
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:21781' (ECDSA) to the list of known hosts.
2022/09/13 16:46:35 fuzzer started
2022/09/13 16:46:35 dialing manager at localhost:36597
syzkaller login: [   43.844153] cgroup: Unknown subsys name 'net'
[   43.979042] cgroup: Unknown subsys name 'rlimit'
[   53.917240] systemd-udevd (128) used greatest stack depth: 24672 bytes left
2022/09/13 16:46:50 syscalls: 2215
2022/09/13 16:46:50 code coverage: enabled
2022/09/13 16:46:50 comparison tracing: enabled
2022/09/13 16:46:50 extra coverage: enabled
2022/09/13 16:46:50 setuid sandbox: enabled
2022/09/13 16:46:50 namespace sandbox: enabled
2022/09/13 16:46:50 Android sandbox: enabled
2022/09/13 16:46:50 fault injection: enabled
2022/09/13 16:46:50 leak checking: enabled
2022/09/13 16:46:50 net packet injection: enabled
2022/09/13 16:46:50 net device setup: enabled
2022/09/13 16:46:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/13 16:46:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/13 16:46:50 USB emulation: enabled
2022/09/13 16:46:50 hci packet injection: enabled
2022/09/13 16:46:50 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913                                          )
2022/09/13 16:46:50 802.15.4 emulation: enabled
2022/09/13 16:46:50 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/13 16:46:51 fetching corpus: 50, signal 25676/29269 (executing program)
2022/09/13 16:46:51 fetching corpus: 100, signal 49025/53842 (executing program)
2022/09/13 16:46:51 fetching corpus: 150, signal 58956/65097 (executing program)
2022/09/13 16:46:51 fetching corpus: 200, signal 69168/76453 (executing program)
2022/09/13 16:46:51 fetching corpus: 250, signal 75813/84277 (executing program)
2022/09/13 16:46:51 fetching corpus: 300, signal 80204/89859 (executing program)
2022/09/13 16:46:51 fetching corpus: 350, signal 85836/96511 (executing program)
2022/09/13 16:46:52 fetching corpus: 400, signal 89985/101680 (executing program)
2022/09/13 16:46:52 fetching corpus: 450, signal 94003/106718 (executing program)
2022/09/13 16:46:52 fetching corpus: 500, signal 96357/110149 (executing program)
2022/09/13 16:46:52 fetching corpus: 550, signal 100145/114923 (executing program)
2022/09/13 16:46:52 fetching corpus: 600, signal 104162/119762 (executing program)
2022/09/13 16:46:52 fetching corpus: 650, signal 107853/124260 (executing program)
2022/09/13 16:46:53 fetching corpus: 700, signal 111464/128656 (executing program)
2022/09/13 16:46:53 fetching corpus: 750, signal 115099/132962 (executing program)
2022/09/13 16:46:53 fetching corpus: 800, signal 117166/135860 (executing program)
2022/09/13 16:46:53 fetching corpus: 850, signal 119975/139369 (executing program)
2022/09/13 16:46:53 fetching corpus: 900, signal 122118/142273 (executing program)
2022/09/13 16:46:53 fetching corpus: 950, signal 124218/145120 (executing program)
2022/09/13 16:46:53 fetching corpus: 1000, signal 127259/148742 (executing program)
2022/09/13 16:46:54 fetching corpus: 1050, signal 130868/152729 (executing program)
2022/09/13 16:46:54 fetching corpus: 1100, signal 133432/155819 (executing program)
2022/09/13 16:46:54 fetching corpus: 1150, signal 136353/159199 (executing program)
2022/09/13 16:46:54 fetching corpus: 1200, signal 138293/161779 (executing program)
2022/09/13 16:46:54 fetching corpus: 1250, signal 139499/163681 (executing program)
2022/09/13 16:46:54 fetching corpus: 1300, signal 141561/166256 (executing program)
2022/09/13 16:46:54 fetching corpus: 1350, signal 142984/168275 (executing program)
2022/09/13 16:46:54 fetching corpus: 1400, signal 144660/170418 (executing program)
2022/09/13 16:46:55 fetching corpus: 1450, signal 146115/172447 (executing program)
2022/09/13 16:46:55 fetching corpus: 1500, signal 148168/174929 (executing program)
2022/09/13 16:46:55 fetching corpus: 1550, signal 149299/176624 (executing program)
2022/09/13 16:46:55 fetching corpus: 1600, signal 151082/178786 (executing program)
2022/09/13 16:46:55 fetching corpus: 1650, signal 152232/180491 (executing program)
2022/09/13 16:46:55 fetching corpus: 1700, signal 153815/182447 (executing program)
2022/09/13 16:46:55 fetching corpus: 1750, signal 155126/184227 (executing program)
2022/09/13 16:46:56 fetching corpus: 1800, signal 157450/186655 (executing program)
2022/09/13 16:46:56 fetching corpus: 1850, signal 159364/188736 (executing program)
2022/09/13 16:46:56 fetching corpus: 1900, signal 161445/191020 (executing program)
2022/09/13 16:46:56 fetching corpus: 1950, signal 162798/192719 (executing program)
2022/09/13 16:46:56 fetching corpus: 2000, signal 164250/194490 (executing program)
