
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:13687' (ECDSA) to the list of known hosts.
2022/09/12 13:24:24 fuzzer started
2022/09/12 13:24:24 dialing manager at localhost:38027
syzkaller login: [   37.136938] cgroup: Unknown subsys name 'net'
[   37.228037] cgroup: Unknown subsys name 'rlimit'
2022/09/12 13:24:40 syscalls: 2215
2022/09/12 13:24:40 code coverage: enabled
2022/09/12 13:24:40 comparison tracing: enabled
2022/09/12 13:24:40 extra coverage: enabled
2022/09/12 13:24:40 setuid sandbox: enabled
2022/09/12 13:24:40 namespace sandbox: enabled
2022/09/12 13:24:40 Android sandbox: enabled
2022/09/12 13:24:40 fault injection: enabled
2022/09/12 13:24:40 leak checking: enabled
2022/09/12 13:24:40 net packet injection: enabled
2022/09/12 13:24:40 net device setup: enabled
2022/09/12 13:24:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 13:24:40 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 13:24:40 USB emulation: enabled
2022/09/12 13:24:40 hci packet injection: enabled
2022/09/12 13:24:40 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 13:24:40 802.15.4 emulation: enabled
2022/09/12 13:24:40 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 13:24:40 fetching corpus: 50, signal 40306/43009 (executing program)
2022/09/12 13:24:40 fetching corpus: 100, signal 50571/54105 (executing program)
2022/09/12 13:24:40 fetching corpus: 150, signal 56834/61192 (executing program)
2022/09/12 13:24:40 fetching corpus: 200, signal 61859/66929 (executing program)
2022/09/12 13:24:41 fetching corpus: 250, signal 71984/77063 (executing program)
2022/09/12 13:24:41 fetching corpus: 300, signal 76023/81484 (executing program)
2022/09/12 13:24:41 fetching corpus: 350, signal 78876/84769 (executing program)
2022/09/12 13:24:41 fetching corpus: 400, signal 82554/88639 (executing program)
2022/09/12 13:24:41 fetching corpus: 450, signal 89878/95504 (executing program)
2022/09/12 13:24:41 fetching corpus: 500, signal 93872/99289 (executing program)
2022/09/12 13:24:42 fetching corpus: 550, signal 98188/103336 (executing program)
2022/09/12 13:24:42 fetching corpus: 600, signal 101213/106160 (executing program)
2022/09/12 13:24:42 fetching corpus: 650, signal 104319/108926 (executing program)
2022/09/12 13:24:42 fetching corpus: 700, signal 107624/111760 (executing program)
2022/09/12 13:24:42 fetching corpus: 750, signal 110631/114170 (executing program)
2022/09/12 13:24:43 fetching corpus: 800, signal 112700/115891 (executing program)
2022/09/12 13:24:43 fetching corpus: 850, signal 116204/118547 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120077 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120167 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120265 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120363 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120465 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120566 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120653 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120742 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120836 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/120941 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121042 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121162 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121259 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121348 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121463 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121561 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121667 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121779 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121887 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/121982 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122072 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122163 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122253 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122358 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122449 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122539 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122640 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122733 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122834 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/122917 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123007 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123091 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123177 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123299 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123408 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123502 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123606 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123699 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123798 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123911 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/123988 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/124082 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/124173 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/124176 (executing program)
2022/09/12 13:24:43 fetching corpus: 890, signal 118233/124176 (executing program)
2022/09/12 13:24:46 starting 8 fuzzer processes
13:24:46 executing program 0:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b", 0x1c}], 0x1)

13:24:46 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)

13:24:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000140053c50000000000000000ac1414aa000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB='\f\x00\b'], 0x64}}, 0x0)

[   58.783012] audit: type=1400 audit(1662989086.437:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:24:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:24:46 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x7, 0x4)

13:24:46 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:24:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

13:24:46 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x42, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

