Warning: Permanently added '[localhost]:56680' (ECDSA) to the list of known hosts.
2022/09/29 02:13:48 fuzzer started
2022/09/29 02:13:49 dialing manager at localhost:45751
syzkaller login: [   46.246641] cgroup: Unknown subsys name 'net'
[   46.345668] cgroup: Unknown subsys name 'rlimit'
2022/09/29 02:14:03 syscalls: 2215
2022/09/29 02:14:03 code coverage: enabled
2022/09/29 02:14:03 comparison tracing: enabled
2022/09/29 02:14:03 extra coverage: enabled
2022/09/29 02:14:03 setuid sandbox: enabled
2022/09/29 02:14:03 namespace sandbox: enabled
2022/09/29 02:14:03 Android sandbox: enabled
2022/09/29 02:14:03 fault injection: enabled
2022/09/29 02:14:03 leak checking: enabled
2022/09/29 02:14:03 net packet injection: enabled
2022/09/29 02:14:03 net device setup: enabled
2022/09/29 02:14:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/29 02:14:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/29 02:14:03 USB emulation: enabled
2022/09/29 02:14:03 hci packet injection: enabled
2022/09/29 02:14:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928������������������������������������������)
2022/09/29 02:14:03 802.15.4 emulation: enabled
2022/09/29 02:14:03 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/29 02:14:03 fetching corpus: 50, signal 29272/32062 (executing program)
2022/09/29 02:14:03 fetching corpus: 100, signal 36535/40285 (executing program)
2022/09/29 02:14:04 fetching corpus: 150, signal 43577/47992 (executing program)
2022/09/29 02:14:04 fetching corpus: 200, signal 47227/52291 (executing program)
2022/09/29 02:14:04 fetching corpus: 250, signal 53560/58874 (executing program)
2022/09/29 02:14:04 fetching corpus: 300, signal 58679/64173 (executing program)
2022/09/29 02:14:04 fetching corpus: 350, signal 61461/67273 (executing program)
2022/09/29 02:14:04 fetching corpus: 400, signal 64271/70292 (executing program)
2022/09/29 02:14:05 fetching corpus: 450, signal 68949/74602 (executing program)
2022/09/29 02:14:05 fetching corpus: 500, signal 72182/77743 (executing program)
2022/09/29 02:14:05 fetching corpus: 550, signal 73532/79291 (executing program)
2022/09/29 02:14:05 fetching corpus: 600, signal 76602/82000 (executing program)
2022/09/29 02:14:05 fetching corpus: 650, signal 78759/83937 (executing program)
2022/09/29 02:14:05 fetching corpus: 700, signal 81095/85959 (executing program)
2022/09/29 02:14:05 fetching corpus: 750, signal 83633/88001 (executing program)
2022/09/29 02:14:06 fetching corpus: 800, signal 87039/90491 (executing program)
2022/09/29 02:14:06 fetching corpus: 850, signal 90393/92851 (executing program)
2022/09/29 02:14:06 fetching corpus: 900, signal 93657/94964 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95575 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95626 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95678 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95737 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95789 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95850 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95913 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/95972 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96026 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96085 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96143 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96192 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96256 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96314 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96366 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96431 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96482 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96537 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96583 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96639 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96694 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96755 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96819 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96871 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96931 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/96985 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/97045 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/97077 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/97141 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/97146 (executing program)
2022/09/29 02:14:06 fetching corpus: 922, signal 94524/97146 (executing program)
2022/09/29 02:14:09 starting 8 fuzzer processes
02:14:09 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2}, 0x40010042)

02:14:09 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:14:09 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

02:14:09 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000000), 0x4)

02:14:09 executing program 4:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:14:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

[   66.120321] audit: type=1400 audit(1664417649.090:6): avc:  denied  { execmem } for  pid=287 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:14:09 executing program 7:
syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001040)='Z', 0x1}], 0x0, &(0x7f0000001740))

