Warning: Permanently added '[localhost]:25863' (ECDSA) to the list of known hosts.
2022/09/12 14:32:18 fuzzer started
2022/09/12 14:32:18 dialing manager at localhost:38027
syzkaller login: [   44.532672] cgroup: Unknown subsys name 'net'
[   44.700335] cgroup: Unknown subsys name 'rlimit'
2022/09/12 14:32:32 syscalls: 2215
2022/09/12 14:32:32 code coverage: enabled
2022/09/12 14:32:32 comparison tracing: enabled
2022/09/12 14:32:32 extra coverage: enabled
2022/09/12 14:32:32 setuid sandbox: enabled
2022/09/12 14:32:32 namespace sandbox: enabled
2022/09/12 14:32:32 Android sandbox: enabled
2022/09/12 14:32:32 fault injection: enabled
2022/09/12 14:32:32 leak checking: enabled
2022/09/12 14:32:32 net packet injection: enabled
2022/09/12 14:32:32 net device setup: enabled
2022/09/12 14:32:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 14:32:32 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 14:32:32 USB emulation: enabled
2022/09/12 14:32:32 hci packet injection: enabled
2022/09/12 14:32:32 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 14:32:32 802.15.4 emulation: enabled
2022/09/12 14:32:32 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 14:32:32 fetching corpus: 50, signal 22431/25942 (executing program)
2022/09/12 14:32:32 fetching corpus: 100, signal 46983/51465 (executing program)
2022/09/12 14:32:32 fetching corpus: 150, signal 57626/63160 (executing program)
2022/09/12 14:32:32 fetching corpus: 200, signal 63536/70151 (executing program)
2022/09/12 14:32:32 fetching corpus: 250, signal 68654/76285 (executing program)
2022/09/12 14:32:32 fetching corpus: 300, signal 71823/80527 (executing program)
2022/09/12 14:32:33 fetching corpus: 350, signal 76991/86477 (executing program)
2022/09/12 14:32:33 fetching corpus: 400, signal 81418/91717 (executing program)
2022/09/12 14:32:33 fetching corpus: 450, signal 84612/95707 (executing program)
2022/09/12 14:32:33 fetching corpus: 500, signal 89440/101079 (executing program)
2022/09/12 14:32:33 fetching corpus: 550, signal 95947/107875 (executing program)
2022/09/12 14:32:33 fetching corpus: 600, signal 99033/111552 (executing program)
2022/09/12 14:32:33 fetching corpus: 650, signal 102465/115426 (executing program)
2022/09/12 14:32:34 fetching corpus: 700, signal 105983/119291 (executing program)
2022/09/12 14:32:34 fetching corpus: 750, signal 109332/122995 (executing program)
2022/09/12 14:32:34 fetching corpus: 800, signal 112057/126103 (executing program)
2022/09/12 14:32:34 fetching corpus: 850, signal 113928/128446 (executing program)
2022/09/12 14:32:34 fetching corpus: 900, signal 116874/131676 (executing program)
2022/09/12 14:32:34 fetching corpus: 950, signal 119801/134740 (executing program)
2022/09/12 14:32:35 fetching corpus: 1000, signal 122663/137795 (executing program)
2022/09/12 14:32:35 fetching corpus: 1050, signal 124598/139987 (executing program)
2022/09/12 14:32:35 fetching corpus: 1100, signal 126129/141921 (executing program)
2022/09/12 14:32:35 fetching corpus: 1150, signal 128513/144414 (executing program)
2022/09/12 14:32:35 fetching corpus: 1200, signal 130305/146427 (executing program)
2022/09/12 14:32:35 fetching corpus: 1250, signal 132008/148324 (executing program)
2022/09/12 14:32:35 fetching corpus: 1300, signal 133266/149866 (executing program)
2022/09/12 14:32:36 fetching corpus: 1350, signal 134626/151387 (executing program)
2022/09/12 14:32:36 fetching corpus: 1400, signal 136382/153210 (executing program)
2022/09/12 14:32:36 fetching corpus: 1450, signal 137772/154795 (executing program)
2022/09/12 14:32:36 fetching corpus: 1500, signal 139695/156620 (executing program)
2022/09/12 14:32:36 fetching corpus: 1550, signal 141144/158156 (executing program)
2022/09/12 14:32:36 fetching corpus: 1600, signal 142761/159831 (executing program)
2022/09/12 14:32:37 fetching corpus: 1650, signal 144481/161454 (executing program)
2022/09/12 14:32:37 fetching corpus: 1700, signal 146280/163115 (executing program)
2022/09/12 14:32:37 fetching corpus: 1750, signal 147956/164743 (executing program)
2022/09/12 14:32:37 fetching corpus: 1800, signal 149404/166139 (executing program)
2022/09/12 14:32:37 fetching corpus: 1850, signal 150277/167157 (executing program)
2022/09/12 14:32:37 fetching corpus: 1900, signal 151928/168610 (executing program)