[   60.078366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.080790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.083411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.084845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.087685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.090516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.092431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.093828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.100285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.101550] Bluetooth: hci1: HCI_REQ-0x0c1a
[   60.111676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.126635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.150265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.151562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.152609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.156513] Bluetooth: hci0: HCI_REQ-0x0c1a
[   60.160397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   60.161457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   60.164623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   60.165602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   60.167204] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   60.168124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   60.171511] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   60.171826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   60.174285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   60.180274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.181633] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   60.182021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.182601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   60.185247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   60.185678] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.188023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.189435] Bluetooth: hci6: HCI_REQ-0x0c1a
[   60.191991] Bluetooth: hci7: HCI_REQ-0x0c1a
[   60.209439] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.210489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.231539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.233856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.237077] Bluetooth: hci2: HCI_REQ-0x0c1a
[   60.273558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.273902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   60.277754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   60.279630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.284724] Bluetooth: hci4: HCI_REQ-0x0c1a
[   60.300210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   60.304636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   60.310140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   60.311813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   60.316867] Bluetooth: hci5: HCI_REQ-0x0c1a
[   62.162406] Bluetooth: hci0: command 0x0409 tx timeout
[   62.162483] Bluetooth: hci3: Opcode 0x c03 failed: -110
[   62.164327] Bluetooth: hci1: command 0x0409 tx timeout
[   62.226059] Bluetooth: hci7: command 0x0409 tx timeout
[   62.226495] Bluetooth: hci6: command 0x0409 tx timeout
[   62.290979] Bluetooth: hci4: command 0x0409 tx timeout
[   62.292876] Bluetooth: hci2: command 0x0409 tx timeout
[   62.353953] Bluetooth: hci5: command 0x0409 tx timeout
[   64.209972] Bluetooth: hci1: command 0x041b tx timeout
[   64.210047] Bluetooth: hci0: command 0x041b tx timeout
[   64.274964] Bluetooth: hci6: command 0x041b tx timeout
[   64.275572] Bluetooth: hci7: command 0x041b tx timeout
[   64.338010] Bluetooth: hci2: command 0x041b tx timeout
[   64.338546] Bluetooth: hci4: command 0x041b tx timeout
[   64.401963] Bluetooth: hci5: command 0x041b tx timeout
[   64.855213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   64.857859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   64.859787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   64.864456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   64.868140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   64.870637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   64.904311] Bluetooth: hci3: HCI_REQ-0x0c1a
[   66.258000] Bluetooth: hci0: command 0x040f tx timeout
[   66.258487] Bluetooth: hci1: command 0x040f tx timeout
[   66.322982] Bluetooth: hci7: command 0x040f tx timeout
[   66.323471] Bluetooth: hci6: command 0x040f tx timeout
[   66.385960] Bluetooth: hci4: command 0x040f tx timeout
[   66.386436] Bluetooth: hci2: command 0x040f tx timeout
[   66.450992] Bluetooth: hci5: command 0x040f tx timeout
[   66.962296] Bluetooth: hci3: command 0x0409 tx timeout
[   68.305975] Bluetooth: hci1: command 0x0419 tx timeout
[   68.306474] Bluetooth: hci0: command 0x0419 tx timeout
[   68.369978] Bluetooth: hci6: command 0x0419 tx timeout
[   68.370424] Bluetooth: hci7: command 0x0419 tx timeout
[   68.433977] Bluetooth: hci2: command 0x0419 tx timeout
[   68.434434] Bluetooth: hci4: command 0x0419 tx timeout
[   68.497949] Bluetooth: hci5: command 0x0419 tx timeout
[   69.009948] Bluetooth: hci3: command 0x041b tx timeout
[   71.057994] Bluetooth: hci3: command 0x040f tx timeout
[   73.105983] Bluetooth: hci3: command 0x0419 tx timeout
13:25:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)

13:25:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)