02:14:09 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

[   67.518692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.520194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.521603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.523176] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.525156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   67.527096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.528486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   67.530253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.531163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   67.531425] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   67.532242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   67.533446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.534303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.535098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   67.537136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.538154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.539810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.541161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   67.542246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   67.543131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   67.544117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.546163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.547271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.551137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.555248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   67.555449] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   67.558001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   67.559908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.560133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.562670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.564205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.564379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.568076] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   67.570013] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   67.571352] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   67.573972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   67.575067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   67.576185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   67.577178] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   67.577987] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.579364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   67.582404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.583089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.583872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   67.584937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.585898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.586868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.590662] Bluetooth: hci6: HCI_REQ-0x0c1a
[   67.591043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   67.594259] Bluetooth: hci3: HCI_REQ-0x0c1a
[   67.594259] Bluetooth: hci5: HCI_REQ-0x0c1a
[   67.598516] Bluetooth: hci2: HCI_REQ-0x0c1a
[   67.615023] Bluetooth: hci1: HCI_REQ-0x0c1a
[   67.625955] Bluetooth: hci0: HCI_REQ-0x0c1a
[   67.636034] Bluetooth: hci4: HCI_REQ-0x0c1a
[   67.636635] Bluetooth: hci7: HCI_REQ-0x0c1a
[   69.621317] Bluetooth: hci2: command 0x0409 tx timeout
[   69.622558] Bluetooth: hci3: command 0x0409 tx timeout
[   69.685167] Bluetooth: hci7: command 0x0409 tx timeout
[   69.685920] Bluetooth: hci5: command 0x0409 tx timeout
[   69.686780] Bluetooth: hci4: command 0x0409 tx timeout
[   69.687431] Bluetooth: hci6: command 0x0409 tx timeout
[   69.688130] Bluetooth: hci1: command 0x0409 tx timeout
[   69.688820] Bluetooth: hci0: command 0x0409 tx timeout
[   71.669857] Bluetooth: hci3: command 0x041b tx timeout
[   71.670411] Bluetooth: hci2: command 0x041b tx timeout
[   71.732857] Bluetooth: hci0: command 0x041b tx timeout
[   71.733482] Bluetooth: hci1: command 0x041b tx timeout
[   71.734395] Bluetooth: hci6: command 0x041b tx timeout
[   71.735532] Bluetooth: hci4: command 0x041b tx timeout
[   71.736121] Bluetooth: hci5: command 0x041b tx timeout
[   71.737083] Bluetooth: hci7: command 0x041b tx timeout
[   73.716963] Bluetooth: hci2: command 0x040f tx timeout
[   73.718431] Bluetooth: hci3: command 0x040f tx timeout
[   73.781865] Bluetooth: hci7: command 0x040f tx timeout
[   73.783048] Bluetooth: hci5: command 0x040f tx timeout
[   73.783598] Bluetooth: hci4: command 0x040f tx timeout
[   73.784219] Bluetooth: hci6: command 0x040f tx timeout
[   73.784783] Bluetooth: hci1: command 0x040f tx timeout
[   73.785327] Bluetooth: hci0: command 0x040f tx timeout
[   75.764839] Bluetooth: hci3: command 0x0419 tx timeout
[   75.765413] Bluetooth: hci2: command 0x0419 tx timeout
[   75.828982] Bluetooth: hci0: command 0x0419 tx timeout
[   75.829555] Bluetooth: hci1: command 0x0419 tx timeout
[   75.830148] Bluetooth: hci6: command 0x0419 tx timeout
[   75.830650] Bluetooth: hci4: command 0x0419 tx timeout
[   75.831163] Bluetooth: hci5: command 0x0419 tx timeout
[   75.831660] Bluetooth: hci7: command 0x0419 tx timeout
[  129.562654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.576902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.578210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.581162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.583345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  129.584247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.598543] Bluetooth: hci0: HCI_REQ-0x0c1a
[  129.604490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.606825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.607998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.624455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.627971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.630060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.634043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.636323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.637018] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  129.637951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.639619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  129.640499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.643820] Bluetooth: hci2: HCI_REQ-0x0c1a
[  129.648160] Bluetooth: hci1: HCI_REQ-0x0c1a
[  129.736514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.742704] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.754940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.773531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.801411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  129.803491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  129.809462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  129.824840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  129.828885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.829561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  129.831114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.831979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.833187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.836172] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.837514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  129.838331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.849957] Bluetooth: hci4: HCI_REQ-0x0c1a
[  129.900741] Bluetooth: hci3: HCI_REQ-0x0c1a
[  129.957986] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  129.966959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.989048] Bluetooth: hci5: HCI_REQ-0x0c1a