2022/09/12 14:32:37 fetching corpus: 1950, signal 152842/169552 (executing program)
2022/09/12 14:32:38 fetching corpus: 2000, signal 153881/170521 (executing program)
2022/09/12 14:32:38 fetching corpus: 2050, signal 155488/171791 (executing program)
2022/09/12 14:32:38 fetching corpus: 2100, signal 156873/172951 (executing program)
2022/09/12 14:32:38 fetching corpus: 2150, signal 157741/173798 (executing program)
2022/09/12 14:32:38 fetching corpus: 2200, signal 158770/174727 (executing program)
2022/09/12 14:32:38 fetching corpus: 2250, signal 159733/175576 (executing program)
2022/09/12 14:32:39 fetching corpus: 2300, signal 161124/176626 (executing program)
2022/09/12 14:32:39 fetching corpus: 2350, signal 162319/177556 (executing program)
2022/09/12 14:32:39 fetching corpus: 2400, signal 163990/178698 (executing program)
2022/09/12 14:32:39 fetching corpus: 2450, signal 165446/179745 (executing program)
2022/09/12 14:32:39 fetching corpus: 2500, signal 166617/180586 (executing program)
2022/09/12 14:32:39 fetching corpus: 2550, signal 167734/181373 (executing program)
2022/09/12 14:32:39 fetching corpus: 2600, signal 168680/182083 (executing program)
2022/09/12 14:32:40 fetching corpus: 2650, signal 170046/182956 (executing program)
2022/09/12 14:32:40 fetching corpus: 2700, signal 171120/183658 (executing program)
2022/09/12 14:32:40 fetching corpus: 2750, signal 171899/184252 (executing program)
2022/09/12 14:32:40 fetching corpus: 2800, signal 172791/184865 (executing program)
2022/09/12 14:32:40 fetching corpus: 2850, signal 173428/185342 (executing program)
2022/09/12 14:32:40 fetching corpus: 2900, signal 174577/186015 (executing program)
2022/09/12 14:32:40 fetching corpus: 2950, signal 176137/186841 (executing program)
2022/09/12 14:32:41 fetching corpus: 3000, signal 177287/187383 (executing program)
2022/09/12 14:32:41 fetching corpus: 3050, signal 178245/187862 (executing program)
2022/09/12 14:32:41 fetching corpus: 3100, signal 178988/188367 (executing program)
2022/09/12 14:32:41 fetching corpus: 3150, signal 180480/188981 (executing program)
2022/09/12 14:32:41 fetching corpus: 3200, signal 181243/189345 (executing program)
2022/09/12 14:32:41 fetching corpus: 3250, signal 181975/189671 (executing program)
2022/09/12 14:32:41 fetching corpus: 3300, signal 182836/190061 (executing program)
2022/09/12 14:32:42 fetching corpus: 3350, signal 183458/190428 (executing program)
2022/09/12 14:32:42 fetching corpus: 3400, signal 184559/190828 (executing program)
2022/09/12 14:32:42 fetching corpus: 3450, signal 185619/191291 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191442 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191517 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191600 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191673 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191757 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191843 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191900 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/191974 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192049 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192125 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192205 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192280 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192363 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192442 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192496 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192568 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192637 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192709 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192794 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192871 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/192949 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/193029 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/193108 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/193158 (executing program)
2022/09/12 14:32:42 fetching corpus: 3467, signal 185954/193158 (executing program)
2022/09/12 14:32:46 starting 8 fuzzer processes
14:32:46 executing program 0:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:32:46 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x183402)
write(r0, &(0x7f0000000100)="fd", 0x5)