2022/09/13 16:46:56 fetching corpus: 2050, signal 164876/195645 (executing program)
2022/09/13 16:46:56 fetching corpus: 2100, signal 166336/197326 (executing program)
2022/09/13 16:46:56 fetching corpus: 2150, signal 168650/199605 (executing program)
2022/09/13 16:46:57 fetching corpus: 2200, signal 170058/201209 (executing program)
2022/09/13 16:46:57 fetching corpus: 2250, signal 171589/202878 (executing program)
2022/09/13 16:46:57 fetching corpus: 2300, signal 173066/204554 (executing program)
2022/09/13 16:46:57 fetching corpus: 2350, signal 173952/205777 (executing program)
2022/09/13 16:46:57 fetching corpus: 2400, signal 175173/207187 (executing program)
2022/09/13 16:46:57 fetching corpus: 2450, signal 176568/208755 (executing program)
2022/09/13 16:46:58 fetching corpus: 2500, signal 177964/210237 (executing program)
2022/09/13 16:46:58 fetching corpus: 2550, signal 179873/212042 (executing program)
2022/09/13 16:46:58 fetching corpus: 2600, signal 180755/213187 (executing program)
2022/09/13 16:46:58 fetching corpus: 2650, signal 181712/214339 (executing program)
2022/09/13 16:46:58 fetching corpus: 2700, signal 182625/215426 (executing program)
2022/09/13 16:46:58 fetching corpus: 2750, signal 183777/216639 (executing program)
2022/09/13 16:46:58 fetching corpus: 2800, signal 184593/217692 (executing program)
2022/09/13 16:46:58 fetching corpus: 2850, signal 185700/218850 (executing program)
2022/09/13 16:46:59 fetching corpus: 2900, signal 186901/220077 (executing program)
2022/09/13 16:46:59 fetching corpus: 2950, signal 187878/221138 (executing program)
2022/09/13 16:46:59 fetching corpus: 3000, signal 188609/222088 (executing program)
2022/09/13 16:46:59 fetching corpus: 3050, signal 189164/222903 (executing program)
2022/09/13 16:46:59 fetching corpus: 3100, signal 189908/223833 (executing program)
2022/09/13 16:46:59 fetching corpus: 3150, signal 190995/224920 (executing program)
2022/09/13 16:47:00 fetching corpus: 3200, signal 191805/225885 (executing program)
2022/09/13 16:47:00 fetching corpus: 3250, signal 192570/226775 (executing program)
2022/09/13 16:47:00 fetching corpus: 3300, signal 193388/227695 (executing program)
2022/09/13 16:47:00 fetching corpus: 3350, signal 194510/228779 (executing program)
2022/09/13 16:47:00 fetching corpus: 3400, signal 196337/230133 (executing program)
2022/09/13 16:47:00 fetching corpus: 3450, signal 197586/231223 (executing program)
2022/09/13 16:47:00 fetching corpus: 3500, signal 198772/232219 (executing program)
2022/09/13 16:47:01 fetching corpus: 3550, signal 199653/233106 (executing program)
2022/09/13 16:47:01 fetching corpus: 3600, signal 200714/233991 (executing program)
2022/09/13 16:47:01 fetching corpus: 3650, signal 201500/234800 (executing program)
2022/09/13 16:47:01 fetching corpus: 3700, signal 202373/235591 (executing program)
2022/09/13 16:47:01 fetching corpus: 3750, signal 203365/236443 (executing program)
2022/09/13 16:47:01 fetching corpus: 3800, signal 203923/237137 (executing program)
2022/09/13 16:47:01 fetching corpus: 3850, signal 205206/238028 (executing program)
2022/09/13 16:47:02 fetching corpus: 3900, signal 205931/238784 (executing program)
2022/09/13 16:47:02 fetching corpus: 3950, signal 206845/239520 (executing program)
2022/09/13 16:47:02 fetching corpus: 4000, signal 207741/240204 (executing program)
2022/09/13 16:47:02 fetching corpus: 4050, signal 208472/240879 (executing program)
2022/09/13 16:47:02 fetching corpus: 4100, signal 209175/241509 (executing program)
2022/09/13 16:47:02 fetching corpus: 4150, signal 210187/242255 (executing program)
2022/09/13 16:47:02 fetching corpus: 4200, signal 210885/242866 (executing program)
2022/09/13 16:47:03 fetching corpus: 4250, signal 211468/243437 (executing program)
2022/09/13 16:47:03 fetching corpus: 4300, signal 212226/244117 (executing program)
2022/09/13 16:47:03 fetching corpus: 4350, signal 213177/244800 (executing program)
2022/09/13 16:47:03 fetching corpus: 4400, signal 213920/245404 (executing program)
2022/09/13 16:47:03 fetching corpus: 4450, signal 214870/246065 (executing program)
2022/09/13 16:47:03 fetching corpus: 4500, signal 215587/246621 (executing program)
2022/09/13 16:47:03 fetching corpus: 4550, signal 216016/247098 (executing program)
2022/09/13 16:47:03 fetching corpus: 4600, signal 216807/247698 (executing program)
2022/09/13 16:47:04 fetching corpus: 4650, signal 217440/248199 (executing program)
2022/09/13 16:47:04 fetching corpus: 4700, signal 218105/248744 (executing program)
2022/09/13 16:47:04 fetching corpus: 4750, signal 218840/249318 (executing program)
