetooth: hci0: command 0x0419 tx timeout [ 160.178597] Bluetooth: hci6: command 0x0419 tx timeout [ 161.206669] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.208744] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.210075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.212450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.215105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.215867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.220054] Bluetooth: hci5: HCI_REQ-0x0c1a [ 163.249555] Bluetooth: hci5: command 0x0409 tx timeout [ 165.297576] Bluetooth: hci5: command 0x041b tx timeout [ 167.345593] Bluetooth: hci5: command 0x040f tx timeout [ 169.393605] Bluetooth: hci5: command 0x0419 tx timeout [ 177.145410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.146060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.147953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.252625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.253209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.254658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.510946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.511553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.513063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.708954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.710467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.713296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.752216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.752927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.754864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.798804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.799949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.802455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.681458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.682451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.684267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.726083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.727467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.730128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.585157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.586212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.588309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.618585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.619704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.624839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.237850] 9pnet_fd: Insufficient options for proto=fd 03:15:11 executing program 0: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'erspan0\x00', @ifru_map}}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x321000, 0xd4) set_mempolicy(0x5, &(0x7f0000000000)=0x9, 0x5) write(r0, &(0x7f0000000080)="01", 0x41030) openat(r1, &(0x7f0000000600)='./file1\x00', 0x101000, 0xd6) set_mempolicy(0x3, &(0x7f00000000c0)=0x8, 0xff66) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@delsa={0x34, 0x11, 0xdefd1cbfe06e82e7, 0x0, 0x0, {@in6=@private1}, [@mark={0xc}]}, 0x34}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@l2tp6, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/86, 0x56}], 0x3, &(0x7f00000004c0)=""/234, 0xea}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) 03:15:11 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc3, 0xffffffffffffffff, &(0x7f0000000700)="8f2fbb08e0da7eac042fd584f986f1fa5da3528930937376ff6d52906a11814b69351c615d5e80f88a701954e1959d43b07b394aae5b4b3432f24d7fdd8b5144d9af18123cf9a04302abfc16ea7dc0c0425748bc95d3ffcac54af3acf0437c90e6e1be2d4734da1096f2fb95965e83acbdcd25936af000de14fc4a6e34ad33bf72f1410d4825fb1464936907bc50196eb7f1134210db9fda45aebdcdb30afb0f5f0efd174bb7a75d55f05b2a68ec6a5bd829902b38384d36a6b14dfd5fad1b34", 0xc0, 0x1f, 0x0, 0x1}, &(0x7f00000007c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read(0xffffffffffffffff, &(0x7f0000000800)=""/136, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x2) memfd_secret(0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c9397e83e5ca7e7a13e2dbc30cd3c26b1a90bba95bb649877b6deabc90000000000", 0x26, 0x200000000000004, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000140)="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", 0x113, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f00000008c0)="4500010000f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd02d6990828f2337c678ba378fcc4d8c7e48bdeb60547a10c9005fedc12dd0b7aee3fd1e3b6340e2b0e5225347550117b0e0f32f287bc5bd89e4b8d26f2b06e37906cc52009fd253dd26a99370a3d8aab35f683c44c368a6e949803dfbb7fae753", 0x89, 0xffff, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x0, r3}]) 03:15:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="07000000000000002e2f66696d653000cefb3ba1c16a55c8cc1f00e8faeb4f58e1cb939803d902e731b89d8352206734539352c6cbc2710026c5864a103a16cb1c0827e68b8a75d5adab78c68c466b8aab350000000000000000"]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@mcast1, 0x3d, r1}) r2 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0xc5) 03:15:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x2000) sendfile(r1, r0, &(0x7f0000000000)=0x8, 0x26e2) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:15:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, 0x0, 0x804, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1000c0c1}, 0x814) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x86bf, 0x4, &(0x7f0000002200)=[{&(0x7f00000000c0)="800a56b302fd4cc611c0f7c23732538b9aec91aeb3a5b18b787dd2599136f90bdeee0f5fc3102124f3eceb34580ed9afe965d5f1cbb00ae5cf47833f77f471c81c7ad4c49cc9a3471074398aa7271bf9862defff4e481134778f010294ee9934506519c824571d3c6053c23b6fcc6f54", 0x70, 0x80000001}, {&(0x7f0000000140)="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", 0x1000, 0xca}, {&(0x7f0000001140)="9c48b4c7e694e7a640b1e942236313ecce1ba37b4c73daf13582ab91bad091b40d256dfd68a20277befdc9cd1a373e412fd45e99a73a1a48d061527ad026c6df326f7b207e858f9f3bf0b031c90f3d0aa41b7c9de4c3310436682cc35748f8238a167d798b5ae35fcdaa9827efdfe77766acae0561f5b773c15972c346a7d22cf9c4212c87fc", 0x86, 0x7}, {&(0x7f0000001200)="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", 0x1000, 0x3}], 0x80000, &(0x7f0000002280)={[{@dots}, {@dots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@dots}], [{@dont_hash}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) openat(r1, &(0x7f0000002340)='./file0\x00', 0x20000, 0x40) 03:15:11 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x1f, 0x80, 0x1, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x4000, 0x5, 0xd2, 0x6, 0x8, 0x5e, 0x0, 0x0, 0x9, 0x0, 0x3}, r0, 0x9, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:15:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000340)={'veth0_macvtap\x00', @ifru_data=0x0}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "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"}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x10a8020, &(0x7f0000001300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz_tun\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\',-:#:-$*('}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa7, &(0x7f0000000000), 0x4, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x0, 0x1, 0x1, [r1, r1]}}], 0x38, 0x4}, 0x48c0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001400)={0x3, 0x6}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x128, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) 03:15:11 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'}) mount$9p_fd(0x0, &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x0, &(0x7f0000000f80)) 03:15:11 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r2 = eventfd2(0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') fsetxattr$security_selinux(r2, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r4 = syz_open_dev$vcsu(&(0x7f0000000340), 0xff, 0x0) openat(r4, &(0x7f0000000400)='./file0\x00', 0x40, 0x1b0) [ 203.304970] loop4: detected capacity change