14:32:46 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:32:46 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

[   72.129356] audit: type=1400 audit(1662993166.228:6): avc:  denied  { execmem } for  pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:32:46 executing program 4:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:32:46 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffeffffa4b)

14:32:46 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:32:46 executing program 7:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3)

[   73.509148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.510931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.512699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.514017] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.516328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.517334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.523357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.524602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.525163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.549829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.558170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.559542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.561668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   73.563153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.564507] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.565656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.566807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.567768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.569998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.571006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.572024] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.572991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.575822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.580081] Bluetooth: hci2: HCI_REQ-0x0c1a
[   73.584902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.585918] Bluetooth: hci0: HCI_REQ-0x0c1a
[   73.586301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.587533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   73.588037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   73.590872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.592437] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   73.598914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   73.600212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   73.603220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   73.603265] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   73.606830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   73.608319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   73.608874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   73.609999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.612774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.614158] Bluetooth: hci1: HCI_REQ-0x0c1a
[   73.615091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   73.615136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   73.616170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   73.617483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   73.619453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   73.627225] Bluetooth: hci4: HCI_REQ-0x0c1a
[   73.635204] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.637153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.641999] Bluetooth: hci5: HCI_REQ-0x0c1a
[   73.642917] Bluetooth: hci6: HCI_REQ-0x0c1a
[   73.654395] Bluetooth: hci3: HCI_REQ-0x0c1a
[   73.656291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   73.658883] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   73.660395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   73.668075] Bluetooth: hci7: HCI_REQ-0x0c1a
[   75.639468] Bluetooth: hci4: command 0x0409 tx timeout
[   75.639469] Bluetooth: hci1: command 0x0409 tx timeout
[   75.640646] Bluetooth: hci0: command 0x0409 tx timeout
[   75.640708] Bluetooth: hci2: command 0x0409 tx timeout
[   75.702709] Bluetooth: hci5: command 0x0409 tx timeout
[   75.703879] Bluetooth: hci7: command 0x0409 tx timeout
[   75.704745] Bluetooth: hci3: command 0x0409 tx timeout
[   75.705331] Bluetooth: hci6: command 0x0409 tx timeout
[   77.686764] Bluetooth: hci2: command 0x041b tx timeout
[   77.687355] Bluetooth: hci0: command 0x041b tx timeout
[   77.689214] Bluetooth: hci4: command 0x041b tx timeout
[   77.689977] Bluetooth: hci1: command 0x041b tx timeout
[   77.750686] Bluetooth: hci6: command 0x041b tx timeout
[   77.751289] Bluetooth: hci3: command 0x041b tx timeout
[   77.753447] Bluetooth: hci7: command 0x041b tx timeout
[   77.754132] Bluetooth: hci5: command 0x041b tx timeout
[   79.734693] Bluetooth: hci1: command 0x040f tx timeout
[   79.735175] Bluetooth: hci4: command 0x040f tx timeout
[   79.735566] Bluetooth: hci0: command 0x040f tx timeout
[   79.737243] Bluetooth: hci2: command 0x040f tx timeout
[   79.798732] Bluetooth: hci5: command 0x040f tx timeout
[   79.800764] Bluetooth: hci7: command 0x040f tx timeout
[   79.801171] Bluetooth: hci3: command 0x040f tx timeout
[   79.801566] Bluetooth: hci6: command 0x040f tx timeout
[   81.782747] Bluetooth: hci2: command 0x0419 tx timeout
[   81.784661] Bluetooth: hci0: command 0x0419 tx timeout
[   81.785190] Bluetooth: hci4: command 0x0419 tx timeout
[   81.786231] Bluetooth: hci1: command 0x0419 tx timeout
[   81.847783] Bluetooth: hci6: command 0x0419 tx timeout
[   81.849395] Bluetooth: hci3: command 0x0419 tx timeout
[   81.849858] Bluetooth: hci7: command 0x0419 tx timeout
[   81.850279] Bluetooth: hci5: command 0x0419 tx timeout
14:33:38 executing program 7:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3)

14:33:38 executing program 7:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3)

14:33:38 executing program 7:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3)