2022/09/13 16:47:04 fetching corpus: 4800, signal 219877/249902 (executing program)
2022/09/13 16:47:04 fetching corpus: 4850, signal 220269/250297 (executing program)
2022/09/13 16:47:04 fetching corpus: 4900, signal 220699/250719 (executing program)
2022/09/13 16:47:04 fetching corpus: 4950, signal 221077/251115 (executing program)
2022/09/13 16:47:05 fetching corpus: 5000, signal 221800/251548 (executing program)
2022/09/13 16:47:05 fetching corpus: 5050, signal 222379/251951 (executing program)
2022/09/13 16:47:05 fetching corpus: 5100, signal 224033/252593 (executing program)
2022/09/13 16:47:05 fetching corpus: 5150, signal 224844/253020 (executing program)
2022/09/13 16:47:05 fetching corpus: 5200, signal 225509/253428 (executing program)
2022/09/13 16:47:05 fetching corpus: 5250, signal 226068/253815 (executing program)
2022/09/13 16:47:05 fetching corpus: 5300, signal 226739/254183 (executing program)
2022/09/13 16:47:05 fetching corpus: 5350, signal 227277/254510 (executing program)
2022/09/13 16:47:06 fetching corpus: 5400, signal 227914/254839 (executing program)
2022/09/13 16:47:06 fetching corpus: 5450, signal 228577/255187 (executing program)
2022/09/13 16:47:06 fetching corpus: 5500, signal 228988/255475 (executing program)
2022/09/13 16:47:07 fetching corpus: 5550, signal 229398/255804 (executing program)
2022/09/13 16:47:07 fetching corpus: 5600, signal 230010/256152 (executing program)
2022/09/13 16:47:07 fetching corpus: 5650, signal 230970/256603 (executing program)
2022/09/13 16:47:07 fetching corpus: 5700, signal 231599/256877 (executing program)
2022/09/13 16:47:07 fetching corpus: 5750, signal 232243/257184 (executing program)
2022/09/13 16:47:08 fetching corpus: 5800, signal 233060/257474 (executing program)
2022/09/13 16:47:08 fetching corpus: 5850, signal 233725/257743 (executing program)
2022/09/13 16:47:08 fetching corpus: 5900, signal 234271/257986 (executing program)
2022/09/13 16:47:08 fetching corpus: 5950, signal 235109/258225 (executing program)
2022/09/13 16:47:08 fetching corpus: 6000, signal 235493/258432 (executing program)
2022/09/13 16:47:08 fetching corpus: 6050, signal 236005/258639 (executing program)
2022/09/13 16:47:08 fetching corpus: 6100, signal 236448/258867 (executing program)
2022/09/13 16:47:09 fetching corpus: 6150, signal 237667/259063 (executing program)
2022/09/13 16:47:09 fetching corpus: 6200, signal 238334/259268 (executing program)
2022/09/13 16:47:09 fetching corpus: 6250, signal 238940/259476 (executing program)
2022/09/13 16:47:09 fetching corpus: 6300, signal 239586/259548 (executing program)
2022/09/13 16:47:09 fetching corpus: 6350, signal 240341/259560 (executing program)
2022/09/13 16:47:09 fetching corpus: 6400, signal 240929/259560 (executing program)
2022/09/13 16:47:09 fetching corpus: 6450, signal 241884/259571 (executing program)
2022/09/13 16:47:10 fetching corpus: 6500, signal 242366/259590 (executing program)
2022/09/13 16:47:10 fetching corpus: 6550, signal 242724/259590 (executing program)
2022/09/13 16:47:10 fetching corpus: 6600, signal 243245/259599 (executing program)
2022/09/13 16:47:10 fetching corpus: 6650, signal 243555/259621 (executing program)
2022/09/13 16:47:10 fetching corpus: 6700, signal 244161/259621 (executing program)
2022/09/13 16:47:10 fetching corpus: 6750, signal 244721/259622 (executing program)
2022/09/13 16:47:11 fetching corpus: 6800, signal 245216/259732 (executing program)
2022/09/13 16:47:11 fetching corpus: 6850, signal 245627/259737 (executing program)
2022/09/13 16:47:11 fetching corpus: 6900, signal 246025/259743 (executing program)
2022/09/13 16:47:11 fetching corpus: 6950, signal 246598/259748 (executing program)
2022/09/13 16:47:11 fetching corpus: 7000, signal 247248/259765 (executing program)
2022/09/13 16:47:11 fetching corpus: 7050, signal 247840/259780 (executing program)
2022/09/13 16:47:12 fetching corpus: 7100, signal 248433/259786 (executing program)
2022/09/13 16:47:12 fetching corpus: 7150, signal 248944/259791 (executing program)
2022/09/13 16:47:12 fetching corpus: 7200, signal 249393/259793 (executing program)
2022/09/13 16:47:12 fetching corpus: 7250, signal 249752/259801 (executing program)
2022/09/13 16:47:12 fetching corpus: 7300, signal 250090/259805 (executing program)
2022/09/13 16:47:12 fetching corpus: 7319, signal 250343/259812 (executing program)
2022/09/13 16:47:12 fetching corpus: 7319, signal 250343/259812 (executing program)
2022/09/13 16:47:15 starting 8 fuzzer processes
16:47:15 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00')
setns(r0, 0x0)