from 0 to 264192 [ 203.316281] audit: type=1400 audit(1667358911.255:9): avc: denied { execmod } for pid=6174 comm="syz-executor.6" path="/syzkaller-testdir722055172/syzkaller.9k8PxR/1/file1" dev="sda" ino=15991 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 03:15:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) [ 203.357007] loop4: detected capacity change from 0 to 264192 [ 203.399797] loop2: detected capacity change from 0 to 40 03:15:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0x0, 0x0, 0x0, "3d1f13"}, {@any, 0x0, 0x0, 0x0, "8b233f"}]}}}, 0x22) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "8cea19342b17838e9d792c21a471025e3bbc672775ce1abaeb09f4adb1c655aeff8b3e6410da7e8cf5f759ec0a11b56ef965cd09e0e66db076a5413039a018c65c7deed8a1d5c3fdeba6fdc82f739f1172e0a2901dd74184fe874c45b6d22bef42c59366f390aca1b390de547042affd0d629da0e31066562721ba74921708c5ffc94298f311e0d49262a13d78475537a56b59ec56a46b7770b797e22172e3ae36e82e39050ecabb26fa8336841b4f70ccc0bd94cc6cc6b331717ba26b0cd115ec6a91d3d18c75109d3a255236c4517139953059c5198198b7f0de79aaf65080215ad40b60e2fb0bb156a0010fd45764fec9159cc46b39f9"}}}, 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04a54a6ff430e758483aa2106000"/29], 0x11) 03:15:11 executing program 6: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0x2, 0x1, 0x7, 0xf64, 0x48, 0x0, 0x4, 0x7, 0x91, 0x3f, 0x400, 0x1, 0x6, 0x20}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000140)="946e16f71166825743423ac8bb3958d8bc89102ce3193e26c15d242425f4072297433503917a64037d20663025", 0x2d, 0x4) syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000380)=[{&(0x7f00000001c0)="4e932cde53a45e845f3a2dd72b5f19e456dfd86910cd9dcc1f494d7022729d146464368517e0ef8f7462d79334f8c05336f1f4f5778b90e7e36f764a", 0x3c, 0x2}, {&(0x7f0000000200)="ed45589daaf741627f59ad5d0a9c3a107b10dc58df087a52b6100f8d04e67a7f53672d7ab04bfbadd3f2d2ead7c31ae3a7b1b9c91486ff555616559c2e8a9f4b23a7e55f24cb625863fa1766cfe435f5c090dd3cc3c7ab637ff536d39083bee179ec77074f36671f9e43cec51354bf", 0x6f, 0x100}, {&(0x7f0000000300)="3df622019205b469431270", 0xb, 0x100}], 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="14295b2e243b6473042c00"]) 03:15:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000340)={'veth0_macvtap\x00', @ifru_data=0x0}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "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"}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x10a8020, &(0x7f0000001300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz_tun\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\',-:#:-$*('}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa7, &(0x7f0000000000), 0x4, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x0, 0x1, 0x1, [r1, r1]}}], 0x38, 0x4}, 0x48c0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001400)={0x3, 0x6}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x128, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) [ 203.602020] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 203.614016] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 203.690871] syz-executor.2: attempt to access beyond end of device [ 203.690871] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 203.782928] loop6: detected capacity change from 0 to 264192 [ 203.969750] device syz_tun entered promiscuous mode [ 204.030003] device syz_tun left promiscuous mode [ 208.241613] Bluetooth: hci2: command 0x0406 tx timeout [ 208.241837] Bluetooth: hci7: command 0x0406 tx timeout [ 208.242568] Bluetooth: hci1: command 0x0406 tx timeout [ 219.569274] loop2: detected capacity change from 0 to 40 03:15:27 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r2 = eventfd2(0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') fsetxattr$security_selinux(r2, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r4 = syz_open_dev$vcsu(&(0x7f0000000340), 0xff, 0x0) openat(r4, &(0x7f0000000400)='./file0\x00', 0x40, 0x1b0) 03:15:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) r2 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x121042, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="000000000036317033eaa0a86bbfa6ae8f02079737fbb893b942111a2921406dc671860ce7abdf0357fbe7ec241a297164cff24b81b932cf19406bc3c397b010174d9ae25dc13dbc90d6a7290ea22a7bcf8834cabc5ac34d639fe49c9c9842d52fb3551f2535e7728297517d5896560b6315c568e2cd7947aa866d29f6f98c962fb6929d29ff3ad4e090f9f591e04b557e3d0803e74b15c0c7fd4119923b2b6ceeddedb1"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') openat(r3, &(0x7f0000000580)='./file1\x00', 0xd0e00, 0x1a0) syz_open_procfs(0x0, &(0x7f0000000380)='attr/sockcreate\x00') pwritev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0x40, 0xfffffffd, 0x0, 0xffffffffffffffff, 0xfffffff8, 0x7f, 0xffffffff, 0xfffffff7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000700)={0x0, 0x4490, 0x2, 0x1, 0x251, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(r5, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) sendfile(r4, r4, 0x0, 0x100000) 03:15:27 executing program 6: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0) futimesat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) 03:15:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0x0, 0x0, 0x0, "3d1f13"}, {@any, 0x0, 0x0, 0x0, "8b233f"}]}}}, 0x22) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "8cea19342b17838e9d792c21a471025e3bbc672775ce1abaeb09f4adb1c655aeff8b3e6410da7e8cf5f759ec0a11b56ef965cd09e0e66db076a5413039a018c65c7deed8a1d5c3fdeba6fdc82f739f1172e0a2901dd74184fe874c45b6d22bef42c59366f390aca1b390de547042affd0d629da0e31066562721ba74921708c5ffc94298f311e0d49262a13d78475537a56b59ec56a46b7770b797e22172e3ae36e82e39050ecabb26fa8336841b4f70ccc0bd94cc6cc6b331717ba26b0cd115ec6a91d3d18c75109d3a255236c4517139953059c5198198b7f0de79aaf65080215ad40b60e2fb0bb156a0010fd45764fec9159cc46b39f9"}}}, 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04a54a6ff430e758483aa2106000"/29], 0x11) 03:15:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc3, 0xffffffffffffffff, &(0x7f0000000700)="8f2fbb08e0da7eac042fd584f986f1fa5da3528930937376ff6d52906a11814b69351c615d5e80f88a701954e1959d43b07b394aae5b4b3432f24d7fdd8b5144d9af18123cf9a04302abfc16ea7dc0c0425748bc95d3ffcac54af3acf0437c90e6e1be2d4734da1096f2fb95965e83acbdcd25936af000de14fc4a6e34ad33bf72f1410d4825fb1464936907bc50196eb7f1134210db9fda45aebdcdb30afb0f5f0efd174bb7a75d55f05b2a68ec6a5bd829902b38384d36a6b14dfd5fad1b34", 0xc0, 0x1f, 0x0, 0x1}, &(0x7f00000007c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read(0xffffffffffffffff, &(0x7f0000000800)=""/136, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x2) memfd_secret(0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c9397e83e5ca7e7a13e2dbc30cd3c26b1a90bba95bb649877b6deabc90000000000", 0x26, 0x200000000000004, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000140)="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", 0x113, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f00000008c0)="4500010000f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd02d6990828f2337c678ba378fcc4d8c7e48bdeb60547a10c9005fedc12dd0b7aee3fd1e3b6340e2b0e5225347550117b0e0f32f287bc5bd89e4b8d26f2b06e37906cc52009fd253dd26a99370a3d8aab35f683c44c368a6e949803dfbb7fae753", 0x89, 0xffff, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x0, r3}]) 03:15:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 03:15:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 03:15:27 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r2 = eventfd2(0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') fsetxattr$security_selinux(r2, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r4 = syz_open_dev$vcsu(&(0x7f0000000340), 0xff, 0x0) openat(r4, &(0x7f0000000400)='./file0\x00', 0x40, 0x1b0) [ 219.574216] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 219.582825] loop3: detected capacity change from 0 to 40 [ 219.905642] syz-executor.2: attempt to access beyond end of device [ 219.905642] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 