14:33:38 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

[  124.600571] audit: type=1400 audit(1662993218.699:7): avc:  denied  { open } for  pid=3860 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  124.611406] audit: type=1400 audit(1662993218.710:8): avc:  denied  { kernel } for  pid=3860 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  124.625266] ------------[ cut here ]------------
[  124.625287] 
[  124.625290] ======================================================
[  124.625293] WARNING: possible circular locking dependency detected
[  124.625298] 6.0.0-rc5-next-20220912 #1 Not tainted
[  124.625304] ------------------------------------------------------
[  124.625308] syz-executor.7/3861 is trying to acquire lock:
[  124.625314] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  124.625354] 
[  124.625354] but task is already holding lock:
[  124.625357] ffff88801f3cfc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  124.625386] 
[  124.625386] which lock already depends on the new lock.
[  124.625386] 
[  124.625389] 
[  124.625389] the existing dependency chain (in reverse order) is:
[  124.625392] 
[  124.625392] -> #3 (&ctx->lock){....}-{2:2}:
[  124.625406]        _raw_spin_lock+0x2a/0x40
[  124.625423]        __perf_event_task_sched_out+0x53b/0x18d0
[  124.625435]        __schedule+0xedd/0x2470
[  124.625446]        schedule+0xda/0x1b0
[  124.625455]        exit_to_user_mode_prepare+0x114/0x1a0
[  124.625476]        syscall_exit_to_user_mode+0x19/0x40
[  124.625494]        do_syscall_64+0x48/0x90
[  124.625507]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  124.625525] 
[  124.625525] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  124.625539]        _raw_spin_lock_nested+0x30/0x40
[  124.625553]        raw_spin_rq_lock_nested+0x1e/0x30
[  124.625567]        task_fork_fair+0x63/0x4d0
[  124.625584]        sched_cgroup_fork+0x3d0/0x540
[  124.625599]        copy_process+0x3f9e/0x6df0
[  124.625612]        kernel_clone+0xe7/0x890
[  124.625622]        user_mode_thread+0xad/0xf0
[  124.625632]        rest_init+0x24/0x250
[  124.625648]        arch_call_rest_init+0xf/0x14
[  124.625667]        start_kernel+0x4c1/0x4e6
[  124.625684]        secondary_startup_64_no_verify+0xe0/0xeb
[  124.625699] 
[  124.625699] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  124.625713]        _raw_spin_lock_irqsave+0x39/0x60
[  124.625728]        try_to_wake_up+0xab/0x1920
[  124.625741]        up+0x75/0xb0
[  124.625753]        __up_console_sem+0x6e/0x80
[  124.625769]        console_unlock+0x46a/0x590
[  124.625787]        vprintk_emit+0x1bd/0x560
[  124.625804]        vprintk+0x84/0xa0
[  124.625820]        _printk+0xba/0xf1
[  124.625838]        kauditd_hold_skb.cold+0x3f/0x4e
[  124.625852]        kauditd_send_queue+0x233/0x290
[  124.625867]        kauditd_thread+0x5da/0x9a0
[  124.625881]        kthread+0x2ed/0x3a0
[  124.625896]        ret_from_fork+0x22/0x30
[  124.625909] 
[  124.625909] -> #0 ((console_sem).lock){....}-{2:2}:
[  124.625922]        __lock_acquire+0x2a02/0x5e70
[  124.625939]        lock_acquire+0x1a2/0x530
[  124.625955]        _raw_spin_lock_irqsave+0x39/0x60
[  124.625970]        down_trylock+0xe/0x70
[  124.625983]        __down_trylock_console_sem+0x3b/0xd0
[  124.625999]        vprintk_emit+0x16b/0x560
[  124.626016]        vprintk+0x84/0xa0
[  124.626032]        _printk+0xba/0xf1
[  124.626048]        report_bug.cold+0x72/0xab
[  124.626060]        handle_bug+0x3c/0x70
[  124.626074]        exc_invalid_op+0x14/0x50
[  124.626087]        asm_exc_invalid_op+0x16/0x20
[  124.626103]        group_sched_out.part.0+0x2c7/0x460
[  124.626114]        ctx_sched_out+0x8f1/0xc10
[  124.626123]        __perf_event_task_sched_out+0x6d0/0x18d0
[  124.626136]        __schedule+0xedd/0x2470
[  124.626145]        schedule+0xda/0x1b0
[  124.626154]        exit_to_user_mode_prepare+0x114/0x1a0
[  124.626173]        syscall_exit_to_user_mode+0x19/0x40
[  124.626190]        do_syscall_64+0x48/0x90
[  124.626203]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  124.626219] 
[  124.626219] other info that might help us debug this:
[  124.626219] 
[  124.626222] Chain exists of:
[  124.626222]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  124.626222] 
[  124.626237]  Possible unsafe locking scenario:
[  124.626237] 
[  124.626239]        CPU0                    CPU1
[  124.626242]        ----                    ----
[  124.626244]   lock(&ctx->lock);
[  124.626250]                                lock(&rq->__lock);
[  124.626256]                                lock(&ctx->lock);
[  124.626263]   lock((console_sem).lock);
[  124.626268] 
[  124.626268]  *** DEADLOCK ***
[  124.626268] 
[  124.626270] 2 locks held by syz-executor.7/3861:
[  124.626277]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  124.626302]  #1: ffff88801f3cfc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  124.626330] 
[  124.626330] stack backtrace:
[  124.626333] CPU: 0 PID: 3861 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1
[  124.626347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  124.626355] Call Trace:
[  124.626358]  <TASK>
[  124.626362]  dump_stack_lvl+0x8b/0xb3
[  124.626377]  check_noncircular+0x263/0x2e0
[  124.626394]  ? format_decode+0x26c/0xb50
[  124.626409]  ? print_circular_bug+0x450/0x450
[  124.626426]  ? enable_ptr_key_workfn+0x20/0x20
[  124.626441]  ? format_decode+0x26c/0xb50
[  124.626456]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  124.626474]  __lock_acquire+0x2a02/0x5e70
[  124.626496]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  124.626519]  lock_acquire+0x1a2/0x530
[  124.626536]  ? down_trylock+0xe/0x70
[  124.626551]  ? rcu_read_unlock+0x40/0x40
[  124.626572]  ? vprintk+0x84/0xa0