[  130.028464] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.029391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.039443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.050334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.051099] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.055663] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.061055] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.063409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.066145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  130.077120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.077676] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  130.099866] Bluetooth: hci6: HCI_REQ-0x0c1a
[  130.122850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  130.164843] Bluetooth: hci7: HCI_REQ-0x0c1a
[  131.636803] Bluetooth: hci0: command 0x0409 tx timeout
[  131.700997] Bluetooth: hci2: command 0x0409 tx timeout
[  131.701100] Bluetooth: hci1: command 0x0409 tx timeout
[  131.892902] Bluetooth: hci4: command 0x0409 tx timeout
[  131.957047] Bluetooth: hci3: command 0x0409 tx timeout
[  132.020877] Bluetooth: hci5: command 0x0409 tx timeout
[  132.148979] Bluetooth: hci6: command 0x0409 tx timeout
[  132.212923] Bluetooth: hci7: command 0x0409 tx timeout
[  133.684885] Bluetooth: hci0: command 0x041b tx timeout
[  133.749751] Bluetooth: hci1: command 0x041b tx timeout
[  133.750693] Bluetooth: hci2: command 0x041b tx timeout
[  133.940833] Bluetooth: hci4: command 0x041b tx timeout
[  134.004839] Bluetooth: hci3: command 0x041b tx timeout
[  134.068953] Bluetooth: hci5: command 0x041b tx timeout
[  134.196836] Bluetooth: hci6: command 0x041b tx timeout
[  134.260820] Bluetooth: hci7: command 0x041b tx timeout
[  135.732805] Bluetooth: hci0: command 0x040f tx timeout
[  135.796901] Bluetooth: hci2: command 0x040f tx timeout
[  135.797960] Bluetooth: hci1: command 0x040f tx timeout
[  135.988969] Bluetooth: hci4: command 0x040f tx timeout
[  136.052848] Bluetooth: hci3: command 0x040f tx timeout
[  136.116857] Bluetooth: hci5: command 0x040f tx timeout
[  136.244800] Bluetooth: hci6: command 0x040f tx timeout
[  136.308782] Bluetooth: hci7: command 0x040f tx timeout
[  137.780848] Bluetooth: hci0: command 0x0419 tx timeout
[  137.845658] Bluetooth: hci1: command 0x0419 tx timeout
[  137.847086] Bluetooth: hci2: command 0x0419 tx timeout
[  138.036802] Bluetooth: hci4: command 0x0419 tx timeout
[  138.100809] Bluetooth: hci3: command 0x0419 tx timeout
[  138.164821] Bluetooth: hci5: command 0x0419 tx timeout
[  138.292876] Bluetooth: hci6: command 0x0419 tx timeout
[  138.356831] Bluetooth: hci7: command 0x0419 tx timeout
[  191.440288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.441818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.443527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.445913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.447846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  191.448678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.453048] Bluetooth: hci0: HCI_REQ-0x0c1a
[  191.551531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.552938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.555904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.558277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.559553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  191.560429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.563936] Bluetooth: hci1: HCI_REQ-0x0c1a
[  191.833656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.834834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.842989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.843089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.845224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.846209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.846502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.847359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.849499] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.849561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.851021] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  191.851851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  191.856625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.857204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.857236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.860555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.863033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.863804] Bluetooth: hci6: HCI_REQ-0x0c1a
[  191.866677] Bluetooth: hci5: HCI_REQ-0x0c1a
[  191.875340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.880901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.881323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.881860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.882809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  191.884188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.886531] Bluetooth: hci4: HCI_REQ-0x0c1a
[  191.905592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  191.920123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.926602] Bluetooth: hci3: HCI_REQ-0x0c1a
[  191.954914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.965469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  192.005096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.065880] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  192.069089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.090287] Bluetooth: hci7: HCI_REQ-0x0c1a
[  193.460792] Bluetooth: hci0: command 0x0409 tx timeout
[  193.589790] Bluetooth: hci1: command 0x0409 tx timeout
[  193.716777] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  193.909890] Bluetooth: hci4: command 0x0409 tx timeout
[  193.909910] Bluetooth: hci5: command 0x0409 tx timeout
[  193.910132] Bluetooth: hci6: command 0x0409 tx timeout
[  193.973831] Bluetooth: hci3: command 0x0409 tx timeout
[  194.100789] Bluetooth: hci7: command 0x0409 tx timeout
[  195.508800] Bluetooth: hci0: command 0x041b tx timeout
[  195.636821] Bluetooth: hci1: command 0x041b tx timeout
[  195.956776] Bluetooth: hci6: command 0x041b tx timeout
[  195.956808] Bluetooth: hci4: command 0x041b tx timeout
[  195.957197] Bluetooth: hci5: command 0x041b tx timeout
[  196.021774] Bluetooth: hci3: command 0x041b tx timeout
[  196.110934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.120678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.125302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.127398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.128395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  196.129282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.131829] Bluetooth: hci2: HCI_REQ-0x0c1a
[  196.149764] Bluetooth: hci7: command 0x041b tx timeout
[  197.556797] Bluetooth: hci0: command 0x040f tx timeout
[  197.684764] Bluetooth: hci1: command 0x040f tx timeout
[  198.004849] Bluetooth: hci4: command 0x040f tx timeout
[  198.004867] Bluetooth: hci6: command 0x040f tx timeout
[  198.006404] Bluetooth: hci5: command 0x040f tx timeout
[  198.068862] Bluetooth: hci3: command 0x040f tx timeout
[  198.196954] Bluetooth: hci7: command 0x040f tx timeout
[  198.198414] Bluetooth: hci2: command 0x0409 tx timeout
[  199.604885] Bluetooth: hci0: command 0x0419 tx timeout
[  199.732784] Bluetooth: hci1: command 0x0419 tx timeout
[  200.052859] Bluetooth: hci6: command 0x0419 tx timeout
[  200.054259] Bluetooth: hci5: command 0x0419 tx timeout
[  200.055555] Bluetooth: hci4: command 0x0419 tx timeout
[  200.116850] Bluetooth: hci3: command 0x0419 tx timeout
[  200.244897] Bluetooth: hci2: command 0x041b tx timeout
[  200.245451] Bluetooth: hci7: command 0x0419 tx timeout
[  202.292773] Bluetooth: hci2: command 0x040f tx timeout
[  204.340850] Bluetooth: hci2: command 0x0419 tx timeout
02:17:13 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000000), 0x4)