219.997302] syz-executor.3: attempt to access beyond end of device [ 219.997302] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 03:15:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000015c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "7149cb9fc78fc75f", "d005710593c51069e69106e39efd1262141e30962217cb0f6d15aa978ad4b282", "821df16d", "f60496c4f430ace1"}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000000c0)={{r2}, 0x0, 0x0, @inherit={0x68, &(0x7f00000010c0)=ANY=[@ANYBLOB="0000000000000000040000007e8000000900000000000000510000000000000010000000000000000400000080000000f0f7000000000000177a0eb9c8fedffa5c3b969748c2530200000000000000090000000000000009000000000000000600f3ffffffffffca0d0000000000000500000000000000"]}, @subvolid=0x2}) 03:15:40 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = io_uring_setup(0x454c, &(0x7f0000000240)) syncfs(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) ioctl$VT_WAITACTIVE(r3, 0x5607) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) 03:15:40 executing program 0: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 03:15:40 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r2 = eventfd2(0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') fsetxattr$security_selinux(r2, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r4 = syz_open_dev$vcsu(&(0x7f0000000340), 0xff, 0x0) openat(r4, &(0x7f0000000400)='./file0\x00', 0x40, 0x1b0) 03:15:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc3, 0xffffffffffffffff, &(0x7f0000000700)="8f2fbb08e0da7eac042fd584f986f1fa5da3528930937376ff6d52906a11814b69351c615d5e80f88a701954e1959d43b07b394aae5b4b3432f24d7fdd8b5144d9af18123cf9a04302abfc16ea7dc0c0425748bc95d3ffcac54af3acf0437c90e6e1be2d4734da1096f2fb95965e83acbdcd25936af000de14fc4a6e34ad33bf72f1410d4825fb1464936907bc50196eb7f1134210db9fda45aebdcdb30afb0f5f0efd174bb7a75d55f05b2a68ec6a5bd829902b38384d36a6b14dfd5fad1b34", 0xc0, 0x1f, 0x0, 0x1}, &(0x7f00000007c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read(0xffffffffffffffff, &(0x7f0000000800)=""/136, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x2) memfd_secret(0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c9397e83e5ca7e7a13e2dbc30cd3c26b1a90bba95bb649877b6deabc90000000000", 0x26, 0x200000000000004, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000140)="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", 0x113, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f00000008c0)="4500010000f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd02d6990828f2337c678ba378fcc4d8c7e48bdeb60547a10c9005fedc12dd0b7aee3fd1e3b6340e2b0e5225347550117b0e0f32f287bc5bd89e4b8d26f2b06e37906cc52009fd253dd26a99370a3d8aab35f683c44c368a6e949803dfbb7fae753", 0x89, 0xffff, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x0, r3}]) 03:15:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 03:15:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 03:15:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) r2 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x121042, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="000000000036317033eaa0a86bbfa6ae8f02079737fbb893b942111a2921406dc671860ce7abdf0357fbe7ec241a297164cff24b81b932cf19406bc3c397b010174d9ae25dc13dbc90d6a7290ea22a7bcf8834cabc5ac34d639fe49c9c9842d52fb3551f2535e7728297517d5896560b6315c568e2cd7947aa866d29f6f98c962fb6929d29ff3ad4e090f9f591e04b557e3d0803e74b15c0c7fd4119923b2b6ceeddedb1"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') openat(r3, &(0x7f0000000580)='./file1\x00', 0xd0e00, 0x1a0) syz_open_procfs(0x0, &(0x7f0000000380)='attr/sockcreate\x00') pwritev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0x40, 0xfffffffd, 0x0, 0xffffffffffffffff, 0xfffffff8, 0x7f, 0xffffffff, 0xfffffff7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000700)={0x0, 0x4490, 0x2, 0x1, 0x251, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(r5, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) sendfile(r4, r4, 0x0, 0x100000) [ 233.004453] loop2: detected capacity change from 0 to 40 [ 233.031238] loop3: detected capacity change from 0 to 40 03:15:41 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r1, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0) r4 = inotify_init1(0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) r6 = pidfd_getfd(r3, r2, 0x0) fsmount(r6, 0x0, 0xb) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20860000}, 0xc) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x8621, 0x30, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r4, r3) 03:15:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0x80, 0x21, 0x0, 0x0, 0x5, 0x8001, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x7}, 0x10000, 0x5, 0xedf, 0x8, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) linkat(r4, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9e", 0x1}], 0x2, 0x0, 0x3, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:15:41 executing program 5: syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4024, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a04, 0x2, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ce01aa9e2806f64665b29753a81b36a48fa3d043a9bb6cf833b9a6dc5ca9658e0cf854d3d29c21baa8becb9ca985829d63ee6bb659b46cb19fedba230fdb79b0015baf5dfea2c19ee3b7793bf85ffe79eca7f6b13e74d895b10a6b8605591eb03bcb987e60f662ea8f6b074147c61e424af6d8b7269f4d8eba5e5875cb", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x3) 03:15:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r3, r2, r1, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc}) stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r6, r5, r4, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc}) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="10000700000000002000060000000000"], 0x74, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r8, &(0x7f00000000c0)='9', 0x1, 0x8040000) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180), 0x2, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r9, r7, 0x0, 0xfffffdef) [ 233.340265] loop0: detected capacity change from 0 to 40 [ 233.554276] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 233.555826] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 233.556790] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 233.557668] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 233.558636] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 233.566099] syz-executor.5 (6282) used greatest stack depth: 23680 bytes left 03:15:41 executing program 5: syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4024, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a04, 0x2, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ce01aa9e2806f64665b29753a81b36a48fa3d043a9bb6cf833b9a6dc5ca9658e0cf854d3d29c21baa8becb9ca985829d63ee6bb659b46cb19fedba230fdb79b0015baf5dfea2c19ee3b7793bf85ffe79eca7f6b13e74d895b10a6b8605591eb03bcb987e60f662ea8f6b074147c61e424af6d8b7269f4d8eba5e5875cb", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x3) 03:15:41 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r1, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0) r4 = inotify_init1(0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) r6 = pidfd_getfd(r3, r2, 0x0) fsmount(r6, 0x0, 0xb) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20860000}, 0xc) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x8621, 0x30, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r4, r3) [ 233.704007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.704586] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.705236] Buffer I/O error on dev sr0, logical block 0, async page read [ 233.714675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.715059] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.715655] Buffer I/O error on dev sr0, logical block 1, async page read [ 233.717852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.718240] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.718846] Buffer I/O error on dev sr0, logical block 2, async page read [ 