[  113.086244] audit: type=1400 audit(1662989140.741:7): avc:  denied  { open } for  pid=3763 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.087851] audit: type=1400 audit(1662989140.741:8): avc:  denied  { kernel } for  pid=3763 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.099107] ------------[ cut here ]------------
[  113.099128] 
[  113.099132] ======================================================
[  113.099135] WARNING: possible circular locking dependency detected
[  113.099140] 6.0.0-rc5-next-20220912 #1 Not tainted
[  113.099146] ------------------------------------------------------
[  113.099149] syz-executor.5/3765 is trying to acquire lock:
[  113.099156] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  113.099191] 
[  113.099191] but task is already holding lock:
[  113.099194] ffff88800e4c8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  113.099221] 
[  113.099221] which lock already depends on the new lock.
[  113.099221] 
[  113.099223] 
[  113.099223] the existing dependency chain (in reverse order) is:
[  113.099226] 
[  113.099226] -> #3 (&ctx->lock){....}-{2:2}:
[  113.099240]        _raw_spin_lock+0x2a/0x40
[  113.099257]        __perf_event_task_sched_out+0x53b/0x18d0
[  113.099269]        __schedule+0xedd/0x2470
[  113.099278]        schedule+0xda/0x1b0
[  113.099287]        exit_to_user_mode_prepare+0x114/0x1a0
[  113.099308]        syscall_exit_to_user_mode+0x19/0x40
[  113.099326]        do_syscall_64+0x48/0x90
[  113.099338]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  113.099356] 
[  113.099356] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  113.099369]        _raw_spin_lock_nested+0x30/0x40
[  113.099384]        raw_spin_rq_lock_nested+0x1e/0x30
[  113.099397]        task_fork_fair+0x63/0x4d0
[  113.099413]        sched_cgroup_fork+0x3d0/0x540
[  113.099428]        copy_process+0x3f9e/0x6df0
[  113.099438]        kernel_clone+0xe7/0x890
[  113.099447]        user_mode_thread+0xad/0xf0
[  113.099457]        rest_init+0x24/0x250
[  113.099473]        arch_call_rest_init+0xf/0x14
[  113.099493]        start_kernel+0x4c1/0x4e6
[  113.099510]        secondary_startup_64_no_verify+0xe0/0xeb
[  113.099524] 
[  113.099524] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  113.099538]        _raw_spin_lock_irqsave+0x39/0x60
[  113.099552]        try_to_wake_up+0xab/0x1920
[  113.099566]        up+0x75/0xb0
[  113.099577]        __up_console_sem+0x6e/0x80
[  113.099594]        console_unlock+0x46a/0x590
[  113.099610]        vt_ioctl+0x2822/0x2ca0
[  113.099622]        tty_ioctl+0x7c4/0x1700
[  113.099633]        __x64_sys_ioctl+0x19a/0x210
[  113.099649]        do_syscall_64+0x3b/0x90
[  113.099661]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  113.099678] 
[  113.099678] -> #0 ((console_sem).lock){....}-{2:2}:
[  113.099692]        __lock_acquire+0x2a02/0x5e70
[  113.099709]        lock_acquire+0x1a2/0x530
[  113.099728]        _raw_spin_lock_irqsave+0x39/0x60
[  113.099742]        down_trylock+0xe/0x70
[  113.099755]        __down_trylock_console_sem+0x3b/0xd0
[  113.099771]        vprintk_emit+0x16b/0x560
[  113.099788]        vprintk+0x84/0xa0
[  113.099804]        _printk+0xba/0xf1
[  113.099822]        report_bug.cold+0x72/0xab
[  113.099834]        handle_bug+0x3c/0x70
[  113.099846]        exc_invalid_op+0x14/0x50
[  113.099859]        asm_exc_invalid_op+0x16/0x20
[  113.099875]        group_sched_out.part.0+0x2c7/0x460
[  113.099886]        ctx_sched_out+0x8f1/0xc10
[  113.099895]        __perf_event_task_sched_out+0x6d0/0x18d0
[  113.099908]        __schedule+0xedd/0x2470
[  113.099917]        schedule+0xda/0x1b0
[  113.099926]        exit_to_user_mode_prepare+0x114/0x1a0
[  113.099945]        syscall_exit_to_user_mode+0x19/0x40