[  124.626590]  _raw_spin_lock_irqsave+0x39/0x60
[  124.626606]  ? down_trylock+0xe/0x70
[  124.626620]  down_trylock+0xe/0x70
[  124.626634]  ? vprintk+0x84/0xa0
[  124.626651]  __down_trylock_console_sem+0x3b/0xd0
[  124.626669]  vprintk_emit+0x16b/0x560
[  124.626688]  vprintk+0x84/0xa0
[  124.626706]  _printk+0xba/0xf1
[  124.626724]  ? record_print_text.cold+0x16/0x16
[  124.626746]  ? report_bug.cold+0x66/0xab
[  124.626760]  ? group_sched_out.part.0+0x2c7/0x460
[  124.626771]  report_bug.cold+0x72/0xab
[  124.626786]  handle_bug+0x3c/0x70
[  124.626799]  exc_invalid_op+0x14/0x50
[  124.626814]  asm_exc_invalid_op+0x16/0x20
[  124.626831] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  124.626845] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  124.626856] RSP: 0018:ffff888040437c48 EFLAGS: 00010006
[  124.626865] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  124.626873] RDX: ffff88801aa4b580 RSI: ffffffff81566027 RDI: 0000000000000005
[  124.626881] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  124.626888] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88801f3cfc00
[  124.626896] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  124.626907]  ? group_sched_out.part.0+0x2c7/0x460
[  124.626920]  ? group_sched_out.part.0+0x2c7/0x460
[  124.626933]  ctx_sched_out+0x8f1/0xc10
[  124.626945]  __perf_event_task_sched_out+0x6d0/0x18d0
[  124.626961]  ? lock_is_held_type+0xd7/0x130
[  124.626979]  ? __perf_cgroup_move+0x160/0x160
[  124.626991]  ? set_next_entity+0x304/0x550
[  124.627009]  ? update_curr+0x267/0x740
[  124.627028]  ? lock_is_held_type+0xd7/0x130
[  124.627046]  __schedule+0xedd/0x2470
[  124.627059]  ? io_schedule_timeout+0x150/0x150
[  124.627071]  ? rcu_read_lock_sched_held+0x3e/0x80
[  124.627092]  schedule+0xda/0x1b0
[  124.627103]  exit_to_user_mode_prepare+0x114/0x1a0
[  124.627124]  syscall_exit_to_user_mode+0x19/0x40
[  124.627150]  do_syscall_64+0x48/0x90
[  124.627164]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  124.627181] RIP: 0033:0x7f656e6f4b19
[  124.627190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  124.627201] RSP: 002b:00007f656bc6a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  124.627212] RAX: 0000000000000001 RBX: 00007f656e807f68 RCX: 00007f656e6f4b19
[  124.627219] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f656e807f6c
[  124.627227] RBP: 00007f656e807f60 R08: 000000000000000e R09: 0000000000000000
[  124.627234] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f656e807f6c
[  124.627241] R13: 00007ffea6d0ffdf R14: 00007f656bc6a300 R15: 0000000000022000
[  124.627254]  </TASK>
[  124.684146] WARNING: CPU: 0 PID: 3861 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  124.684810] Modules linked in:
[  124.685054] CPU: 0 PID: 3861 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1
[  124.685670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  124.686519] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  124.686927] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  124.688267] RSP: 0018:ffff888040437c48 EFLAGS: 00010006
[  124.688669] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  124.689199] RDX: ffff88801aa4b580 RSI: ffffffff81566027 RDI: 0000000000000005
[  124.689730] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  124.690261] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88801f3cfc00
[  124.690800] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  124.691346] FS:  00007f656bc6a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  124.691945] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.692377] CR2: 00007fa14283a008 CR3: 000000003ecbc000 CR4: 0000000000350ef0
[  124.692908] Call Trace:
[  124.693110]  <TASK>
[  124.693289]  ctx_sched_out+0x8f1/0xc10
[  124.693588]  __perf_event_task_sched_out+0x6d0/0x18d0
[  124.693983]  ? lock_is_held_type+0xd7/0x130
[  124.694313]  ? __perf_cgroup_move+0x160/0x160
[  124.694659]  ? set_next_entity+0x304/0x550
[  124.694989]  ? update_curr+0x267/0x740
[  124.695303]  ? lock_is_held_type+0xd7/0x130
[  124.695638]  __schedule+0xedd/0x2470
[  124.695931]  ? io_schedule_timeout+0x150/0x150
[  124.696283]  ? rcu_read_lock_sched_held+0x3e/0x80
[  124.696660]  schedule+0xda/0x1b0
[  124.696925]  exit_to_user_mode_prepare+0x114/0x1a0
[  124.697299]  syscall_exit_to_user_mode+0x19/0x40
[  124.697664]  do_syscall_64+0x48/0x90
[  124.697952]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  124.698344] RIP: 0033:0x7f656e6f4b19
[  124.698630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  124.699984] RSP: 002b:00007f656bc6a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  124.700548] RAX: 0000000000000001 RBX: 00007f656e807f68 RCX: 00007f656e6f4b19
[  124.701077] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f656e807f6c
[  124.701602] RBP: 00007f656e807f60 R08: 000000000000000e R09: 0000000000000000
[  124.702132] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f656e807f6c
[  124.702667] R13: 00007ffea6d0ffdf R14: 00007f656bc6a300 R15: 0000000000022000
[  124.703216]  </TASK>
[  124.703402] irq event stamp: 2650
[  124.703663] hardirqs last  enabled at (2649): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  124.704370] hardirqs last disabled at (2650): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  124.704990] softirqs last  enabled at (2438): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  124.705626] softirqs last disabled at (2429): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  124.706268] ---[ end trace 0000000000000000 ]---
[  124.964627] hrtimer: interrupt took 18936 ns
14:33:39 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:39 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:39 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