02:17:13 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000000), 0x4)

02:17:13 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000000), 0x4)

02:17:13 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010200000000000000000000040008000340000100000800044000000000050001"], 0x34}}, 0x0)

[  250.765116] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:17:13 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010200000000000000000000040008000340000100000800044000000000050001"], 0x34}}, 0x0)

[  250.931051] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:17:13 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010200000000000000000000040008000340000100000800044000000000050001"], 0x34}}, 0x0)

[  251.100707] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:17:14 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010200000000000000000000040008000340000100000800044000000000050001"], 0x34}}, 0x0)

[  251.305874] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:17:14 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0)

[  253.887612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.890649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.893193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.896609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.898175] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  253.899271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.911041] Bluetooth: hci1: HCI_REQ-0x0c1a
[  254.010038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.012315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.013533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.015948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  254.017889] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  254.019033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  254.022690] Bluetooth: hci4: HCI_REQ-0x0c1a
[  254.140522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  254.143049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.144483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.150041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.151919] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  254.164534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.178397] Bluetooth: hci5: HCI_REQ-0x0c1a
[  254.251270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  254.252950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  254.253894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.256105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.257302] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  254.258253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.273296] Bluetooth: hci6: HCI_REQ-0x0c1a
[  254.274197] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  254.367007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.378154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.380491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.393002] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  254.394451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.402858] Bluetooth: hci7: HCI_REQ-0x0c1a
[  255.924835] Bluetooth: hci1: command 0x0409 tx timeout
[  256.052866] Bluetooth: hci4: command 0x0409 tx timeout
[  256.053151] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  256.245815] Bluetooth: hci5: command 0x0409 tx timeout
[  256.309825] Bluetooth: hci6: command 0x0409 tx timeout
[  256.439197] Bluetooth: hci7: command 0x0409 tx timeout
[  257.973811] Bluetooth: hci1: command 0x041b tx timeout
[  258.100994] Bluetooth: hci4: command 0x041b tx timeout
[  258.292831] Bluetooth: hci5: command 0x041b tx timeout
[  258.356849] Bluetooth: hci6: command 0x041b tx timeout
[  258.484785] Bluetooth: hci7: command 0x041b tx timeout
[  259.636799] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  260.021822] Bluetooth: hci1: command 0x040f tx timeout
[  260.149936] Bluetooth: hci4: command 0x040f tx timeout
[  260.340802] Bluetooth: hci5: command 0x040f tx timeout
[  260.405869] Bluetooth: hci6: command 0x040f tx timeout
[  260.532800] Bluetooth: hci7: command 0x040f tx timeout
[  260.597806] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  262.068809] Bluetooth: hci1: command 0x0419 tx timeout
[  262.196817] Bluetooth: hci4: command 0x0419 tx timeout
[  262.388798] Bluetooth: hci5: command 0x0419 tx timeout
[  262.452823] Bluetooth: hci6: command 0x0419 tx timeout
[  262.581806] Bluetooth: hci7: command 0x0419 tx timeout
[  263.037515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.040420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.050151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.055939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.060236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  263.065280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.078679] Bluetooth: hci3: HCI_REQ-0x0c1a
[  264.116912] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  265.140838] Bluetooth: hci3: command 0x0409 tx timeout
[  266.725707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  266.738510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  266.739569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  266.759580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  266.774159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  266.777414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.790212] Bluetooth: hci2: HCI_REQ-0x0c1a
[  267.189790] Bluetooth: hci3: command 0x041b tx timeout
[  268.853917] Bluetooth: hci2: command 0x0409 tx timeout
[  269.237805] Bluetooth: hci3: command 0x040f tx timeout
[  270.901790] Bluetooth: hci2: command 0x041b tx timeout
[  271.284867] Bluetooth: hci3: command 0x0419 tx timeout
[  272.949802] Bluetooth: hci2: command 0x040f tx timeout
[  274.997795] Bluetooth: hci2: command 0x0419 tx timeout
[  314.740890] Bluetooth: hci0: command 0x0406 tx timeout
[  315.897667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.899581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.901698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.904512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.906442] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  315.908393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.918457] Bluetooth: hci4: HCI_REQ-0x0c1a
[  316.235345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.244856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.247580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.250577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.252377] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  316.253535] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.265841] Bluetooth: hci5: HCI_REQ-0x0c1a
[  316.316246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.317567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.319653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.320566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.322373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.323101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.326422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.328972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  316.331456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.332878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.338705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  316.343273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.358498] Bluetooth: hci6: HCI_REQ-0x0c1a
[  316.368138] Bluetooth: hci7: HCI_REQ-0x0c1a
[  317.748789] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  317.940849] Bluetooth: hci4: command 0x0409 tx timeout
[  318.325048] Bluetooth: hci5: command 0x0409 tx timeout
[  318.388910] Bluetooth: hci6: command 0x0409 tx timeout
[  318.452824] Bluetooth: hci7: command 0x0409 tx timeout
[  319.988815] Bluetooth: hci4: command 0x041b tx timeout
[  320.372862] Bluetooth: hci5: command 0x041b tx timeout
[  320.423555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.436926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.438945] Bluetooth: hci6: command 0x041b tx timeout
[  320.447056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.464045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.475255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  320.489572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.500985] Bluetooth: hci7: command 0x041b tx timeout
[  320.515913] Bluetooth: hci1: HCI_REQ-0x0c1a
[  322.036787] Bluetooth: hci4: command 0x040f tx timeout
[  322.420816] Bluetooth: hci5: command 0x040f tx timeout
[  322.485258] Bluetooth: hci6: command 0x040f tx timeout
[  322.548850] Bluetooth: hci1: command 0x0409 tx timeout
[  322.549664] Bluetooth: hci7: command 0x040f tx timeout
[  324.084896] Bluetooth: hci4: command 0x0419 tx timeout
[  324.468838] Bluetooth: hci5: command 0x0419 tx timeout
[  324.532800] Bluetooth: hci6: command 0x0419 tx timeout
[  324.596846] Bluetooth: hci7: command 0x0419 tx timeout
[  324.598652] Bluetooth: hci1: command 0x041b tx timeout
[  324.681575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  324.688462] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  324.706943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  324.741311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  324.753047] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  324.755132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  324.767897] Bluetooth: hci3: HCI_REQ-0x0c1a
[  326.644925] Bluetooth: hci1: command 0x040f tx timeout
[  326.772894] Bluetooth: hci3: command 0x0409 tx timeout
[  328.692796] Bluetooth: hci1: command 0x0419 tx timeout
[  328.820970] Bluetooth: hci3: command 0x041b tx timeout
[  330.164963] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  330.868909] Bluetooth: hci3: command 0x040f tx timeout
[  332.916858] Bluetooth: hci3: command 0x0419 tx timeout
[  334.772797] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  339.444790] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  342.054414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.058447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.063429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.091509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.106193] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.124202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.142420] Bluetooth: hci2: HCI_REQ-0x0c1a
[  344.180875] Bluetooth: hci2: command 0x0409 tx timeout
[  346.228773] Bluetooth: hci2: command 0x041b tx timeout
[  348.276828] Bluetooth: hci2: command 0x040f tx timeout
[  350.324777] Bluetooth: hci2: command 0x0419 tx timeout
[  378.000258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.008258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.009402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.018878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.020943] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  378.022416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.027430] Bluetooth: hci5: HCI_REQ-0x0c1a
[  379.892866] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  380.085102] Bluetooth: hci5: command 0x0409 tx timeout
[  380.212931] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  380.340804] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  381.663292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.664847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.666648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.669965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.672322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  381.673647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.678119] Bluetooth: hci1: HCI_REQ-0x0c1a
[  382.132903] Bluetooth: hci5: command 0x041b tx timeout
[  382.200577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.210389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.226651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.236978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.242524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  382.244810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.254352] Bluetooth: hci4: HCI_REQ-0x0c1a
[  383.732958] Bluetooth: hci1: command 0x0409 tx timeout
[  384.180792] Bluetooth: hci5: command 0x040f tx timeout
[  384.309888] Bluetooth: hci4: command 0x0409 tx timeout
[  384.629956] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  384.820794] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  385.781898] Bluetooth: hci1: command 0x041b tx timeout
[  386.228848] Bluetooth: hci5: command 0x0419 tx timeout
[  386.356791] Bluetooth: hci4: command 0x041b tx timeout
[  387.103367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  387.105557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  387.115506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  387.131946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  387.136956] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  387.138622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  387.144279] Bluetooth: hci6: HCI_REQ-0x0c1a
[  387.829879] Bluetooth: hci1: command 0x040f tx timeout
[  388.404927] Bluetooth: hci4: command 0x040f tx timeout
[  389.172867] Bluetooth: hci6: command 0x0409 tx timeout
[  389.365971] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  389.877871] Bluetooth: hci1: command 0x0419 tx timeout
[  390.452878] Bluetooth: hci4: command 0x0419 tx timeout
[  391.220895] Bluetooth: hci6: command 0x041b tx timeout
[  391.801982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  391.807109] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  391.808332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  391.817939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  391.820558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  391.822408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  391.834994] Bluetooth: hci7: HCI_REQ-0x0c1a
[  393.269800] Bluetooth: hci6: command 0x040f tx timeout
[  393.654304] audit: type=1400 audit(1664417976.623:7): avc:  denied  { create } for  pid=16597 comm="syz-executor.3" name="file0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=lnk_file permissive=1
[  393.656416] audit: type=1400 audit(1664417976.624:8): avc:  denied  { associate } for  pid=16597 comm="syz-executor.3" name="file0" scontext=system_u:object_r:autofs_device_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=filesystem permissive=1
[  393.909827] Bluetooth: hci7: command 0x0409 tx timeout
[  395.317784] Bluetooth: hci6: command 0x0419 tx timeout
[  395.957783] Bluetooth: hci7: command 0x041b tx timeout
[  398.005804] Bluetooth: hci7: command 0x040f tx timeout
[  400.053786] Bluetooth: hci7: command 0x0419 tx timeout
[  424.731259] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use)
02:20:16 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2}, 0x40010042)