16:47:15 executing program 1:
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0ff7f)

16:47:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000140))

[   82.782466] audit: type=1400 audit(1663087635.102:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:47:15 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

16:47:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:47:15 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
close(r0)

16:47:15 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:47:15 executing program 7:
io_submit(0x0, 0x0, 0x0)

[   84.066051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.067454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.069087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.072094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.074492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.075665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.083448] Bluetooth: hci0: HCI_REQ-0x0c1a
[   84.190714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.193328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.195607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.200525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.202787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.204957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.211062] Bluetooth: hci2: HCI_REQ-0x0c1a
[   84.221970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.224113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.248733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.251842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.253857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.260555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.263460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.267224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.270409] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   84.272782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.274832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.277419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.279799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.282125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   84.285490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.290653] Bluetooth: hci4: HCI_REQ-0x0c1a
[   84.305125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.307338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.309110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.315712] Bluetooth: hci3: HCI_REQ-0x0c1a
[   84.326568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.334630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.335653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   84.338221] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.339510] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.341017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   84.342035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.356118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.359688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.361536] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.363841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.367914] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   84.370086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.371655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   84.373894] Bluetooth: hci1: HCI_REQ-0x0c1a
[   84.379092] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   84.383564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   84.389748] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.391916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.404356] Bluetooth: hci6: HCI_REQ-0x0c1a
[   84.425445] Bluetooth: hci7: HCI_REQ-0x0c1a
[   84.453144] Bluetooth: hci5: HCI_REQ-0x0c1a
[   86.145858] Bluetooth: hci0: command 0x0409 tx timeout
[   86.272329] Bluetooth: hci2: command 0x0409 tx timeout
[   86.337496] Bluetooth: hci3: command 0x0409 tx timeout
[   86.338078] Bluetooth: hci4: command 0x0409 tx timeout
[   86.400429] Bluetooth: hci1: command 0x0409 tx timeout
[   86.464379] Bluetooth: hci5: command 0x0409 tx timeout
[   86.464532] Bluetooth: hci6: command 0x0409 tx timeout
[   86.529315] Bluetooth: hci7: command 0x0409 tx timeout
[   88.192339] Bluetooth: hci0: command 0x041b tx timeout
[   88.320343] Bluetooth: hci2: command 0x041b tx timeout
[   88.384376] Bluetooth: hci4: command 0x041b tx timeout
[   88.385096] Bluetooth: hci3: command 0x041b tx timeout
[   88.448350] Bluetooth: hci1: command 0x041b tx timeout
[   88.512417] Bluetooth: hci6: command 0x041b tx timeout
[   88.513153] Bluetooth: hci5: command 0x041b tx timeout
[   88.576357] Bluetooth: hci7: command 0x041b tx timeout
[   90.240414] Bluetooth: hci0: command 0x040f tx timeout
[   90.368374] Bluetooth: hci2: command 0x040f tx timeout
[   90.432564] Bluetooth: hci3: command 0x040f tx timeout
[   90.433197] Bluetooth: hci4: command 0x040f tx timeout
[   90.496348] Bluetooth: hci1: command 0x040f tx timeout
[   90.560411] Bluetooth: hci5: command 0x040f tx timeout
[   90.561067] Bluetooth: hci6: command 0x040f tx timeout
[   90.625062] Bluetooth: hci7: command 0x040f tx timeout
[   92.288437] Bluetooth: hci0: command 0x0419 tx timeout
[   92.416450] Bluetooth: hci2: command 0x0419 tx timeout
[   92.480415] Bluetooth: hci4: command 0x0419 tx timeout
[   92.481030] Bluetooth: hci3: command 0x0419 tx timeout
[   92.545020] Bluetooth: hci1: command 0x0419 tx timeout
[   92.608424] Bluetooth: hci6: command 0x0419 tx timeout
[   92.610451] Bluetooth: hci5: command 0x0419 tx timeout
[   92.672383] Bluetooth: hci7: command 0x0419 tx timeout
[  143.612657] syz-executor.0 (294) used greatest stack depth: 24024 bytes left
[  146.331997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.335394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.337854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.341686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.344727] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  146.345956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.351617] Bluetooth: hci1: HCI_REQ-0x0c1a
[  146.366562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.368233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.372122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.378732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.380551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.382624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  146.383998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.389559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.389992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.391414] Bluetooth: hci0: HCI_REQ-0x0c1a
[  146.407491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.408610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.414555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.418586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.424514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.426165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.459933] Bluetooth: hci3: HCI_REQ-0x0c1a
[  146.465918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.474301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.476941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.482257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.483589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.485727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.485825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.487258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.488130] Bluetooth: hci2: HCI_REQ-0x0c1a
[  146.489870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.491819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.492906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.496254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.497685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.499733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.501433] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  146.502555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.504195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.508202] Bluetooth: hci4: HCI_REQ-0x0c1a
[  146.513456] Bluetooth: hci5: HCI_REQ-0x0c1a
[  146.518466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.520159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.522734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.524882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.526109] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.530738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.532179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.533443] Bluetooth: hci6: HCI_REQ-0x0c1a
[  146.535575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.537135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.542876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.565421] Bluetooth: hci7: HCI_REQ-0x0c1a
[  148.416350] Bluetooth: hci1: command 0x0409 tx timeout
[  148.416358] Bluetooth: hci0: command 0x0409 tx timeout
[  148.480428] Bluetooth: hci3: command 0x0409 tx timeout
[  148.544319] Bluetooth: hci5: command 0x0409 tx timeout
[  148.544320] Bluetooth: hci6: command 0x0409 tx timeout
[  148.544401] Bluetooth: hci4: command 0x0409 tx timeout
[  148.608402] Bluetooth: hci7: command 0x0409 tx timeout
[  148.608968] Bluetooth: hci2: command 0x0409 tx timeout
[  150.464401] Bluetooth: hci0: command 0x041b tx timeout
[  150.465734] Bluetooth: hci1: command 0x041b tx timeout
[  150.528381] Bluetooth: hci3: command 0x041b tx timeout
[  150.592323] Bluetooth: hci5: command 0x041b tx timeout
[  150.592349] Bluetooth: hci4: command 0x041b tx timeout
[  150.592773] Bluetooth: hci6: command 0x041b tx timeout
[  150.656406] Bluetooth: hci2: command 0x041b tx timeout
[  150.656985] Bluetooth: hci7: command 0x041b tx timeout
[  152.512331] Bluetooth: hci1: command 0x040f tx timeout
[  152.512811] Bluetooth: hci0: command 0x040f tx timeout
[  152.576325] Bluetooth: hci3: command 0x040f tx timeout
[  152.640315] Bluetooth: hci4: command 0x040f tx timeout
[  152.640443] Bluetooth: hci6: command 0x040f tx timeout
[  152.641881] Bluetooth: hci5: command 0x040f tx timeout
[  152.705346] Bluetooth: hci7: command 0x040f tx timeout
[  152.705897] Bluetooth: hci2: command 0x040f tx timeout
[  154.561421] Bluetooth: hci0: command 0x0419 tx timeout
[  154.561904] Bluetooth: hci1: command 0x0419 tx timeout
[  154.625931] Bluetooth: hci3: command 0x0419 tx timeout
[  154.689340] Bluetooth: hci5: command 0x0419 tx timeout
[  154.689834] Bluetooth: hci6: command 0x0419 tx timeout
[  154.690741] Bluetooth: hci4: command 0x0419 tx timeout
[  154.753358] Bluetooth: hci2: command 0x0419 tx timeout
[  154.755110] Bluetooth: hci7: command 0x0419 tx timeout
16:49:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getresgid(0x0, 0x0, 0x0)
getegid()

[  200.980928] audit: type=1400 audit(1663087753.300:7): avc:  denied  { open } for  pid=6870 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  200.984951] audit: type=1400 audit(1663087753.300:8): avc:  denied  { kernel } for  pid=6870 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
16:49:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

16:49:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

16:49:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

16:49:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

16:49:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0xe00, 0x0)