[  113.099962]        do_syscall_64+0x48/0x90
[  113.099990]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  113.100007] 
[  113.100007] other info that might help us debug this:
[  113.100007] 
[  113.100009] Chain exists of:
[  113.100009]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  113.100009] 
[  113.100024]  Possible unsafe locking scenario:
[  113.100024] 
[  113.100026]        CPU0                    CPU1
[  113.100029]        ----                    ----
[  113.100031]   lock(&ctx->lock);
[  113.100036]                                lock(&rq->__lock);
[  113.100042]                                lock(&ctx->lock);
[  113.100049]   lock((console_sem).lock);
[  113.100054] 
[  113.100054]  *** DEADLOCK ***
[  113.100054] 
[  113.100056] 2 locks held by syz-executor.5/3765:
[  113.100063]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  113.100088]  #1: ffff88800e4c8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  113.100116] 
[  113.100116] stack backtrace:
[  113.100118] CPU: 0 PID: 3765 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1
[  113.100131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  113.100139] Call Trace:
[  113.100142]  <TASK>
[  113.100146]  dump_stack_lvl+0x8b/0xb3
[  113.100160]  check_noncircular+0x263/0x2e0
[  113.100177]  ? format_decode+0x26c/0xb50
[  113.100192]  ? print_circular_bug+0x450/0x450
[  113.100210]  ? enable_ptr_key_workfn+0x20/0x20
[  113.100225]  ? format_decode+0x26c/0xb50
[  113.100241]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  113.100260]  __lock_acquire+0x2a02/0x5e70
[  113.100284]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  113.100302]  ? __mutex_add_waiter+0x120/0x120
[  113.100322]  lock_acquire+0x1a2/0x530
[  113.100339]  ? down_trylock+0xe/0x70
[  113.100354]  ? rcu_read_unlock+0x40/0x40
[  113.100377]  ? vprintk+0x84/0xa0
[  113.100396]  _raw_spin_lock_irqsave+0x39/0x60
[  113.100411]  ? down_trylock+0xe/0x70
[  113.100425]  down_trylock+0xe/0x70
[  113.100439]  ? vprintk+0x84/0xa0
[  113.100456]  __down_trylock_console_sem+0x3b/0xd0
[  113.100474]  vprintk_emit+0x16b/0x560
[  113.100494]  vprintk+0x84/0xa0
[  113.100512]  _printk+0xba/0xf1
[  113.100530]  ? record_print_text.cold+0x16/0x16
[  113.100554]  ? report_bug.cold+0x66/0xab
[  113.100568]  ? group_sched_out.part.0+0x2c7/0x460
[  113.100580]  report_bug.cold+0x72/0xab
[  113.100595]  handle_bug+0x3c/0x70
[  113.100609]  exc_invalid_op+0x14/0x50
[  113.100623]  asm_exc_invalid_op+0x16/0x20
[  113.100640] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  113.100653] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  113.100665] RSP: 0018:ffff88801d8a7c48 EFLAGS: 00010006
[  113.100674] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  113.100682] RDX: ffff88803c1ab580 RSI: ffffffff81566027 RDI: 0000000000000005
[  113.100690] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  113.100697] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e4c8000
[  113.100705] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  113.100717]  ? group_sched_out.part.0+0x2c7/0x460
[  113.100730]  ? group_sched_out.part.0+0x2c7/0x460
[  113.100744]  ctx_sched_out+0x8f1/0xc10
[  113.100757]  __perf_event_task_sched_out+0x6d0/0x18d0
[  113.100774]  ? lock_is_held_type+0xd7/0x130
[  113.100792]  ? __perf_cgroup_move+0x160/0x160
[  113.100804]  ? set_next_entity+0x304/0x550
[  113.100822]  ? update_curr+0x267/0x740
[  113.100842]  ? lock_is_held_type+0xd7/0x130
[  113.100861]  __schedule+0xedd/0x2470
[  113.100875]  ? io_schedule_timeout+0x150/0x150
[  113.100888]  ? __x64_sys_futex_time32+0x480/0x480
[  113.100902]  schedule+0xda/0x1b0
[  113.100914]  exit_to_user_mode_prepare+0x114/0x1a0