233.725590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.725967] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.726533] Buffer I/O error on dev sr0, logical block 3, async page read [ 233.731942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.732318] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.733091] Buffer I/O error on dev sr0, logical block 4, async page read [ 233.735337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.735771] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.736337] Buffer I/O error on dev sr0, logical block 5, async page read [ 233.765983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.766776] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.767874] Buffer I/O error on dev sr0, logical block 6, async page read [ 233.789098] syz-executor.2: attempt to access beyond end of device [ 233.789098] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 233.818869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 233.819639] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.820737] Buffer I/O error on dev sr0, logical block 7, async page read [ 233.891243] syz-executor.3: attempt to access beyond end of device [ 233.891243] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 03:15:41 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r1, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0) r4 = inotify_init1(0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) r6 = pidfd_getfd(r3, r2, 0x0) fsmount(r6, 0x0, 0xb) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20860000}, 0xc) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000240)={0x8621, 0x30, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r4, r3) 03:15:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 03:15:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r1, 0x0, 0xfffffdef) 03:15:41 executing program 5: syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4024, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a04, 0x2, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ce01aa9e2806f64665b29753a81b36a48fa3d043a9bb6cf833b9a6dc5ca9658e0cf854d3d29c21baa8becb9ca985829d63ee6bb659b46cb19fedba230fdb79b0015baf5dfea2c19ee3b7793bf85ffe79eca7f6b13e74d895b10a6b8605591eb03bcb987e60f662ea8f6b074147c61e424af6d8b7269f4d8eba5e5875cb", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x3) 03:15:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) r2 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x121042, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="000000000036317033eaa0a86bbfa6ae8f02079737fbb893b942111a2921406dc671860ce7abdf0357fbe7ec241a297164cff24b81b932cf19406bc3c397b010174d9ae25dc13dbc90d6a7290ea22a7bcf8834cabc5ac34d639fe49c9c9842d52fb3551f2535e7728297517d5896560b6315c568e2cd7947aa866d29f6f98c962fb6929d29ff3ad4e090f9f591e04b557e3d0803e74b15c0c7fd4119923b2b6ceeddedb1"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') openat(r3, &(0x7f0000000580)='./file1\x00', 0xd0e00, 0x1a0) syz_open_procfs(0x0, &(0x7f0000000380)='attr/sockcreate\x00') pwritev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0x40, 0xfffffffd, 0x0, 0xffffffffffffffff, 0xfffffff8, 0x7f, 0xffffffff, 0xfffffff7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000700)={0x0, 0x4490, 0x2, 0x1, 0x251, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(r5, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) sendfile(r4, r4, 0x0, 0x100000) [ 234.161053] loop3: detected capacity change from 0 to 40 03:15:42 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@measure}]}}) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@orlov}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_measure}, {@euid_gt={'euid>', r0}}, {@seclabel}, {@seclabel}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, ':\xfd'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x880002c8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) link(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000280)='./file2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0/file1\x00'}) [ 234.230151] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 234.271679] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 234.308300] syz-executor.4 (6286) used greatest stack depth: 23256 bytes left 03:15:42 executing program 5: syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4024, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a04, 0x2, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ce01aa9e2806f64665b29753a81b36a48fa3d043a9bb6cf833b9a6dc5ca9658e0cf854d3d29c21baa8becb9ca985829d63ee6bb659b46cb19fedba230fdb79b0015baf5dfea2c19ee3b7793bf85ffe79eca7f6b13e74d895b10a6b8605591eb03bcb987e60f662ea8f6b074147c61e424af6d8b7269f4d8eba5e5875cb", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x3) [ 234.742990] syz-executor.3: attempt to access beyond end of device [ 234.742990] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 03:15:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) r2 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x121042, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x1) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="000000000036317033eaa0a86bbfa6ae8f02079737fbb893b942111a2921406dc671860ce7abdf0357fbe7ec241a297164cff24b81b932cf19406bc3c397b010174d9ae25dc13dbc90d6a7290ea22a7bcf8834cabc5ac34d639fe49c9c9842d52fb3551f2535e7728297517d5896560b6315c568e2cd7947aa866d29f6f98c962fb6929d29ff3ad4e090f9f591e04b557e3d0803e74b15c0c7fd4119923b2b6ceeddedb1"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') openat(r3, &(0x7f0000000580)='./file1\x00', 0xd0e00, 0x1a0) syz_open_procfs(0x0, &(0x7f0000000380)='attr/sockcreate\x00') pwritev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0x40, 0xfffffffd, 0x0, 0xffffffffffffffff, 0xfffffff8, 0x7f, 0xffffffff, 0xfffffff7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000700)={0x0, 0x4490, 0x2, 0x1, 0x251, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) openat(r5, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) sendfile(r4, r4, 0x0, 0x100000) 03:15:55 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) 03:15:55 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1200) 03:15:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0x80, 0x21, 0x0, 0x0, 0x5, 0x8001, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x7}, 0x10000, 0x5, 0xedf, 0x8, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) linkat(r4, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9e", 0x1}], 0x2, 0x0, 0x3, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:15:55 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@measure}]}}) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@orlov}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_measure}, {@euid_gt={'euid>', r0}}, {@seclabel}, {@seclabel}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, ':\xfd'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x880002c8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) link(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000280)='./file2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0/file1\x00'}) 03:15:55 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="01002c8fa9ff8681d6c8f61c85baa174f0cb11420080dd00000000000000980a8e00"/47, @ANYRES32=r0, @ANYBLOB="00000000000000000010000000000000000000000000007486f3d74088f3f5ef3091cb4f8c0000000000000000006162636465e66768696a6b6c6d6e78797a30313233343536000000000000000000"]) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa2600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0xbd6, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000300)='.