16:49:14 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

[  202.487121] ------------[ cut here ]------------
[  202.487160] 
[  202.487165] ======================================================
[  202.487171] WARNING: possible circular locking dependency detected
[  202.487177] 6.0.0-rc5-next-20220913 #1 Not tainted
[  202.487189] ------------------------------------------------------
[  202.487194] syz-executor.2/6941 is trying to acquire lock:
[  202.487205] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  202.487266] 
[  202.487266] but task is already holding lock:
[  202.487271] ffff88800fad0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  202.487317] 
[  202.487317] which lock already depends on the new lock.
[  202.487317] 
[  202.487322] 
[  202.487322] the existing dependency chain (in reverse order) is:
[  202.487327] 
[  202.487327] -> #3 (&ctx->lock){....}-{2:2}:
[  202.487351]        _raw_spin_lock+0x2a/0x40
[  202.487379]        __perf_event_task_sched_out+0x53b/0x18d0
[  202.487400]        __schedule+0xedd/0x2470
[  202.487417]        schedule+0xda/0x1b0
[  202.487434]        futex_wait_queue+0xf5/0x1e0
[  202.487452]        futex_wait+0x28e/0x690
[  202.487469]        do_futex+0x2ff/0x380
[  202.487485]        __x64_sys_futex+0x1c6/0x4d0
[  202.487502]        do_syscall_64+0x3b/0x90
[  202.487525]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  202.487555] 
[  202.487555] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  202.487579]        _raw_spin_lock_nested+0x30/0x40
[  202.487605]        raw_spin_rq_lock_nested+0x1e/0x30
[  202.487626]        task_fork_fair+0x63/0x4d0
[  202.487656]        sched_cgroup_fork+0x3d0/0x540
[  202.487680]        copy_process+0x3f9e/0x6df0
[  202.487697]        kernel_clone+0xe7/0x890
[  202.487714]        user_mode_thread+0xad/0xf0
[  202.487731]        rest_init+0x24/0x250
[  202.487760]        arch_call_rest_init+0xf/0x14
[  202.487793]        start_kernel+0x4c1/0x4e6
[  202.487823]        secondary_startup_64_no_verify+0xe0/0xeb
[  202.487847] 
[  202.487847] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  202.487870]        _raw_spin_lock_irqsave+0x39/0x60
[  202.487897]        try_to_wake_up+0xab/0x1920
[  202.487920]        up+0x75/0xb0
[  202.487940]        __up_console_sem+0x6e/0x80
[  202.487968]        console_unlock+0x46a/0x590
[  202.487996]        do_con_write+0xc05/0x1d50
[  202.488014]        con_write+0x21/0x40
[  202.488030]        n_tty_write+0x4d4/0xfe0
[  202.488052]        file_tty_write.constprop.0+0x49c/0x8f0
[  202.488072]        vfs_write+0x9c3/0xd90
[  202.488103]        ksys_write+0x127/0x250
[  202.488133]        do_syscall_64+0x3b/0x90
[  202.488156]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  202.488186] 
[  202.488186] -> #0 ((console_sem).lock){....}-{2:2}:
[  202.488210]        __lock_acquire+0x2a02/0x5e70
[  202.488239]        lock_acquire+0x1a2/0x530
[  202.488267]        _raw_spin_lock_irqsave+0x39/0x60
[  202.488293]        down_trylock+0xe/0x70
[  202.488315]        __down_trylock_console_sem+0x3b/0xd0
[  202.488344]        vprintk_emit+0x16b/0x560
[  202.488373]        vprintk+0x84/0xa0
[  202.488402]        _printk+0xba/0xf1
[  202.488432]        report_bug.cold+0x72/0xab
[  202.488454]        handle_bug+0x3c/0x70
[  202.488476]        exc_invalid_op+0x14/0x50
[  202.488499]        asm_exc_invalid_op+0x16/0x20
[  202.488528]        group_sched_out.part.0+0x2c7/0x460
[  202.488546]        ctx_sched_out+0x8f1/0xc10
[  202.488563]        __perf_event_task_sched_out+0x6d0/0x18d0
[  202.488584]        __schedule+0xedd/0x2470
[  202.488601]        schedule+0xda/0x1b0
[  202.488617]        exit_to_user_mode_prepare+0x114/0x1a0
[  202.488652]        syscall_exit_to_user_mode+0x19/0x40
[  202.488683]        do_syscall_64+0x48/0x90
[  202.488705]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  202.488735] 
[  202.488735] other info that might help us debug this:
[  202.488735] 
[  202.488740] Chain exists of:
[  202.488740]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  202.488740] 
[  202.488767]  Possible unsafe locking scenario:
[  202.488767] 
[  202.488771]        CPU0                    CPU1
[  202.488775]        ----                    ----
[  202.488779]   lock(&ctx->lock);
[  202.488788]                                lock(&rq->__lock);
[  202.488799]                                lock(&ctx->lock);
[  202.488810]   lock((console_sem).lock);
[  202.488820] 
[  202.488820]  *** DEADLOCK ***
[  202.488820] 
[  202.488823] 2 locks held by syz-executor.2/6941:
[  202.488835]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  202.488879]  #1: ffff88800fad0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  202.488927] 
[  202.488927] stack backtrace:
[  202.488931] CPU: 1 PID: 6941 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1
[  202.488953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  202.488966] Call Trace:
[  202.488971]  <TASK>
[  202.488978]  dump_stack_lvl+0x8b/0xb3
[  202.489003]  check_noncircular+0x263/0x2e0
[  202.489032]  ? format_decode+0x26c/0xb50
[  202.489057]  ? print_circular_bug+0x450/0x450
[  202.489087]  ? enable_ptr_key_workfn+0x20/0x20
[  202.489113]  ? format_decode+0x26c/0xb50
[  202.489139]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  202.489170]  __lock_acquire+0x2a02/0x5e70
[  202.489208]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  202.489248]  lock_acquire+0x1a2/0x530
[  202.489278]  ? down_trylock+0xe/0x70
[  202.489303]  ? rcu_read_unlock+0x40/0x40
[  202.489336]  ? __lock_acquire+0x164d/0x5e70
[  202.489369]  ? vprintk+0x84/0xa0