[  113.100939]  syscall_exit_to_user_mode+0x19/0x40
[  113.100957]  do_syscall_64+0x48/0x90
[  113.100971]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  113.100989] RIP: 0033:0x7fd95d765b19
[  113.100997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  113.101008] RSP: 002b:00007fd95acdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  113.101019] RAX: 0000000000000001 RBX: 00007fd95d878f68 RCX: 00007fd95d765b19
[  113.101026] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd95d878f6c
[  113.101034] RBP: 00007fd95d878f60 R08: 000000000000000e R09: 0000000000000000
[  113.101041] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd95d878f6c
[  113.101048] R13: 00007ffd1eba267f R14: 00007fd95acdb300 R15: 0000000000022000
[  113.101063]  </TASK>
[  113.158898] WARNING: CPU: 0 PID: 3765 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  113.159557] Modules linked in:
[  113.159795] CPU: 0 PID: 3765 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1
[  113.160379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  113.161203] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  113.161606] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  113.162941] RSP: 0018:ffff88801d8a7c48 EFLAGS: 00010006
[  113.163337] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  113.163867] RDX: ffff88803c1ab580 RSI: ffffffff81566027 RDI: 0000000000000005
[  113.164402] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  113.164937] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e4c8000
[  113.165459] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  113.165990] FS:  00007fd95acdb700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  113.166590] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.167025] CR2: 00007f01850e9260 CR3: 000000003cfce000 CR4: 0000000000350ef0
[  113.167557] Call Trace:
[  113.167750]  <TASK>
[  113.167924]  ctx_sched_out+0x8f1/0xc10
[  113.168225]  __perf_event_task_sched_out+0x6d0/0x18d0
[  113.168617]  ? lock_is_held_type+0xd7/0x130
[  113.168947]  ? __perf_cgroup_move+0x160/0x160
[  113.169283]  ? set_next_entity+0x304/0x550
[  113.169605]  ? update_curr+0x267/0x740
[  113.169908]  ? lock_is_held_type+0xd7/0x130
[  113.170237]  __schedule+0xedd/0x2470
[  113.170521]  ? io_schedule_timeout+0x150/0x150
[  113.170872]  ? __x64_sys_futex_time32+0x480/0x480
[  113.171237]  schedule+0xda/0x1b0
[  113.171497]  exit_to_user_mode_prepare+0x114/0x1a0
[  113.171871]  syscall_exit_to_user_mode+0x19/0x40
[  113.172249]  do_syscall_64+0x48/0x90
[  113.172535]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  113.172928] RIP: 0033:0x7fd95d765b19
[  113.173212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  113.174550] RSP: 002b:00007fd95acdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  113.175105] RAX: 0000000000000001 RBX: 00007fd95d878f68 RCX: 00007fd95d765b19
[  113.175629] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd95d878f6c
[  113.176167] RBP: 00007fd95d878f60 R08: 000000000000000e R09: 0000000000000000
[  113.176702] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd95d878f6c
[  113.177228] R13: 00007ffd1eba267f R14: 00007fd95acdb300 R15: 0000000000022000
[  113.177760]  </TASK>
[  113.177941] irq event stamp: 634
[  113.178193] hardirqs last  enabled at (633): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  113.178903] hardirqs last disabled at (634): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  113.179508] softirqs last  enabled at (622): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  113.180152] softirqs last disabled at (613): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  113.180782] ---[ end trace 0000000000000000 ]---
13:25:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)