-[(-\xc2(\x00', r0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]}) add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="079e41a06027bf54a36e5e61e045b2e52400e58126548bb0bc3a95fcbb217cdf686719e3d63668c7ebe6cb22a39bc79515964f4acf560c73744164d827017954db7481667ae6276a06f36978cf7cee6895f64fefa81c19e952b0337660cb17c5b35c243288d16dd2d4400bc1ae09b6629d6ecde1852e06099b54fbc797d2a10942fc6e6876d4", 0x86, r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1e72251008c1fdab246c33fe298e8d00a5ea68d9e217859f899e54333776a1660869ef2b267d447014af336ff0b81830089cb9297cabffe1356ef01f54140816"}, 0x48, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) keyctl$read(0x11, r6, 0x0, 0x0) keyctl$describe(0x6, r6, &(0x7f0000000540)=""/247, 0xf7) finit_module(r1, &(0x7f0000000640)='\x00', 0x3) 03:15:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 03:15:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 247.501577] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 247.509830] process 'syz-executor.4' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 247.537125] loop5: detected capacity change from 0 to 256 [ 247.546194] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 247.550253] loop0: detected capacity change from 0 to 40 03:15:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x3) sendfile(r5, r8, &(0x7f0000000140)=0x4, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x10000, 0x3) sendfile(r4, r3, 0x0, 0xfffffdef) [ 247.573860] loop3: detected capacity change from 0 to 40 [ 247.640328] audit: type=1400 audit(1667358955.575:10): avc: denied { write } for pid=6340 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 247.947447] syz-executor.0: attempt to access beyond end of device [ 247.947447] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 03:16:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) r1 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/217, 0xd9}], 0x4) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = openat(r2, &(0x7f00000006c0)='./file0\x00', 0x400, 0x61) r4 = getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000380)=r4) close(r5) syz_io_uring_setup(0x3a12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000200)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xce01, 0x10, 0xfffffffe, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x8, 0x3, 0x14e, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0)) 03:16:09 executing program 7: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xb2482, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@loopback, 0x0, r6}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf8, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffe}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffd}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004891}, 0x20000) 03:16:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:16:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) 03:16:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x3) sendfile(r5, r8, &(0x7f0000000140)=0x4, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x10000, 0x3) sendfile(r4, r3, 0x0, 0xfffffdef) [ 261.290282] loop5: detected capacity change from 0 to 40 03:16:09 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="01002c8fa9ff8681d6c8f61c85baa174f0cb11420080dd00000000000000980a8e00"/47, @ANYRES32=r0, @ANYBLOB="00000000000000000010000000000000000000000000007486f3d74088f3f5ef3091cb4f8c0000000000000000006162636465e66768696a6b6c6d6e78797a30313233343536000000000000000000"]) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa2600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0xbd6, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000300)='.-[(-\xc2(\x00', r0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]}) add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="079e41a06027bf54a36e5e61e045b2e52400e58126548bb0bc3a95fcbb217cdf686719e3d63668c7ebe6cb22a39bc79515964f4acf560c73744164d827017954db7481667ae6276a06f36978cf7cee6895f64fefa81c19e952b0337660cb17c5b35c243288d16dd2d4400bc1ae09b6629d6ecde1852e06099b54fbc797d2a10942fc6e6876d4", 0x86, r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1e72251008c1fdab246c33fe298e8d00a5ea68d9e217859f899e54333776a1660869ef2b267d447014af336ff0b81830089cb9297cabffe1356ef01f54140816"}, 0x48, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) keyctl$read(0x11, r6, 0x0, 0x0) keyctl$describe(0x6, r6, &(0x7f0000000540)=""/247, 0xf7) finit_module(r1, &(0x7f0000000640)='\x00', 0x3) 03:16:09 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, r3, 0xe, r1, 0x0) 03:16:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x24050300) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x40400) [ 261.331472] loop3: detected capacity change from 0 to 40 03:16:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) 03:16:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x3) sendfile(r5, r8, &(0x7f0000000140)=0x4, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x10000, 0x3) sendfile(r4, r3, 0x0, 0xfffffdef) [ 261.520084] syz-executor.5: attempt to access beyond end of device [ 261.520084] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 261.521002] Buffer I/O error on dev loop5, logical block 31, lost async page write 03:16:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:16:09 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000030000000018000000", @ANYRES32=r3, @ANYBLOB="88a91e140000cc82e1e35a940f52a22c157d00002e2f0d696c653000"]) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x20, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x841528182aaac4ee, 0x5fe733a2, 0x2}}) [ 261.632136] syz-executor.5: attempt to access beyond end of device [ 261.632136] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 261.633526] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 261.654981] loop3: detected capacity change from 0 to 40 03:16:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x24050300) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x40400) 03:16:09 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, r3, 0xe, r1, 0x0) 03:16:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) [ 261.765721] loop2: detected capacity change from 0 to 40 03:16:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x3) sendfile(r5, r8, &(0x7f0000000140)=0x4, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x10000, 0x3) sendfile(r4, r3, 0x0, 0xfffffdef) [ 261.908459] loop5: detected capacity change from 0 to 40 [ 262.137036] syz-executor.5: attempt to access beyond end of device [ 262.137036] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 262.138696] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 262.275383] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 262.276570] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 262.277398] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 262.278240] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 262.279177] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 269.681654] Bluetooth: hci3: command 0x0406 tx timeout [ 269.681750] Bluetooth: hci4: command 0x0406 tx timeout [ 273.777557] Bluetooth: hci0: command 0x0406 tx timeout 03:16:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) 03:16:23 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1ce3ffffa7fbf62de3d572f985484579bf673ee9d425e3bc1adf80e1db04da1e1321468bd68bd9576a80a67e3ddbc6cb37b6c753b9dcb68a540e3a0db59e26c11c694dd1825ddbcc347c33252a5d3c388ee86b6b1fd51f695575eb853b2cd14e992080df583097caa0699847ac64313d13546880da756fb0485e37f3e1b5903a9b5cb1f2dd3fa0eac0d0015a94dbaeabf474aff0db1c9ca83d3c63ddb959a902f7983623fe9796953792c555ec5f8591dea277b8218eef50ae6dca3b77554a40f1765eea2c726b3ffa164d17413a95856cc86f4dba559832397b763294594d955c7a51084edbf252a1eac2c712dacdc8a93e86c70059e3eef5606a5d7e9167b16ca7ff9a24a0491370bdd7726912ffcdd1de18e2c028b05fac4be5c808bff8eaa0b4a124c53b359d8d82d015649f802e2660145cf8b4afb52ce2f397d9afd65379310b975e65d175734532d9ac75e3b166434b5e9eaf4921b05a9fd9428b3c3b8ebfa33c2fccbf874aaf1851d39b8531bc2966c54f1ab9943719c9d9acdea18f9ce169cb628843a01522ec1c39b9d6233536b9344206c502fa7bff44768e3191dbb67a86e0382d726703407d8325cf60dcfbfa79cc36ace72ad494048de2bae9", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, r3, 0xe, r1, 0x0) 03:16:23 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) 03:16:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) 03:16:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) r1 