14:33:39 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

[  126.384013] loop2: detected capacity change from 0 to 40
[  126.488131] syz-executor.2: attempt to access beyond end of device
[  126.488131] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[  126.489283] Buffer I/O error on dev loop2, logical block 31, lost async page write
[  126.521956] syz-executor.2: attempt to access beyond end of device
[  126.521956] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[  126.523627] Buffer I/O error on dev loop2, logical block 31, lost async page write
14:33:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffeffffa4b)

[  126.623036] loop2: detected capacity change from 0 to 40
14:33:40 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

14:33:40 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:40 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x183402)
write(r0, &(0x7f0000000100)="fd", 0x5)

14:33:40 executing program 4:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:40 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:40 executing program 7:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

14:33:40 executing program 0:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

[  126.685558] syz-executor.2: attempt to access beyond end of device
[  126.685558] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[  126.686806] Buffer I/O error on dev loop2, logical block 31, lost async page write
14:33:40 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x183402)
write(r0, &(0x7f0000000100)="fd", 0x5)

14:33:40 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

14:33:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffeffffa4b)

14:33:40 executing program 4:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:40 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:40 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x183402)
write(r0, &(0x7f0000000100)="fd", 0x5)

14:33:40 executing program 0:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:40 executing program 3:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:40 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:40 executing program 7:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

[  126.907934] loop2: detected capacity change from 0 to 40
14:33:41 executing program 3:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:41 executing program 4:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:41 executing program 1:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:41 executing program 0:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffeffffa4b)

14:33:41 executing program 3:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

14:33:41 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:41 executing program 1:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