13:25:40 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

13:25:41 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

13:25:41 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

13:25:41 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:25:41 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

[  114.088315] loop4: detected capacity change from 0 to 40
[  114.135174] syz-executor.4: attempt to access beyond end of device
[  114.135174] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  114.136574] Buffer I/O error on dev loop4, logical block 31, lost async page write
[  114.151487] syz-executor.4: attempt to access beyond end of device
[  114.151487] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  114.152463] Buffer I/O error on dev loop4, logical block 31, lost async page write
[  114.161284] syz-executor.4 (3860) used greatest stack depth: 24728 bytes left
13:25:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000140053c50000000000000000ac1414aa000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB='\f\x00\b'], 0x64}}, 0x0)

13:25:44 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x42, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

13:25:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x7, 0x4)

13:25:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

13:25:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:25:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

[  116.703093] loop0: detected capacity change from 0 to 40
[  116.710125] loop4: detected capacity change from 0 to 40
13:25:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:25:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:25:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000140053c50000000000000000ac1414aa000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB='\f\x00\b'], 0x64}}, 0x0)

13:25:44 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x42, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

13:25:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

[  116.802730] syz-executor.0: attempt to access beyond end of device
[  116.802730] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[  116.805227] Buffer I/O error on dev loop0, logical block 31, lost async page write
13:25:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x7, 0x4)

[  116.813846] syz-executor.4: attempt to access beyond end of device
[  116.813846] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  116.815579] Buffer I/O error on dev loop4, logical block 31, lost async page write
13:25:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:25:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000140053c50000000000000000ac1414aa000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB='\f\x00\b'], 0x64}}, 0x0)

[  116.887802] syz-executor.4 (3979) used greatest stack depth: 24472 bytes left
13:25:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x7, 0x4)

13:25:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:44 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x42, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

13:25:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

13:25:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

13:25:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

[  116.969475] loop4: detected capacity change from 0 to 40
[  116.974459] loop0: detected capacity change from 0 to 40
[  116.985109] loop5: detected capacity change from 0 to 40
13:25:44 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x2, 0x0)

13:25:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

[  117.015568] syz-executor.0: attempt to access beyond end of device
[  117.015568] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.017091] Buffer I/O error on dev loop0, logical block 31, lost async page write
[  117.058897] hrtimer: interrupt took 18044 ns
13:25:44 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

[  117.102509] syz-executor.5: attempt to access beyond end of device
[  117.102509] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.103690] Buffer I/O error on dev loop5, logical block 31, lost async page write
[  117.276163] syz-executor.4: attempt to access beyond end of device
[  117.276163] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.280921] Buffer I/O error on dev loop4, logical block 31, lost async page write
13:25:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:45 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x2, 0x0)

13:25:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

13:25:45 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:45 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

[  117.394260] loop0: detected capacity change from 0 to 40
[  117.410409] loop5: detected capacity change from 0 to 40
[  117.425372] loop4: detected capacity change from 0 to 40
13:25:45 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

[  117.455157] syz-executor.0: attempt to access beyond end of device
[  117.455157] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.456420] Buffer I/O error on dev loop0, logical block 31, lost async page write
[  117.476485] syz-executor.4: attempt to access beyond end of device
[  117.476485] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.477744] Buffer I/O error on dev loop4, logical block 31, lost async page write
13:25:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x2, 0x0)

[  117.542231] syz-executor.5: attempt to access beyond end of device
[  117.542231] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  117.543180] Buffer I/O error on dev loop5, logical block 31, lost async page write
13:25:45 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

13:25:45 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x2, 0x0)

13:25:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

13:25:45 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

[  117.750394] loop5: detected capacity change from 0 to 40
13:25:45 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:45 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:45 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:46 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3cf3c82, 0x0)
umount2(&(0x7f0000001300)='./file0/../file0/file0\x00', 0x0)

13:25:46 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x161901, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="90", 0x7ffff000}], 0x1, 0x0, 0x0)

13:25:46 executing program 4:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:46 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))

13:25:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
dup3(r2, r2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:25:46 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
r1 = gettid()
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe})