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/217, 0xd9}], 0x4) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = openat(r2, &(0x7f00000006c0)='./file0\x00', 0x400, 0x61) r4 = getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000380)=r4) close(r5) syz_io_uring_setup(0x3a12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000200)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xce01, 0x10, 0xfffffffe, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x8, 0x3, 0x14e, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0)) 03:16:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) 03:16:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) 03:16:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) sendfile(r4, r7, &(0x7f0000000140)=0x4, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x10000, 0x3) [ 275.642452] loop3: detected capacity change from 0 to 40 [ 275.657977] loop7: detected capacity change from 0 to 40 [ 275.668464] loop2: detected capacity change from 0 to 40 [ 275.683984] loop5: detected capacity change from 0 to 40 [ 275.692667] loop0: detected capacity change from 0 to 40 03:16:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) sendfile(r4, r7, &(0x7f0000000140)=0x4, 0x9) 03:16:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) 03:16:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) [ 275.831961] loop3: detected capacity change from 0 to 40 [ 275.863383] loop2: detected capacity change from 0 to 40 [ 275.875362] syz-executor.7: attempt to access beyond end of device [ 275.875362] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 275.877449] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 275.902980] syz-executor.5: attempt to access beyond end of device [ 275.902980] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 275.904613] Buffer I/O error on dev loop5, logical block 31, lost async page write 03:16:23 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) 03:16:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:16:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r6, &(0x7f0000000140)=0x4, 0x9) 03:16:23 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, r3, 0xe, r1, 0x0) 03:16:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) r1 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/217, 0xd9}], 0x4) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = openat(r2, &(0x7f00000006c0)='./file0\x00', 0x400, 0x61) r4 = getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000380)=r4) close(r5) syz_io_uring_setup(0x3a12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000200)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0xce01, 0x10, 0xfffffffe, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x8, 0x3, 0x14e, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0)) 03:16:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) [ 276.074100] loop0: detected capacity change from 0 to 40 03:16:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 276.128556] loop7: detected capacity change from 0 to 40 [ 276.245865] syz-executor.7: attempt to access beyond end of device [ 276.245865] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 276.246782] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 276.343327] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 276.344652] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 276.345606] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 276.346453] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 276.347557] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 276.355986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.356374] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.357296] Buffer I/O error on dev sr0, logical block 0, async page read [ 276.359725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.360203] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.360793] Buffer I/O error on dev sr0, logical block 1, async page read [ 276.362587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.362968] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.363558] Buffer I/O error on dev sr0, logical block 2, async page read [ 276.365834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.366210] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.366781] Buffer I/O error on dev sr0, logical block 3, async page read [ 276.368268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.368678] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.369248] Buffer I/O error on dev sr0, logical block 4, async page read [ 276.370452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.370898] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.371449] Buffer I/O error on dev sr0, logical block 5, async page read [ 276.373844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.374221] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.374814] Buffer I/O error on dev sr0, logical block 6, async page read [ 276.375736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 276.376108] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.873629] Bluetooth: hci6: command 0x0406 tx timeout [ 286.065625] Bluetooth: hci5: command 0x0406 tx timeout 03:16:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000000080)="93da72", 0x3, 0xbe, 0x0, 0x2}]) 03:16:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3740, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x7, 0x6, 0x5, 0x0, 0x223a, 0x5fdbddfbb2d68a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0x42800, 0x6426, 0xe8b, 0x1, 0x4, 0x3, 0x4, 0x0, 0x7fff, 0x0, 0x70f6}, r2, 0xb, r3, 0x2) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) finit_module(r0, 0x0, 0x0) syz_io_uring_setup(0x5dfe, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000900)) 03:16:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x9) 03:16:40 executing program 5: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r3, r2, r1, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc}) lchown(&(0x7f0000000080)='./file0\x00', r0, r2) mount$cgroup2(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x0) 03:16:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x24050300) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x40400) 03:16:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:16:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) sendfile(r2, r4, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3) 03:16:40 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1ce3ffffa7fbf62de3d572f985484579bf673ee9d425e3bc1adf80e1db04da1e1321468bd68bd9576a80a67e3ddbc6cb37b6c753b9dcb68a540e3a0db59e26c11c694dd1825ddbcc347c33252a5d3c388ee86b6b1fd51f695575eb853b2cd14e992080df583097caa0699847ac64313d13546880da756fb0485e37f3e1b5903a9b5cb1f2dd3fa0eac0d0015a94dbaeabf474aff0db1c9ca83d3c63ddb959a902f7983623fe9796953792c555ec5f8591dea277b8218eef50ae6dca3b77554a40f1765eea2c726b3ffa164d17413a95856cc86f4dba559832397b763294594d955c7a51084edbf252a1eac2c712dacdc8a93e86c70059e3eef5606a5d7e9167b16ca7ff9a24a0491370bdd7726912ffcdd1de18e2c028b05fac4be5c808bff8eaa0b4a124c53b359d8d82d015649f802e2660145cf8b4afb52ce2f397d9afd65379310b975e65d175734532d9ac75e3b166434b5e9eaf4921b05a9fd9428b3c3b8ebfa33c2fccbf874aaf1851d39b8531bc2966c54f1ab9943719c9d9acdea18f9ce169cb628843a01522ec1c39b9d6233536b9344206c502fa7bff44768e3191dbb67a86e0382d726703407d8325cf60dcfbfa79cc36ace72ad494048de2bae9", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 293.069292] loop3: detected capacity change from 0 to 40 [ 293.082773] loop7: detected capacity change from 0 to 40 [ 293.106265] loop6: detected capacity change from 0 to 264192 [ 293.111256] audit: type=1400 audit(1667359001.050:11): avc: denied { associate } for pid=6485 comm="syz-executor.5" name="ssh.service" dev="cgroup2" ino=1076 scontext=system_u:object_r:restorecond_exec_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 [ 293.120455] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 293.164261] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 