[  202.489400]  _raw_spin_lock_irqsave+0x39/0x60
[  202.489428]  ? down_trylock+0xe/0x70
[  202.489451]  down_trylock+0xe/0x70
[  202.489474]  ? vprintk+0x84/0xa0
[  202.489504]  __down_trylock_console_sem+0x3b/0xd0
[  202.489535]  vprintk_emit+0x16b/0x560
[  202.489569]  vprintk+0x84/0xa0
[  202.489600]  _printk+0xba/0xf1
[  202.489631]  ? record_print_text.cold+0x16/0x16
[  202.489669]  ? report_bug.cold+0x66/0xab
[  202.489693]  ? group_sched_out.part.0+0x2c7/0x460
[  202.489713]  report_bug.cold+0x72/0xab
[  202.489739]  handle_bug+0x3c/0x70
[  202.489763]  exc_invalid_op+0x14/0x50
[  202.489788]  asm_exc_invalid_op+0x16/0x20
[  202.489818] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  202.489841] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  202.489860] RSP: 0018:ffff8880359f7c48 EFLAGS: 00010006
[  202.489876] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  202.489889] RDX: ffff888015ebd040 RSI: ffffffff81566027 RDI: 0000000000000005
[  202.489902] RBP: ffff888041b9b408 R08: 0000000000000005 R09: 0000000000000001
[  202.489915] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800fad0800
[  202.489928] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  202.489947]  ? group_sched_out.part.0+0x2c7/0x460
[  202.489970]  ? group_sched_out.part.0+0x2c7/0x460
[  202.489992]  ctx_sched_out+0x8f1/0xc10
[  202.490013]  __perf_event_task_sched_out+0x6d0/0x18d0
[  202.490040]  ? lock_is_held_type+0xd7/0x130
[  202.490072]  ? __perf_cgroup_move+0x160/0x160
[  202.490101]  ? set_next_entity+0x304/0x550
[  202.490132]  ? update_curr+0x267/0x740
[  202.490165]  ? lock_is_held_type+0xd7/0x130
[  202.490198]  __schedule+0xedd/0x2470
[  202.490220]  ? io_schedule_timeout+0x150/0x150
[  202.490242]  ? rcu_read_lock_sched_held+0x3e/0x80
[  202.490277]  schedule+0xda/0x1b0
[  202.490296]  exit_to_user_mode_prepare+0x114/0x1a0
[  202.490332]  syscall_exit_to_user_mode+0x19/0x40
[  202.490364]  do_syscall_64+0x48/0x90
[  202.490389]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  202.490419] RIP: 0033:0x7f64f9a7cb19
[  202.490434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.490453] RSP: 002b:00007f64f6ff2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  202.490472] RAX: 0000000000000001 RBX: 00007f64f9b8ff68 RCX: 00007f64f9a7cb19
[  202.490485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64f9b8ff6c
[  202.490498] RBP: 00007f64f9b8ff60 R08: 000000000000000e R09: 0000000000000000
[  202.490510] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f64f9b8ff6c
[  202.490523] R13: 00007ffc92e7e83f R14: 00007f64f6ff2300 R15: 0000000000022000
[  202.490545]  </TASK>
[  202.585582] WARNING: CPU: 1 PID: 6941 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  202.586739] Modules linked in:
[  202.587146] CPU: 1 PID: 6941 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1
[  202.588164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  202.589491] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  202.590149] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  202.592267] RSP: 0018:ffff8880359f7c48 EFLAGS: 00010006
[  202.592902] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  202.593761] RDX: ffff888015ebd040 RSI: ffffffff81566027 RDI: 0000000000000005
[  202.594627] RBP: ffff888041b9b408 R08: 0000000000000005 R09: 0000000000000001
[  202.595468] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800fad0800
[  202.596323] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  202.597151] FS:  00007f64f6ff2700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  202.598090] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.598788] CR2: 0000561ccd524080 CR3: 00000000408bc000 CR4: 0000000000350ee0
[  202.599630] Call Trace:
[  202.599939]  <TASK>
[  202.600215]  ctx_sched_out+0x8f1/0xc10
[  202.600682]  __perf_event_task_sched_out+0x6d0/0x18d0
[  202.601302]  ? lock_is_held_type+0xd7/0x130
[  202.601825]  ? __perf_cgroup_move+0x160/0x160
[  202.602381]  ? set_next_entity+0x304/0x550
[  202.602895]  ? update_curr+0x267/0x740
[  202.603372]  ? lock_is_held_type+0xd7/0x130
[  202.603888]  __schedule+0xedd/0x2470
[  202.604335]  ? io_schedule_timeout+0x150/0x150
[  202.604873]  ? rcu_read_lock_sched_held+0x3e/0x80
[  202.605453]  schedule+0xda/0x1b0
[  202.605861]  exit_to_user_mode_prepare+0x114/0x1a0
[  202.606470]  syscall_exit_to_user_mode+0x19/0x40
[  202.607044]  do_syscall_64+0x48/0x90
[  202.607492]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  202.608106] RIP: 0033:0x7f64f9a7cb19
[  202.608545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.610634] RSP: 002b:00007f64f6ff2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  202.611507] RAX: 0000000000000001 RBX: 00007f64f9b8ff68 RCX: 00007f64f9a7cb19
[  202.612337] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64f9b8ff6c
[  202.613158] RBP: 00007f64f9b8ff60 R08: 000000000000000e R09: 0000000000000000
[  202.613973] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f64f9b8ff6c
[  202.614812] R13: 00007ffc92e7e83f R14: 00007f64f6ff2300 R15: 0000000000022000
[  202.615652]  </TASK>
[  202.615938] irq event stamp: 378
[  202.616338] hardirqs last  enabled at (377): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  202.617432] hardirqs last disabled at (378): [<ffffffff8424b1d5>] __schedule+0x1225/0x2470
[  202.618393] softirqs last  enabled at (178): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  202.619372] softirqs last disabled at (141): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  202.620345] ---[ end trace 0000000000000000 ]---
16:49:15 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