13:25:46 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
dup3(r2, r2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  119.745865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.747045] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.747852] buffer_io_error: 1 callbacks suppressed
[  119.747861] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  119.749037] Buffer I/O error on dev sr0, logical block 1, lost async page write
[  119.749712] Buffer I/O error on dev sr0, logical block 2, lost async page write
[  119.750416] Buffer I/O error on dev sr0, logical block 3, lost async page write
[  119.751108] Buffer I/O error on dev sr0, logical block 4, lost async page write
[  119.751779] Buffer I/O error on dev sr0, logical block 5, lost async page write
[  119.752502] Buffer I/O error on dev sr0, logical block 6, lost async page write
[  119.753203] Buffer I/O error on dev sr0, logical block 7, lost async page write
[  119.753908] Buffer I/O error on dev sr0, logical block 8, lost async page write
[  119.754587] Buffer I/O error on dev sr0, logical block 9, lost async page write
[  119.758865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.759350] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.766156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.766557] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.769860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.770358] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.777821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.778239] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.781974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.782367] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.789263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.789694] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.793465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.793871] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.797982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.798382] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.801596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.802004] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x4800 phys_seg 127 prio class 2
[  119.808806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.814695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.817572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.821908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.826804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.831079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.834065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.837443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.841813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.844695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.849025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.852283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.856470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.859490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.863267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.866510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.870535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.873689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.876808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.881266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.884532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.888658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.891680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.896001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.899159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.903443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.906567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.909485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.913817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.916918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.920870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.923818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.928197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.931308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.935597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.938531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.942549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.945548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.948420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.953052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.955998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.959704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.962692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.966313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.970134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.973495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.976994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.980785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.983691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.987582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.991565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.994508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  119.998184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.001234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.004658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.008082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.011622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.014645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.018515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.021478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.024843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.028949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.031830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.035603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.038958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.042991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.045854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.049808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.053022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.056572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.060125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.063611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.067324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.070759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.074001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.078117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.081430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.084415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.088552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.091437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.094961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.098672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.102855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.105724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.109972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.112896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.115774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.120208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.123056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.127013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.129955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.133976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.137400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.141177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.144119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.148027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.151248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.155256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.158425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.161562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.165754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.169583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.173303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.176744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.179962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.183959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.187357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.190767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.194992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.198976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.201893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.205943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.208874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.213066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.215941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.220129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.223837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.227338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.230740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.233962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.237900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.241731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.245168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.248687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.252258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.256579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.259868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.262812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.266818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.269730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.273538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.277660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.280545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.283862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.287935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.290893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.295159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.298069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.301318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.305205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.308067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.311849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.315866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.318753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.321675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.326160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.329258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.332958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.337057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.340869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.343837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.347731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.351405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.354780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.358534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.361404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.364402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.368580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.371462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.374866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.378706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.382356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.385846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.390230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.393720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.396637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.400177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.403131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.407537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.410420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.413300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.417305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.420216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.424015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.427193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.431007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.434293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.437950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.441180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.444748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.448039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.451647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.454676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.458742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.461687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.465594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.468492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.471865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.475843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.478723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.481617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.485687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.488596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.492499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.495392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.499120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.502000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.505721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.508893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.511789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.515874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.518916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.521826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.525971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.528864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.532949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.535851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.538833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.543017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.545919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.548825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  120.550993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:25:48 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
r1 = gettid()
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe})

13:25:48 executing program 4:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:48 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:48 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
dup3(r2, r2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:25:48 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x161901, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="90", 0x7ffff000}], 0x1, 0x0, 0x0)

13:25:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))

13:25:48 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
r1 = gettid()
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe})

13:25:48 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
dup3(r2, r2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:25:48 executing program 4:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:48 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
r1 = gettid()
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe})

13:25:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))