[  127.090452] loop4: detected capacity change from 0 to 40
14:33:41 executing program 7:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8)
r0 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0x3f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x6)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x2, 0x80, 0x7, 0x20, 0x1f, 0x7f, 0x0, 0x5, 0x1e2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x1000000000}, 0x20, 0x7, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x40, 0x0, 0xff})
io_uring_enter(r0, 0x284, 0x8cb7, 0x3, &(0x7f0000000440)={[0xf6]}, 0x8)
ppoll(&(0x7f0000000480)=[{r7, 0x9480}, {0xffffffffffffffff, 0x8008}, {r7, 0x1}], 0x3, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00), 0x8)

14:33:41 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

[  127.155444] syz-executor.4: attempt to access beyond end of device
[  127.155444] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  127.156696] Buffer I/O error on dev loop4, logical block 31, lost async page write
[  127.163560] loop3: detected capacity change from 0 to 40
14:33:41 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:41 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

[  127.666042] loop5: detected capacity change from 0 to 40
14:33:41 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:41 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:41 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:41 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:41 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:41 executing program 1:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="150f3deb845ee64b64306eb7dfdcaafbb10a8b0401d9a65118dbac22d956bc80c0769e3d36d6c6b4eb47cfc8140332ec819e167870c2db3480774ed79bfea84bf29a2f8014eef84a20a575b46125a3", 0x4f)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x0, 0x63, 0x39, 0x35, 0x0, 0x38, 0x3, 0x0, 0x32, 0x65, 0x0, 0x65, 0x38, 0x64]}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x58004)
request_key(&(0x7f0000008f80)='asymmetric\x00', &(0x7f0000008fc0)={'syz', 0x1}, &(0x7f0000009000)='trusted\x00', 0x0)

[  127.699845] loop0: detected capacity change from 0 to 40
[  127.707205] loop4: detected capacity change from 0 to 40
[  127.712482] loop2: detected capacity change from 0 to 40
[  127.714726] loop3: detected capacity change from 0 to 40
14:33:41 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:42 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
poll(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

14:33:42 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:42 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:42 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:42 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:42 executing program 6:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:42 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:42 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

[  128.820749] loop5: detected capacity change from 0 to 40
14:33:42 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

[  128.829685] loop4: detected capacity change from 0 to 40
[  128.833322] loop3: detected capacity change from 0 to 40
[  128.835180] loop0: detected capacity change from 0 to 40
[  128.986322] syz-executor.4: attempt to access beyond end of device
[  128.986322] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[  128.988028] Buffer I/O error on dev loop4, logical block 31, lost async page write
[  129.006547] syz-executor.0: attempt to access beyond end of device
[  129.006547] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[  129.008777] Buffer I/O error on dev loop0, logical block 31, lost async page write
[  129.821537] loop5: detected capacity change from 0 to 40
14:33:43 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:43 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:43 executing program 7:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:43 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

14:33:43 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:43 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
close(r0)
r2 = syz_io_uring_setup(0x2b26, &(0x7f0000000300)={0x0, 0x8f2c, 0x0, 0x0, 0x144}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r2}, './file2\x00'})
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x400, 0x1, &(0x7f00000005c0)="b0b13ec5e8bdd65a3e4828dbb03a32a73639779f4c2463a7da1ed0b4c46561c1fd4ca43ccfb7cd014a8fa265e96db7427bd61021b6d351c2864797fdfa6345b46b8ea5111f0363ad621e611d06e1e7f081955093bde4d397279bdad2178eef58b7f33d105155237809c455a8e013e720fd91f1979d7b3448ce60299e8961b3f81d5b79c7b1cfdefdbe547d4c8e9f4c5065cfbebd81dd85f0b93e2cd6eb398bb1b976ec5ae71a2a6cb012b5579d1e1cdbeccf377b607c168d0569ca20a3e717097c307640a1a3e43a56b09cfb32548914", 0x1, 0x0, 0x1, {0x3, r5}}, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x80, 0x48, 0x3b5, 0x2a2, 0x7fff, 0x22d, 0x200}, "2f17fa996b660f6360c018173e", ['\x00', '\x00']}, 0x22d)
write(r6, &(0x7f0000000080)="01", 0x41030)

14:33:43 executing program 6:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0)
poll(0x0, 0xfffffffffffffdc0, 0x7fffffff)
close_range(r1, r1, 0x2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})

14:33:43 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

[  129.872757] loop0: detected capacity change from 0 to 40
14:33:44 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