02:20:16 executing program 2:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000540))
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0)

02:20:16 executing program 4:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:16 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

02:20:16 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

02:20:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001040)='Z', 0x1}], 0x0, &(0x7f0000001740))

02:20:16 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

02:20:17 executing program 7:
syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001040)='Z', 0x1}], 0x0, &(0x7f0000001740))

02:20:17 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2}, 0x40010042)

02:20:17 executing program 4:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:17 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

02:20:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 7:
syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001040)='Z', 0x1}], 0x0, &(0x7f0000001740))

02:20:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000004740)={0x0, 0xea60}, 0x10)

02:20:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 4:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:17 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

02:20:17 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2}, 0x40010042)

02:20:17 executing program 3:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 3:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:17 executing program 0:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 7:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 6:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001})

02:20:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x101}, 0xe)

02:20:17 executing program 6:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x1400000000)
sendfile(r2, r1, &(0x7f0000000040), 0x8)

02:20:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001})

02:20:17 executing program 0:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 3:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:17 executing program 7:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x101}, 0xe)

02:20:17 executing program 7:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001})

02:20:18 executing program 0:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:18 executing program 6:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00')

02:20:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x101}, 0xe)

02:20:18 executing program 3:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r0, 0x1}, 0x14}}, 0x0)

02:20:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001})

02:20:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x101}, 0xe)

02:20:18 executing program 1:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:18 executing program 0:
syz_io_uring_setup(0x5418, &(0x7f0000000400), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

02:20:18 executing program 7:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