293.165535] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 293.166390] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 293.167284] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 293.168231] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 293.172222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.173257] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.174327] buffer_io_error: 1 callbacks suppressed [ 293.174340] Buffer I/O error on dev sr0, logical block 0, async page read [ 293.176017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.176770] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 293.177837] Buffer I/O error on dev sr0, logical block 1, async page read [ 293.178728] Buffer I/O error on dev sr0, logical block 2, async page read [ 293.179619] Buffer I/O error on dev sr0, logical block 3, async page read [ 293.180516] Buffer I/O error on dev sr0, logical block 4, async page read [ 293.181367] Buffer I/O error on dev sr0, logical block 5, async page read [ 293.182265] Buffer I/O error on dev sr0, logical block 6, async page read [ 293.183169] Buffer I/O error on dev sr0, logical block 7, async page read [ 293.185122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.185949] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.187016] Buffer I/O error on dev sr0, logical block 0, async page read [ 293.189700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.190434] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.191538] Buffer I/O error on dev sr0, logical block 1, async page read [ 293.192825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.193852] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.195384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.196216] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.200809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.201597] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.202998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.203759] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.205685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 293.206397] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.208051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:16:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x9) 03:16:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') renameat(r2, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000180)='./file1\x00') ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000003c0)) pipe2(&(0x7f0000000300), 0x0) r4 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x63151cbe, 0x0, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0xfff, 0x7}, 0x410, 0x100000000, 0x0, 0x4, 0x7, 0x3f, 0x401, 0x0, 0x80000000, 0x0, 0x49}, r4, 0x6, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) r6 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0/file0\x00', 0x3, 0x2, &(0x7f0000000340)=[{&(0x7f0000000500)="75abdc288fc048d94bc3dabb2a3ae8690615899db2129354df3357e22a60e1911fc0827f928e1072a724d1d210e7c8b5b08983ad08e02aa3838fb7d1020b48c5e41e5680ce0d8fbc1ce315324f08ea110caac25e72729d53f8bf73c4a9bd5e5f0b65b47833dec3f1cec10e61c141f6a8ba226fc202dba84ff01ba2c5aa8ddf708f005952ef1f81c2215734211003d362ea066220ed0737697ee2cba08e07cd736e89a64bfb37c900308fe83e089ab4149f12609a46972fb340fda0a79202cbd742ea66ff2fac8a97463ddeae00ae5b30de1e9f36483a5220c3d4267fb705e4e476bea3", 0xe3, 0x4}, {&(0x7f0000000240)="0e7310fa96b06b630de84d", 0xb}], 0x3008040, &(0x7f0000000400)={[{@fat=@umask={'umask', 0x3d, 0x40}}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x1a}}, {@obj_type={'obj_type', 0x3d, ',$&$+{-'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) process_vm_writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x2, &(0x7f00000018c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0) 03:16:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 293.351253] syz-executor.7: attempt to access beyond end of device [ 293.351253] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 293.373148] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 293.374304] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 293.375161] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 293.375984] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 03:16:41 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:16:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f) [ 293.518134] loop3: detected capacity change from 0 to 40 03:16:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000440)={[0x4]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000680)=""/151, 0x97}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') r6 = dup3(r4, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000004060009088c43f9161fa7848acb59000000000000000500000808000340000000020c1610c08ebecd00048e0800014000000003ff8dfd4aa2897a7a857633966d16d674a891b59e7094d254a487487383b29f8f94737624d8b3b939149ac565799e5604573033b3abca9e52fe502cff198e71ff94d47ba6328e8e2fa79295c348"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880) r7 = creat(&(0x7f0000000400)='./file1\x00', 0x0) fcntl$notify(r7, 0x402, 0x33cdd70c1a8ece4) [ 293.608396] loop0: detected capacity change from 0 to 40 03:16:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x8) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x9) 03:16:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) [ 293.892665] loop3: detected capacity change from 0 to 40 03:16:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x0, &(0x7f0000000080), 0x804a, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c646f74732c00613eb57121d5eecb4c00ba1b81aba07d19ec7beb29d71b772b5590e3d6d155c187a977b9ac10da"]) 03:16:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000000080)="93da72", 0x3, 0xbe, 0x0, 0x2}]) 03:16:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r6, &(0x7f0000000140)=0x4, 0x9) 03:16:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) fcntl$dupfd(r1, 0x406, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) 03:16:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r2, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) sendfile(r1, r3, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) 03:16:55 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 03:16:55 executing program 5: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1ce3ffffa7fbf62de3d572f985484579bf673ee9d425e3bc1adf80e1db04da1e1321468bd68bd9576a80a67e3ddbc6cb37b6c753b9dcb68a540e3a0db59e26c11c694dd1825ddbcc347c33252a5d3c388ee86b6b1fd51f695575eb853b2cd14e992080df583097caa0699847ac64313d13546880da756fb0485e37f3e1b5903a9b5cb1f2dd3fa0eac0d0015a94dbaeabf474aff0db1c9ca83d3c63ddb959a902f7983623fe9796953792c555ec5f8591dea277b8218eef50ae6dca3b77554a40f1765eea2c726b3ffa164d17413a95856cc86f4dba559832397b763294594d955c7a51084edbf252a1eac2c712dacdc8a93e86c70059e3eef5606a5d7e9167b16ca7ff9a24a0491370bdd7726912ffcdd1de18e2c028b05fac4be5c808bff8eaa0b4a124c53b359d8d82d015649f802e2660145cf8b4afb52ce2f397d9afd65379310b975e65d175734532d9ac75e3b166434b5e9eaf4921b05a9fd9428b3c3b8ebfa33c2fccbf874aaf1851d39b8531bc2966c54f1ab9943719c9d9acdea18f9ce169cb628843a01522ec1c39b9d6233536b9344206c502fa7bff44768e3191dbb67a86e0382d726703407d8325cf60dcfbfa79cc36ace72ad494048de2bae9", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) r3 = getpid() signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) syslog(0x1, &(0x7f0000000300)=""/78, 0x4e) kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 03:16:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000000080)="93da72", 0x3, 0xbe, 0x0, 0x2}]) [ 307.567589] loop6: detected capacity change from 0 to 264192 [ 307.574618] loop7: detected capacity change from 0 to 40 [ 307.580017] loop3: detected capacity change from 0 to 40 [ 307.595160] loop2: detected capacity change from 0 to 264192 03:16:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) fcntl$dupfd(r1, 0x406, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) 03:16:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x0, 0x6) sendfile(r0, r1, 