[  130.048562] syz-executor.5: attempt to access beyond end of device
[  130.048562] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  130.050909] Buffer I/O error on dev loop5, logical block 31, lost async page write
14:33:44 executing program 6:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xff, 0x0, 0x0, 0xda, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000017c0), 0xd}, 0x11c07, 0xc03, 0x7f, 0x6, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, r1, 0x6, r0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f0000001280)=""/241, 0xf1}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/189, 0xbd}], 0x5, &(0x7f0000001780)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/114, 0x72}], 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = getpgid(r1)
process_vm_writev(r2, &(0x7f00000011c0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/117, 0x75}], 0x2, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000001c00)=""/124, 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0)
inotify_init1(0x0)

14:33:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x81, 0x0, 0xff, 0x0, 0x8000000000000006, 0x2004, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x40a4e, 0x0, 0x6, 0x4, 0x1da, 0x80000001, 0x5, 0x0, 0xb3ee, 0x0, 0x7fff}, 0x0, 0x9, r0, 0x8)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="14e4ffff010000000000004829b6f392b4ca4a8249b8f169bf519849a041c024335f2441bc3b021057e3ad573965b5d09192b18821a828b43e4ff08bdbb9402593db0b886a8b346660d7623da7186a846d3150d8c8956a55a14c706c3950ab7c849fb217110876e65fddb4b7b421ed6e65de64ba95610a1b9ba07b55e339ecc2cda0519c60d48601526f44b8abeb9434876b3d31fbf65a47350fbf2d32a135a2c4020e955f8672de8291d4dce32fb6de03e6a5cc1bdc2197a1f92a83abf15c5491ddfe34500a24f240e02fc810792d4f26b150f77e6be78de2fce4bc4c8141491ab3c193c4f46fef914bedd51b1c46f4bbc821ca94cd3c9fcba3deee7acee08ad645789788263d052c9ce9b98a9ceb5a11b877dfdae0c06f868c6d14ab068d0534d60d716bc5b3a0dca9d8f4dde53ce66883fb731b0897341335dd7eb2a19e445a0ceb54d8eb778e505eeaf6712b4d5f96d2d0a68b5aceb0e14d52d8bdf0a2183b483aad86ec2277e2d69c4631b537a682f2ba610b32e41d422461e1a7e6a5f5ceb5538fe0c3958bbb7faebc7b51f66176cb84a361049d711fe4f0564535b662858f139f9a8786d6f2b4fb1463a33a0cb95b7f7e7ae48856fd4ee1aa18f39f555e67d877cb629076eaa0dfb32c1caaa54625f8ab8f73a376574a06000000194d13043ce58ae74afc38e50650f26bb72e316dc9dbb4590dcd7f9a789b4289a77fc47b2a75273bbd1ee1bde269e43683991519ffa39d02b3ffb8849b88c6010783fb4cfcdd31a33006a9fe349c8c2a140d3552"], 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xc000000000}, 0x0, 0xd1e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x1f, 0x3, 0x7, 0x0, 0x4, 0x3002, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7d81, 0x1}, 0x3000, 0x1000, 0x6, 0x4, 0x24, 0x6, 0x0, 0x0, 0x90, 0x0, 0x3}, 0x0, 0xa, r0, 0x3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, <r3=>0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, r3, "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", "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
VM DIAGNOSIS:
14:33:39  Registers:
info registers vcpu 0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888040437698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f656bc6a700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa14283a008 CR3=000000003ecbc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 88011ed1daefec8b fdce0c9579042a41
YMM02=0000000000000000 0000000000000000 7f6e93f0a9433166 bf15a7685e42d703
YMM03=0000000000000000 0000000000000000 93c94b9301b84ebb 965fb4237b922770
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302
YMM07=0000000000000000 0000000000000000 0e0d0c0f0a09080b 0605040702010003
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000009314fdda RBX=000000003bfa7bf2 RCX=0000000000001003 RDX=00007f0359d3703c
RSI=000000000000082d RDI=000000003bfa7bf2 RBP=0000000000000001 RSP=00007ffe8b105c50
R8 =00007ffe8b105d90 R9 =00007f035a080440 R10=00007f035a029d30 R11=0000000000000007
R12=00007f0359d3b334 R13=0000559d50278c00 R14=0000000000000009 R15=00007f035a04e510
RIP=00007f035a05e349 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0359b44540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0359d2f620 CR3=0000000017504000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000ff0000000000 00ff000000000000
YMM01=0000000000000000 0000000000000000 0000010000000000 0000ffffffffffff
YMM02=0000000000000000 0000000000000000 312e325f4342494c 4700302e355f5a58
YMM03=0000000000000000 0000000000000000 0000000000000000 0000004700352e32
YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000