[  435.382195] audit: type=1400 audit(1664418018.351:9): avc:  denied  { open } for  pid=18510 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  435.384058] audit: type=1400 audit(1664418018.352:10): avc:  denied  { kernel } for  pid=18510 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  435.433601] ------------[ cut here ]------------
[  435.433631] 
[  435.433635] ======================================================
[  435.433640] WARNING: possible circular locking dependency detected
[  435.433645] 6.0.0-rc7-next-20220928 #1 Not tainted
[  435.433655] ------------------------------------------------------
[  435.433660] syz-executor.2/18511 is trying to acquire lock:
[  435.433670] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  435.433727] 
[  435.433727] but task is already holding lock:
[  435.433731] ffff888009105820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  435.433772] 
[  435.433772] which lock already depends on the new lock.
[  435.433772] 
[  435.433776] 
[  435.433776] the existing dependency chain (in reverse order) is:
[  435.433781] 
[  435.433781] -> #3 (&ctx->lock){....}-{2:2}:
[  435.433801]        _raw_spin_lock+0x2a/0x40
[  435.433819]        __perf_event_task_sched_out+0x53b/0x18d0
[  435.433839]        __schedule+0xedd/0x2470
[  435.433864]        schedule+0xda/0x1b0
[  435.433887]        futex_wait_queue+0xf5/0x1e0
[  435.433905]        futex_wait+0x28e/0x690
[  435.433921]        do_futex+0x2ff/0x380
[  435.433935]        __x64_sys_futex+0x1c6/0x4d0
[  435.433951]        do_syscall_64+0x3b/0x90
[  435.433967]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  435.433989] 
[  435.433989] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  435.434010]        _raw_spin_lock_nested+0x30/0x40
[  435.434028]        raw_spin_rq_lock_nested+0x1e/0x30
[  435.434048]        task_fork_fair+0x63/0x4d0
[  435.434075]        sched_cgroup_fork+0x3d0/0x540
[  435.434098]        copy_process+0x4183/0x6e20
[  435.434113]        kernel_clone+0xe7/0x890
[  435.434128]        user_mode_thread+0xad/0xf0
[  435.434143]        rest_init+0x24/0x250
[  435.434164]        arch_call_rest_init+0xf/0x14
[  435.434193]        start_kernel+0x4c6/0x4eb
[  435.434216]        secondary_startup_64_no_verify+0xe0/0xeb
[  435.434236] 
[  435.434236] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  435.434260]        _raw_spin_lock_irqsave+0x39/0x60
[  435.434282]        try_to_wake_up+0xab/0x1930
[  435.434301]        up+0x75/0xb0
[  435.434319]        __up_console_sem+0x6e/0x80
[  435.434336]        console_unlock+0x46a/0x590
[  435.434353]        do_con_write+0xc05/0x1d50
[  435.434365]        con_write+0x21/0x40
[  435.434377]        n_tty_write+0x4d4/0xfe0
[  435.434391]        file_tty_write.constprop.0+0x455/0x8a0
[  435.434426]        vfs_write+0x9c3/0xd90
[  435.434453]        ksys_write+0x127/0x250
[  435.434466]        do_syscall_64+0x3b/0x90
[  435.434481]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  435.434502] 
[  435.434502] -> #0 ((console_sem).lock){....}-{2:2}:
[  435.434525]        __lock_acquire+0x2a02/0x5e70
[  435.434551]        lock_acquire+0x1a2/0x530
[  435.434577]        _raw_spin_lock_irqsave+0x39/0x60
[  435.434599]        down_trylock+0xe/0x70
[  435.434628]        __down_trylock_console_sem+0x3b/0xd0
[  435.434654]        vprintk_emit+0x16b/0x560
[  435.434681]        vprintk+0x84/0xa0
[  435.434707]        _printk+0xba/0xf1
[  435.434727]        report_bug.cold+0x72/0xab
[  435.434742]        handle_bug+0x3c/0x70
[  435.434756]        exc_invalid_op+0x14/0x50
[  435.434773]        asm_exc_invalid_op+0x16/0x20
[  435.434795]        group_sched_out.part.0+0x2c7/0x460
[  435.434812]        ctx_sched_out+0x8f1/0xc10
[  435.434829]        __perf_event_task_sched_out+0x6d0/0x18d0
[  435.434848]        __schedule+0xedd/0x2470
[  435.434873]        schedule+0xda/0x1b0
[  435.434897]        futex_wait_queue+0xf5/0x1e0
[  435.434914]        futex_wait+0x28e/0x690
[  435.434931]        do_futex+0x2ff/0x380
[  435.434946]        __x64_sys_futex+0x1c6/0x4d0
[  435.434962]        do_syscall_64+0x3b/0x90
[  435.434979]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  435.435002] 
[  435.435002] other info that might help us debug this:
[  435.435002] 
[  435.435006] Chain exists of:
[  435.435006]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  435.435006] 
[  435.435029]  Possible unsafe locking scenario:
[  435.435029] 
[  435.435033]        CPU0                    CPU1
[  435.435036]        ----                    ----
[  435.435040]   lock(&ctx->lock);
[  435.435049]                                lock(&rq->__lock);
[  435.435059]                                lock(&ctx->lock);
[  435.435068]   lock((console_sem).lock);
[  435.435077] 
[  435.435077]  *** DEADLOCK ***
[  435.435077] 
[  435.435080] 2 locks held by syz-executor.2/18511:
[  435.435091]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  435.435141]  #1: ffff888009105820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  435.435186] 
[  435.435186] stack backtrace:
[  435.435190] CPU: 0 PID: 18511 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220928 #1
[  435.435211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  435.435223] Call Trace:
[  435.435228]  <TASK>
[  435.435235]  dump_stack_lvl+0x8b/0xb3
[  435.435254]  check_noncircular+0x263/0x2e0
[  435.435280]  ? format_decode+0x26c/0xb50
[  435.435309]  ? print_circular_bug+0x450/0x450
[  435.435337]  ? enable_ptr_key_workfn+0x20/0x20
[  435.435364]  ? __lockdep_reset_lock+0x180/0x180
[  435.435393]  ? format_decode+0x26c/0xb50
[  435.435424]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  435.435454]  __lock_acquire+0x2a02/0x5e70
[  435.435488]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  435.435525]  lock_acquire+0x1a2/0x530
[  435.435552]  ? down_trylock+0xe/0x70
[  435.435582]  ? lock_release+0x750/0x750
[  435.435610]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  435.435645]  ? vprintk+0x84/0xa0
[  435.435675]  _raw_spin_lock_irqsave+0x39/0x60
[  435.435696]  ? down_trylock+0xe/0x70
[  435.435725]  down_trylock+0xe/0x70
[  435.435754]  ? vprintk+0x84/0xa0
[  435.435782]  __down_trylock_console_sem+0x3b/0xd0
[  435.435811]  vprintk_emit+0x16b/0x560
[  435.435838]  ? lock_downgrade+0x6d0/0x6d0
[  435.435867]  vprintk+0x84/0xa0
[  435.435895]  _printk+0xba/0xf1
[  435.435916]  ? record_print_text.cold+0x16/0x16
[  435.435941]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  435.435963]  ? lock_downgrade+0x6d0/0x6d0