[  203.362448] loop6: detected capacity change from 0 to 16383
[  203.374556] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  203.653642] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  203.854377] audit: type=1400 audit(1663087756.174:9): avc:  denied  { block_suspend } for  pid=7044 comm="syz-executor.4" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  204.707976] loop3: detected capacity change from 0 to 40
[  204.717422] cgroup: Unknown subsys name 'cl�MG���dren'
[  204.734268] hrtimer: interrupt took 23865 ns
[  204.896474] loop3: detected capacity change from 0 to 40
[  204.897468] cgroup: Unknown subsys name 'cl�MG���dren'
16:49:17 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

16:49:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

16:49:17 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

[  204.971038] loop0: detected capacity change from 0 to 40
[  204.981933] cgroup: Unknown subsys name 'cl�MG���dren'
[  204.993831] loop6: detected capacity change from 0 to 16383
[  205.007862] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

16:49:17 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

[  205.023177] loop3: detected capacity change from 0 to 40
[  205.047392] loop7: detected capacity change from 0 to 40
[  205.048569] cgroup: Unknown subsys name 'cl�MG���dren'
[  205.087811] cgroup: Unknown subsys name 'cl�MG���dren'
16:49:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

16:49:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

16:49:17 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x2, {{0x0, 0x40, 0x1, 0x1, {0x1, 0x0, 0x6}, 0x4040000, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)

16:49:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

16:49:17 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

[  205.351113] loop7: detected capacity change from 0 to 40
[  205.356725] cgroup: Unknown subsys name 'cl�MG���dren'
[  205.470261] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.530051] loop1: detected capacity change from 0 to 16383
16:49:17 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

16:49:17 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:17 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:17 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

[  205.532208] loop0: detected capacity change from 0 to 40
[  205.536194] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.547886] loop6: detected capacity change from 0 to 16383
[  205.552381] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.567162] loop7: detected capacity change from 0 to 40
16:49:17 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

16:49:17 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:17 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

[  205.570236] loop4: detected capacity change from 0 to 16383
[  205.575866] cgroup: Unknown subsys name 'cl�MG���dren'
[  205.577549] cgroup: Unknown subsys name 'cl�MG���dren'
[  205.586940] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.609212] loop3: detected capacity change from 0 to 40
[  205.619792] loop5: detected capacity change from 0 to 16383
[  205.631129] cgroup: Unknown subsys name 'cl�MG���dren'
16:49:17 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

[  205.644894] loop2: detected capacity change from 0 to 16383
[  205.649331] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.669988] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:18 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a000102"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0, 0x0)

[  205.776499] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:18 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0)

16:49:18 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

[  205.829683] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.853851] loop1: detected capacity change from 0 to 16383
[  205.873783] loop6: detected capacity change from 0 to 16383
[  205.878568] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  205.892487] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.015072] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.037256] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.044212] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.049591] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.092404] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:18 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

16:49:18 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000300)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]})

16:49:18 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(0x0)
mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f089e7e13124d795137"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4441, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

[  206.111361] loop3: detected capacity change from 0 to 40
[  206.123059] loop2: detected capacity change from 0 to 16383
[  206.126756] loop4: detected capacity change from 0 to 16383
[  206.128547] loop5: detected capacity change from 0 to 16383
[  206.128931] cgroup: Unknown subsys name 'cl�MG���dren'
[  206.132595] loop0: detected capacity change from 0 to 40
[  206.133709] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.136084] cgroup: Unknown subsys name 'cl�MG���dren'
[  206.136571] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.138797] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:18 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[  206.160499] loop6: detected capacity change from 0 to 40
[  206.178801] loop1: detected capacity change from 0 to 16383
[  206.188668] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.215855] syz-executor.6: attempt to access beyond end of device
[  206.215855] loop6: rw=0, sector=28, nr_sectors = 64 limit=40
16:49:18 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

16:49:18 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x80108906, &(0x7f0000000000))

[  206.356434] syz-executor.6: attempt to access beyond end of device
[  206.356434] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40
16:49:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

[  206.411740] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.414487] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.428572] audit: type=1400 audit(1663087758.748:10): avc:  denied  { read } for  pid=7232 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  206.510818] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.519849] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
16:49:18 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x80108906, &(0x7f0000000000))

16:49:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:18 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

16:49:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000001280)="52b544fc3d252aea6a5e739d433ac7cf9e68959cde94f51d7f14df209096a5ffaa1f41aee0ee6709b8ea6e391e365e87500cb38e974d2bcf94b785042887c7e4413a2a83ce1871e3ebc90f32c41cb8d21b1ecd4dc3570b5eff611ad4d3b1ba1a14758126f6f7df46e202", 0x6a, 0xfffffffffffffff9}], 0x800010, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc"]}, 0x1c}], 0x1}, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x9})
sendfile(r2, r1, 0x0, 0xfffffdf3)
r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/35, 0x23)
write(r4, &(0x7f0000000080)="01", 0xffff8000)

16:49:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:18 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[  206.649989] loop5: detected capacity change from 0 to 16383
[  206.663471] loop4: detected capacity change from 0 to 16383
[  206.665254] loop2: detected capacity change from 0 to 16383
[  206.676701] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.680317] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.698428] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  206.745950] loop6: detected capacity change from 0 to 40
16:49:19 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x80108906, &(0x7f0000000000))

[  206.821702] syz-executor.6: attempt to access beyond end of device
[  206.821702] loop6: rw=0, sector=28, nr_sectors = 64 limit=40
16:49:19 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x80108906, &(0x7f0000000000))

[  206.972037] Process accounting resumed
16:49:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

[  207.190800] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  207.203211] syz-executor.6: attempt to access beyond end of device
[  207.203211] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40
[  207.235581] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  207.248092] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  207.442010] Process accounting resumed
16:49:19 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