0x0, 0x3) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0', "6f2bf0bd91"}, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7c57, 0x5}}, './file2\x00'}) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000200)) sendfile(r2, r3, 0x0, 0x3) openat(r2, &(0x7f0000000000)='./file0\x00', 0x400, 0xa1) 03:16:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000140)=0x4, 0x9) [ 307.786336] syz-executor.7: attempt to access beyond end of device [ 307.786336] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 307.787495] buffer_io_error: 7 callbacks suppressed [ 307.787505] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 307.862788] loop3: detected capacity change from 0 to 40 03:16:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c7a2299ddb907a0ffc63b478bc11424713c7dd83098339504bb09", @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00./file2\x00']) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20000, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/94, 0x5e, 0x4, 0x1}, 0x1) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000100)='./file1\x00', 0x711042, 0x1f6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000140)=0x4, 0x9) 03:16:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x80, 0x0, 0x0, 0x4000003, 0x344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x42000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8103, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 03:16:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r2, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) sendfile(r1, r3, 0x0, 0x1) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) 03:16:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) fcntl$dupfd(r1, 0x406, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) 03:16:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='./file0\x00', r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x12000, 0x61) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r2, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) sendfile(r1, r3, 0x0, 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0) chown(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) [ 308.096080] loop5: detected capacity change from 0 to 40 [ 308.137242] BUG: unable to handle page fault for address: ffffed100fffc000 [ 308.137744] #PF: supervisor write access in kernel mode [ 308.138123] #PF: error_code(0x0002) - not-present page [ 308.138483] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 308.138952] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 308.139302] CPU: 0 PID: 6577 Comm: syz-executor.2 Not tainted 6.1.0-rc3-next-20221101 #1 [ 308.139872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 308.140449] RIP: 0010:__memset+0x24/0x50 [ 308.140760] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 308.142966] loop7: detected capacity change from 0 to 40 [ 308.145391] RSP: 0018:ffff88804399fcc0 EFLAGS: 00010212 [ 308.145404] RAX: 0000000000000000 RBX: ffff88800bfb40c0 RCX: 1ffffe21fe5fe06b [ 308.145413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 308.145422] RBP: ffff88800bfada00 R08: 0000000000000005 R09: ffffed10017f6818 [ 308.145431] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfada00 [ 308.145440] R13: ffff88800bfb40c0 R14: ffffffff815f2620 R15: 1ffff1100119901f [ 308.148928] FS: 00007fc909a68700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 308.149486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.149907] CR2: ffffed100fffc000 CR3: 000000000f574000 CR4: 0000000000350ef0 [ 308.150403] Call Trace: [ 308.150588] [ 308.150753] kasan_unpoison+0x23/0x60 [ 308.151034] mempool_exit+0x1c2/0x330 [ 308.151320] bioset_exit+0x2c9/0x630 [ 308.151594] ? _raw_spin_unlock_irq+0x1f/0x60 [ 308.151929] disk_release+0x143/0x490 [ 308.152208] ? disk_release+0x0/0x490 [ 308.152242] loop3: detected capacity change from 0 to 40 [ 308.152478] ? device_release+0x0/0x250 [ 308.152494] device_release+0xa2/0x250 [ 308.152510] ? device_release+0x0/0x250 [ 308.154014] kobject_put+0x173/0x280 [ 308.154290] put_device+0x1b/0x40 [ 308.154544] put_disk+0x41/0x60 [ 308.154789] loop_control_ioctl+0x4d1/0x630 [ 308.155105] ? loop_control_ioctl+0x0/0x630 [ 308.155416] ? selinux_file_ioctl+0xb1/0x270 [ 308.155745] ? loop_control_ioctl+0x0/0x630 [ 308.156059] __x64_sys_ioctl+0x19a/0x220 [ 308.156355] do_syscall_64+0x3b/0xa0 [ 308.156631] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 308.157000] RIP: 0033:0x7fc90c513b19 [ 308.157266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 308.158536] RSP: 002b:00007fc909a68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.159064] RAX: ffffffffffffffda RBX: 00007fc90c627020 RCX: 00007fc90c513b19 [ 308.159560] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 [ 308.160052] RBP: 00007fc90c56df6d R08: 0000000000000000 R09: 0000000000000000 [ 308.160543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.161037] R13: 00007ffc527b8ecf R14: 00007fc909a68300 R15: 0000000000022000 [ 308.161550] [ 308.161723] Modules linked in: [ 308.161969] CR2: ffffed100fffc000 [ 308.162214] ---[ end trace 0000000000000000 ]--- [ 308.162538] RIP: 0010:__memset+0x24/0x50 [ 308.162835] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 308.164083] RSP: 0018:ffff88804399fcc0 EFLAGS: 00010212 [ 308.164458] RAX: 0000000000000000 RBX: ffff88800bfb40c0 RCX: 1ffffe21fe5fe06b [ 308.164954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 308.165449] RBP: ffff88800bfada00 R08: 0000000000000005 R09: ffffed10017f6818 [ 308.165950] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfada00 [ 308.166442] R13: ffff88800bfb40c0 R14: ffffffff815f2620 R15: 1ffff1100119901f [ 308.166936] FS: 00007fc909a68700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 308.167490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.167893] CR2: ffffed100fffc000 CR3: 000000000f574000 CR4: 0000000000350ef0 [ 308.275533] syz-executor.5: attempt to access beyond end of device [ 308.275533] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 308.276532] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 308.301585] syz-executor.5: attempt to access beyond end of device [ 308.301585] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 308.303455] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 308.309382] syz-executor.7: attempt to access beyond end of device [ 308.309382] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 308.311267] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 308.332879] syz-executor.5: attempt to access beyond end of device [ 308.332879] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 308.334168] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 317.971707] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) VM DIAGNOSIS: 03:16:56 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82451491 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff88804399f488 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451480 RIP=ffffffff824514e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc909a68700 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0f4be76000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0f4be74000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed100fffc000 CR3=000000000f574000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000007556 RBX=0000000000000001 RCX=ffffc900059fc000 RDX=0000000000040000 RSI=ffffffff812de786 RDI=0000000000000001 RBP=ffff88801f51f8b8 RSP=ffff88801f51f880 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000002c R13=ffff88800d688000 R14=0000000000000200 R15=ffff88801f51f908 RIP=ffffffff812de786 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff3fa31f700 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0240bcb000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0240bc9000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000003e5d6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00007ff3fce907e000007ff3fce907c0 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000