[  435.435992]  ? report_bug.cold+0x66/0xab
[  435.436010]  ? group_sched_out.part.0+0x2c7/0x460
[  435.436028]  report_bug.cold+0x72/0xab
[  435.436047]  handle_bug+0x3c/0x70
[  435.436065]  exc_invalid_op+0x14/0x50
[  435.436084]  asm_exc_invalid_op+0x16/0x20
[  435.436109] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  435.436130] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  435.436148] RSP: 0018:ffff88803fb8f8f8 EFLAGS: 00010006
[  435.436161] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  435.436174] RDX: ffff88803d90b580 RSI: ffffffff815662f7 RDI: 0000000000000005
[  435.436186] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  435.436198] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888009105800
[  435.436210] R13: ffff88806ce3d140 R14: ffffffff8547c860 R15: 0000000000000002
[  435.436227]  ? group_sched_out.part.0+0x2c7/0x460
[  435.436249]  ? group_sched_out.part.0+0x2c7/0x460
[  435.436270]  ctx_sched_out+0x8f1/0xc10
[  435.436292]  __perf_event_task_sched_out+0x6d0/0x18d0
[  435.436317]  ? lock_is_held_type+0xd7/0x130
[  435.436341]  ? __perf_cgroup_move+0x160/0x160
[  435.436360]  ? set_next_entity+0x304/0x550
[  435.436391]  ? lock_is_held_type+0xd7/0x130
[  435.436417]  __schedule+0xedd/0x2470
[  435.436448]  ? io_schedule_timeout+0x150/0x150
[  435.436483]  schedule+0xda/0x1b0
[  435.436509]  futex_wait_queue+0xf5/0x1e0
[  435.436527]  futex_wait+0x28e/0x690
[  435.436546]  ? futex_wait_setup+0x230/0x230
[  435.436566]  ? wake_up_q+0x8b/0xf0
[  435.436588]  ? do_raw_spin_unlock+0x4f/0x220
[  435.436619]  ? futex_wake+0x158/0x490
[  435.436643]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  435.436672]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  435.436705]  do_futex+0x2ff/0x380
[  435.436727]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  435.436750]  ? __sanitizer_cov_trace_switch+0x12/0x90
[  435.436777]  __x64_sys_futex+0x1c6/0x4d0
[  435.436797]  ? hrtimer_interrupt+0x5b0/0x770
[  435.436820]  ? __x64_sys_futex_time32+0x480/0x480
[  435.436842]  ? syscall_enter_from_user_mode+0x1d/0x50
[  435.436868]  ? syscall_enter_from_user_mode+0x1d/0x50
[  435.436898]  do_syscall_64+0x3b/0x90
[  435.436916]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  435.436942] RIP: 0033:0x7fb8b5d61b19
[  435.436956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  435.436974] RSP: 002b:00007fb8b32d7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  435.436992] RAX: ffffffffffffffda RBX: 00007fb8b5e74f68 RCX: 00007fb8b5d61b19
[  435.437006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8b5e74f68
[  435.437018] RBP: 00007fb8b5e74f60 R08: 0000000000000000 R09: 0000000000000000
[  435.437030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8b5e74f6c
[  435.437042] R13: 00007ffe5f9a77ff R14: 00007fb8b32d7300 R15: 0000000000022000
[  435.437063]  </TASK>
[  435.520661] WARNING: CPU: 0 PID: 18511 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  435.521480] Modules linked in:
[  435.521779] CPU: 0 PID: 18511 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220928 #1
[  435.522518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  435.523499] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  435.524002] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  435.525556] RSP: 0018:ffff88803fb8f8f8 EFLAGS: 00010006
[  435.526022] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  435.526663] RDX: ffff88803d90b580 RSI: ffffffff815662f7 RDI: 0000000000000005
[  435.527286] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  435.527908] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888009105800
[  435.528519] R13: ffff88806ce3d140 R14: ffffffff8547c860 R15: 0000000000000002
[  435.529136] FS:  00007fb8b32d7700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  435.529829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  435.530336] CR2: 00007f53546ac000 CR3: 0000000033252000 CR4: 0000000000350ef0
[  435.530987] Call Trace:
[  435.531224]  <TASK>
[  435.531435]  ctx_sched_out+0x8f1/0xc10
[  435.531797]  __perf_event_task_sched_out+0x6d0/0x18d0
[  435.532265]  ? lock_is_held_type+0xd7/0x130
[  435.532664]  ? __perf_cgroup_move+0x160/0x160
[  435.533072]  ? set_next_entity+0x304/0x550
[  435.533474]  ? lock_is_held_type+0xd7/0x130
[  435.533872]  __schedule+0xedd/0x2470
[  435.534229]  ? io_schedule_timeout+0x150/0x150
[  435.534662]  schedule+0xda/0x1b0
[  435.534990]  futex_wait_queue+0xf5/0x1e0
[  435.535363]  futex_wait+0x28e/0x690
[  435.535702]  ? futex_wait_setup+0x230/0x230
[  435.536116]  ? wake_up_q+0x8b/0xf0
[  435.536450]  ? do_raw_spin_unlock+0x4f/0x220
[  435.536865]  ? futex_wake+0x158/0x490
[  435.537247]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  435.537735]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  435.538228]  do_futex+0x2ff/0x380
[  435.538589]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  435.539103]  ? __sanitizer_cov_trace_switch+0x12/0x90
[  435.539569]  __x64_sys_futex+0x1c6/0x4d0
[  435.539971]  ? hrtimer_interrupt+0x5b0/0x770
[  435.540392]  ? __x64_sys_futex_time32+0x480/0x480
[  435.540830]  ? syscall_enter_from_user_mode+0x1d/0x50
[  435.541300]  ? syscall_enter_from_user_mode+0x1d/0x50
[  435.541772]  do_syscall_64+0x3b/0x90
[  435.542113]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  435.542618] RIP: 0033:0x7fb8b5d61b19
[  435.542964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  435.544516] RSP: 002b:00007fb8b32d7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  435.545184] RAX: ffffffffffffffda RBX: 00007fb8b5e74f68 RCX: 00007fb8b5d61b19
[  435.545809] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8b5e74f68
[  435.546444] RBP: 00007fb8b5e74f60 R08: 0000000000000000 R09: 0000000000000000
[  435.547074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8b5e74f6c
[  435.547698] R13: 00007ffe5f9a77ff R14: 00007fb8b32d7300 R15: 0000000000022000
[  435.548332]  </TASK>
[  435.548553] irq event stamp: 2240
[  435.548863] hardirqs last  enabled at (2239): [<ffffffff84400d06>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[  435.549727] hardirqs last disabled at (2240): [<ffffffff842598f5>] __schedule+0x1225/0x2470
[  435.550492] softirqs last  enabled at (2172): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  435.551260] softirqs last disabled at (2157): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  435.552022] ---[ end trace 0000000000000000 ]---
02:20:18 executing program 1:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 6:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080))