16:49:19 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

16:49:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

16:49:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

[  207.494775] loop6: detected capacity change from 0 to 40
16:49:19 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[  207.522819] loop2: detected capacity change from 0 to 40
[  207.535456] loop4: detected capacity change from 0 to 40
[  207.591106] Process accounting resumed
[  207.602692] syz-executor.6: attempt to access beyond end of device
[  207.602692] loop6: rw=0, sector=28, nr_sectors = 64 limit=40
[  207.697914] syz-executor.2: attempt to access beyond end of device
[  207.697914] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
[  207.701659] syz-executor.4: attempt to access beyond end of device
[  207.701659] loop4: rw=0, sector=28, nr_sectors = 64 limit=40
16:49:20 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:20 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[  208.025815] syz-executor.4: attempt to access beyond end of device
[  208.025815] loop4: rw=2049, sector=92, nr_sectors = 4 limit=40
[  208.052871] Process accounting resumed
16:49:20 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)

16:49:20 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

[  208.088466] syz-executor.6: attempt to access beyond end of device
[  208.088466] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40
16:49:20 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

16:49:20 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[  208.163295] loop2: detected capacity change from 0 to 40
16:49:20 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e24, 0x7, @mcast2, 0x36c9}, {0xa, 0x4e23, 0x4952, @local, 0x80000000}, 0x4, [0x0, 0x0, 0x7, 0x822a, 0x7, 0x9, 0x200, 0x4318]}, 0x5c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
close_range(r1, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})

16:49:20 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

16:49:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

[  208.199220] loop4: detected capacity change from 0 to 40
[  208.224527] syz-executor.2: attempt to access beyond end of device
[  208.224527] loop2: rw=0, sector=28, nr_sectors = 64 limit=40
[  208.260600] loop6: detected capacity change from 0 to 40
16:49:20 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[  208.334362] Process accounting resumed
16:49:20 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="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", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

16:49:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffc4})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000000000000000c93d7502e21b8d0266d50aef230579e59d74d18c2a9d050d876edcd9190a", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x80, 0x81, 0x5, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0x5, 0x9, 0x3, 0xffffffff, 0x7aec, 0x0, 0x1, 0x0, 0x8001}, r1, 0xc, r2, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0)
readv(r4, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/177, 0xb1}], 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5)
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000011c0)=0x6e)

16:49:20 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000380)="ee36a03acde99996c7a20edbc52156f41d9b165b50e96ab5afbe0612018a2f773ca7bf7f5474ea570393459eea77ba89a9bb8914c3f09623219e35a9c8ea1a06c85bda53c22f67f09387da8c9689d7f7c27f230cb1722af7254bb832cdd986eccc250174a64f1849615c311225c95a70547cf706ebb9a04e1b7f624db5a33c3107dc4c655f306b091a555646708d546c63619a23b6934e8e7a51f9da9012fdfe65cac4d273b4e01c4daa64a4835a6e76495145f56e2c76886b3b7e55e40624e123bb410dca16aa19bd1919a7e0b6c020d14de6e2b81ce59ac49b5d7a2e90af43ca1d4c16c66fa17732935399e26443f0da226df12cfc750a8814f5717967", 0x7f, 0x0, 0x0, {0x1}}, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x6844c0, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x8000)
mount(&(0x7f0000000240)=@md0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='reiserfs\x00', 0x401, 0x0)
sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
chdir(&(0x7f00000001c0)='./file2\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0)
syncfs(r4)

[  208.433527] loop2: detected capacity change from 0 to 40
16:49:20 executing program 7:
prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0)
mq_open(&(0x7f0000000800)='/dev/vcsa#\x00', 0x0, 0x0, 0x0)

16:49:20 executing program 6:
msgsnd(0x0, &(0x7f0000000140)={0x0, "b843eafc417bbf5a4ab40bb5552790f08c26045cde26fa0000104fbca9000000000000ca6a214405d3aee60e661e97ed684f42f9fc6ac4d9f5bfee34dfc33621afb954b48efc8662f2d02258778d0c3658629b423dffa3ed40335892cdacaea993c00d2616b0c35df11a5b69026e7aab61cb4085872644b5971d9d7e3d3e2d8b04997beafd1cd376833b0169265c73bdb40993"}, 0xfffffffffffffeab, 0x0)

[  208.438580] loop4: detected capacity change from 0 to 40
16:49:20 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname(r0, 0x0, &(0x7f00000005c0))

16:49:20 executing program 6:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getpeername(r0, 0x0, 0x0)

16:49:20 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlockall()

16:49:20 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname(r0, 0x0, &(0x7f00000005c0))

16:49:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

16:49:21 executing program 6:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="dda978731a96", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @broadcast}, @source_quench={0x8, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)

[  208.752176] loop3: detected capacity change from 0 to 1024
[  208.762371] loop6: detected capacity change from 0 to 256
16:49:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001
VM DIAGNOSIS:
16:49:15  Registers:
info registers vcpu 0
RAX=ffffffff81787da5 RBX=ffffffff8135b390 RCX=0000000000000000 RDX=1ffff110068abe80
RSI=ffffffff81787da5 RDI=ffff88803455f470 RBP=ffff88803455f440 RSP=ffff88803455f3a0
R8 =ffffffff85ed9982 R9 =ffffffff85ed9986 R10=ffffed10068abe82 R11=ffff88803455f3e8
R12=ffff88803455f470 R13=0000000000000000 R14=ffff88801f315040 R15=ffff88801f03d400
RIP=ffffffff8135b390 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f976e425028 CR3=000000001f3b0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880359f7698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002f R11=0000000000000001
R12=000000000000002f R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0
RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f64f6ff2700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561ccd524080 CR3=00000000408bc000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f64f9b637c0 00007f64f9b637c8
YMM02=0000000000000000 0000000000000000 00007f64f9b637e0 00007f64f9b637c0
YMM03=0000000000000000 0000000000000000 00007f64f9b637c8 00007f64f9b637c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000