[  121.866812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.876598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.881317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.884265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.890360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.899285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.908522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.913811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.918204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.922308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.925562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.929552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.933103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.937097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.941097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.944600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.948026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.951447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.955193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.958867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.962948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.966403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.969465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.973301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.976565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.980194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.983858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.987696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.991224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.995618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  121.998995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.002120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.006496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.009826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.012912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.017027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.020109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.023495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.027495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.031267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.034423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.038429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.041326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.044229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.048209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.051813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.055332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.058735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.062267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.065782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.069303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.073622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.076543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.080177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.083612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.086991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.090672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.094497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.097821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.101497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.105195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.108324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.112808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.120576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.123795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.128506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.132299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.135457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.140221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.143386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.147408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.151093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.154532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.158106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.162504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.165627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.169796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.173210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.176600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.180240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.183743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.187512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.191012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.195951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.199051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.202587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.206509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.210072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.213797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.217477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.221211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.224393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.228484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.231400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.235570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.238813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.242771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.245680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.248589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.252906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.255789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.259218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.263071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.266298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.270134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.273563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.276843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.280680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.283568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.287522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.290422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.294235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.297524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.300870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.304169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.308737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.311631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.315762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.318690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.324518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.329185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.332064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.335467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.339546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.342447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.345572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.349680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.352608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.356191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.359241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.362922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.366163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.369586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.373199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.376713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.379831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.383970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.386813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.390741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.393932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.396796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.401623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.404477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.407328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.411655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.414537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.417985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.421981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.425527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.428856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.432137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.435975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.438932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.443036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.445932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.448815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.452929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.455811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.459994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.462843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.466437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.470201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.473704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.476821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.480809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.484128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.487623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.491228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.494565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.497685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.501513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.505834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.508699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.512221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.516408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.519280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.523509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.526426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.529312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.533477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.536866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  122.539777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:25:50 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[0x0, <r0=>0xee00])
setresgid(r0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$netlink(r1, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0xffffffffffffff86, 0x0, 0x0, 0x0, 0x0, "", [@generic="600a451685ac0a7bc45895b67191df0ef6a04b9a6318ef8b25b3f3b65ba13c257903fd79e84ec86989e828b9dbd58609e0bb40bc1f9331b8792c4d8a7365da1497b8fa015d310cae61d187b6ce90fb6bc7104bb2009a7789cdda9185d864e9130eb363de689e7e7ab3cc904438d0ac79a43cb02cd6e2aecb6a7c402dc2598bf17fdc533044b85f566f0d61095a15c2d5789e597a0002baaddaf6faeeca8175f90fcd0f9891f4b89646950aa62ee9e78aadbc55f3266e4fcfbae21470692591f1deb9538c8fe29c2878db04", @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, 0xe4}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0xfffffffffffffdd5)
openat(r3, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14)
r4 = fork()
r5 = fork()
setregid(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x7})

13:25:50 executing program 2:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 4:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))

13:25:50 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x161901, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="90", 0x7ffff000}], 0x1, 0x0, 0x0)

13:25:50 executing program 7:
r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))

13:25:50 executing program 3:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 2:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 4:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

13:25:50 executing program 5:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r5, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=<r8=>r4, @ANYBLOB="08000000010000802e2f66696c653000"])
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)


VM DIAGNOSIS:
13:25:41  Registers:
info registers vcpu 0
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801d8a7698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001
R12=0000000000000066 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd95acdb700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01850e9260 CR3=000000003cfce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fd95d84c7c0 00007fd95d84c7c8
YMM02=0000000000000000 0000000000000000 00007fd95d84c7e0 00007fd95d84c7c0
YMM03=0000000000000000 0000000000000000 00007fd95d84c7c8 00007fd95d84c7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8425f1a7 RDX=ffffed100d9c6f99
RSI=0000000000000004 RDI=ffff88806ce37cc0 RBP=ffff88806ce37cc0 RSP=ffff88800c0c7ab8
R8 =0000000000000000 R9 =ffff88806ce37cc3 R10=ffffed100d9c6f98 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9c6f98 R14=0000000000000001 R15=1ffff11001818f58
RIP=ffffffff8425f224 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555557553400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc3bd8e8368 CR3=0000000008c28000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000ffff00000000 000000000000ffff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 000000ff00000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000