02:20:18 executing program 0:
syz_io_uring_setup(0x5418, &(0x7f0000000400), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

02:20:18 executing program 7:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:18 executing program 4:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 1:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 4:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 0:
syz_io_uring_setup(0x5418, &(0x7f0000000400), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

02:20:18 executing program 7:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 6:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080))

02:20:18 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 0:
syz_io_uring_setup(0x5418, &(0x7f0000000400), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

02:20:18 executing program 7:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 1:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 6:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080))

02:20:18 executing program 4:
setuid(0xee00)
prctl$PR_SET_SECUREBITS(0x18, 0x0)

02:20:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:18 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12b008, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x2000, 0x0)

02:20:18 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:18 executing program 7:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:18 executing program 0:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 6:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080))

02:20:19 executing program 4:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

[  436.141724] hrtimer: interrupt took 18084 ns
02:20:19 executing program 5:
r0 = io_uring_setup(0x529b, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000640), 0x0)

02:20:19 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 5:
r0 = io_uring_setup(0x529b, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000640), 0x0)

02:20:19 executing program 7:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 0:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 4:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 3:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:19 executing program 6:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:19 executing program 5:
r0 = io_uring_setup(0x529b, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000640), 0x0)

02:20:19 executing program 3:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:19 executing program 6:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:19 executing program 5:
r0 = io_uring_setup(0x529b, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000640), 0x0)

02:20:19 executing program 3:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:19 executing program 6:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:19 executing program 5:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:19 executing program 7:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 3:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:19 executing program 5:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:19 executing program 2:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:19 executing program 1:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:19 executing program 6:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 4:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:20 executing program 0:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})

02:20:20 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0)

02:20:20 executing program 5:
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_io_uring_setup(0x6cc7, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 2:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:20 executing program 2:
r0 = epoll_create(0x7823)
r1 = gettid()
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0})

02:20:20 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0)

02:20:20 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0)

[  437.402413] loop6: detected capacity change from 0 to 5168
02:20:20 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:20 executing program 2:
syz_io_uring_setup(0x5418, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:20 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}], 0x20}}], 0x2, 0x0)

02:20:20 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700})

02:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73663a186000088001000440000004f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x43000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x83000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xc3000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x143000}], 0x0, &(0x7f0000010f00))

[  437.430993] random: crng reseeded on system resumption
[  437.464487] Restarting kernel threads ... done.
[  437.522167] random: crng reseeded on system resumption
02:20:20 executing program 2:
syz_io_uring_setup(0x5418, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:20 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
lseek(r0, 0x3f, 0x1)

02:20:20 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700})

02:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73663a186000088001000440000004f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x43000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x83000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xc3000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x143000}], 0x0, &(0x7f0000010f00))

02:20:20 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:20 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:20 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  437.588340] loop6: detected capacity change from 0 to 5168
02:20:20 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700})

02:20:20 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
lseek(r0, 0x3f, 0x1)

02:20:20 executing program 2:
syz_io_uring_setup(0x5418, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:20 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73663a186000088001000440000004f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x43000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x83000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xc3000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x143000}], 0x0, &(0x7f0000010f00))

[  437.690170] random: crng reseeded on system resumption
02:20:20 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  437.738781] Restarting kernel threads ... 
[  437.756430] loop6: detected capacity change from 0 to 5168
[  437.776801] done.
02:20:20 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
lseek(r0, 0x3f, 0x1)

02:20:20 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/248, 0xf8}, 0x3}], 0x1, 0x2040, &(0x7f0000001640)={0x0, 0x3938700})

02:20:20 executing program 2:
syz_io_uring_setup(0x5418, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)

02:20:20 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:20 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73663a186000088001000440000004f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x43000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x83000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xc3000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x143000}], 0x0, &(0x7f0000010f00))

[  437.921849] loop6: detected capacity change from 0 to 5168
[  438.032078] random: crng reseeded on system resumption
02:20:20 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:20 executing program 3:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:20 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:20 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
lseek(r0, 0x3f, 0x1)

02:20:20 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:20 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:21 executing program 3:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:21 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 3:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

[  438.190644] random: crng reseeded on system resumption
02:20:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setregid(0xee01, 0x0)
setregid(0x0, 0x0)

02:20:21 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  438.374677] random: crng reseeded on system resumption
02:20:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  438.496417] random: crng reseeded on system resumption
02:20:21 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  438.572575] Restarting kernel threads ... done.
02:20:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  438.749041] random: crng reseeded on system resumption
[  438.778163] Restarting kernel threads ... done.
02:20:21 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:21 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 6:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:20:21 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000002600))

02:20:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 3:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000480)={0x0, 0x9, 0x4, 0xfffffffd, 0x2, [{0x1, 0x7, 0x6}, {0x1, 0x1000, 0x1, '\x00', 0x480}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
r3 = gettid()
rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6})
get_robust_list(r2, &(0x7f00000005c0)=&(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000340)}}, &(0x7f0000000600)=0x18)
perf_event_open(0x0, r3, 0xb, 0xffffffffffffffff, 0xb)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_WAITACTIVE(r4, 0x5607)

02:20:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

[  438.918552] random: crng reseeded on system resumption
02:20:21 executing program 6:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:20:21 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

02:20:21 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000002600))

02:20:21 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:22 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil)

02:20:22 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0
VM DIAGNOSIS:
02:20:18  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88803fb8f320
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffffffff8765a940 R14=ffffffff8765a990 R15=ffffffff8765abf0
RIP=ffffffff823ba189 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb8b32d7700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f53546ac000 CR3=0000000033252000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 96d163f1b38e053b 9b9f20e8d58d3633
YMM01=0000000000000000 0000000000000000 e79ce8d898203f3f 64863e059108f83f
YMM02=0000000000000000 0000000000000000 18f764817fefea90 4ef0febb4a39c6d8
YMM03=0000000000000000 0000000000000000 d28bb38832f917d9 1958ba958c05b62a
YMM04=0000000000000000 0000000000000000 ce07ea361cb839c6 deeb6077e68fe588
YMM05=0000000000000000 0000000000000000 85f5483b08be4fc1 2ef55ebec8b64af5
YMM06=0000000000000000 0000000000000000 7b2bfbb82927bb3b a624b93c9032fa7d
YMM07=0000000000000000 0000000000000000 95667a32e1362224 5ba9f38812d57921
YMM08=0000000000000000 0000000000000000 55579e398886135a 0a2823dfc905ef4d
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff818481b1 RDI=ffff88800ff7b974 RBP=ffff88800ff7b580 RSP=ffff88801876f910
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=00000000bdc64858 R13=ffff88800bdc7520 R14=ffff888018352000 R15=ffff88800bdc7490
RIP=ffffffff8132338d RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb511d928c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc80536fd8 CR3=000000000e830000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f
YMM03=0000000000000000 0000000000000000 6c622f6c61757472 69762f7365636976
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 000055b883dc6bb0 0000000000000004
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000