Warning: Permanently added '[localhost]:8166' (ECDSA) to the list of known hosts.
2022/09/16 13:02:38 fuzzer started
2022/09/16 13:02:39 dialing manager at localhost:36051
syzkaller login: [   41.033296] cgroup: Unknown subsys name 'net'
[   41.134865] cgroup: Unknown subsys name 'rlimit'
2022/09/16 13:02:53 syscalls: 2215
2022/09/16 13:02:53 code coverage: enabled
2022/09/16 13:02:53 comparison tracing: enabled
2022/09/16 13:02:53 extra coverage: enabled
2022/09/16 13:02:53 setuid sandbox: enabled
2022/09/16 13:02:53 namespace sandbox: enabled
2022/09/16 13:02:53 Android sandbox: enabled
2022/09/16 13:02:53 fault injection: enabled
2022/09/16 13:02:53 leak checking: enabled
2022/09/16 13:02:53 net packet injection: enabled
2022/09/16 13:02:53 net device setup: enabled
2022/09/16 13:02:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/16 13:02:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/16 13:02:53 USB emulation: enabled
2022/09/16 13:02:53 hci packet injection: enabled
2022/09/16 13:02:53 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916                                          )
2022/09/16 13:02:53 802.15.4 emulation: enabled
2022/09/16 13:02:53 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/16 13:02:53 fetching corpus: 50, signal 28979/32498 (executing program)
2022/09/16 13:02:53 fetching corpus: 100, signal 46126/50917 (executing program)
2022/09/16 13:02:54 fetching corpus: 150, signal 60660/66526 (executing program)
2022/09/16 13:02:54 fetching corpus: 200, signal 67711/74743 (executing program)
2022/09/16 13:02:54 fetching corpus: 250, signal 72790/80973 (executing program)
2022/09/16 13:02:54 fetching corpus: 300, signal 78530/87698 (executing program)
2022/09/16 13:02:54 fetching corpus: 350, signal 82007/92262 (executing program)
2022/09/16 13:02:54 fetching corpus: 400, signal 89543/100503 (executing program)
2022/09/16 13:02:55 fetching corpus: 450, signal 92203/104188 (executing program)
2022/09/16 13:02:55 fetching corpus: 500, signal 95767/108626 (executing program)
2022/09/16 13:02:55 fetching corpus: 550, signal 98447/112209 (executing program)
2022/09/16 13:02:55 fetching corpus: 600, signal 101253/115858 (executing program)
2022/09/16 13:02:55 fetching corpus: 650, signal 107137/122212 (executing program)
2022/09/16 13:02:55 fetching corpus: 700, signal 110669/126387 (executing program)
2022/09/16 13:02:56 fetching corpus: 750, signal 112899/129367 (executing program)
2022/09/16 13:02:56 fetching corpus: 800, signal 116052/133102 (executing program)
2022/09/16 13:02:56 fetching corpus: 850, signal 117946/135687 (executing program)
2022/09/16 13:02:56 fetching corpus: 900, signal 120790/139044 (executing program)
2022/09/16 13:02:56 fetching corpus: 950, signal 122816/141679 (executing program)
2022/09/16 13:02:56 fetching corpus: 1000, signal 124415/143903 (executing program)
2022/09/16 13:02:56 fetching corpus: 1050, signal 126665/146661 (executing program)
2022/09/16 13:02:57 fetching corpus: 1100, signal 129437/149842 (executing program)
2022/09/16 13:02:57 fetching corpus: 1150, signal 131610/152481 (executing program)
2022/09/16 13:02:57 fetching corpus: 1200, signal 136211/156998 (executing program)
2022/09/16 13:02:57 fetching corpus: 1250, signal 139431/160331 (executing program)
2022/09/16 13:02:57 fetching corpus: 1300, signal 140448/161921 (executing program)
2022/09/16 13:02:57 fetching corpus: 1350, signal 142191/164086 (executing program)
2022/09/16 13:02:58 fetching corpus: 1400, signal 143932/166201 (executing program)
2022/09/16 13:02:58 fetching corpus: 1450, signal 145339/168031 (executing program)
2022/09/16 13:02:58 fetching corpus: 1500, signal 146688/169803 (executing program)
2022/09/16 13:02:58 fetching corpus: 1550, signal 148260/171678 (executing program)
2022/09/16 13:02:58 fetching corpus: 1600, signal 150176/173831 (executing program)
2022/09/16 13:02:58 fetching corpus: 1650, signal 153308/176701 (executing program)
2022/09/16 13:02:58 fetching corpus: 1700, signal 155471/178884 (executing program)
2022/09/16 13:02:58 fetching corpus: 1750, signal 157040/180592 (executing program)
2022/09/16 13:02:59 fetching corpus: 1800, signal 157969/181928 (executing program)
2022/09/16 13:02:59 fetching corpus: 1850, signal 159877/183836 (executing program)
2022/09/16 13:02:59 fetching corpus: 1900, signal 161634/185624 (executing program)
2022/09/16 13:02:59 fetching corpus: 1950, signal 163332/187343 (executing program)
2022/09/16 13:02:59 fetching corpus: 2000, signal 164049/188405 (executing program)
2022/09/16 13:02:59 fetching corpus: 2050, signal 165341/189795 (executing program)
2022/09/16 13:03:00 fetching corpus: 2100, signal 167262/191576 (executing program)
2022/09/16 13:03:00 fetching corpus: 2150, signal 167984/192590 (executing program)
2022/09/16 13:03:00 fetching corpus: 2200, signal 169244/193953 (executing program)
2022/09/16 13:03:00 fetching corpus: 2250, signal 170256/195167 (executing program)
2022/09/16 13:03:00 fetching corpus: 2300, signal 171254/196296 (executing program)
2022/09/16 13:03:00 fetching corpus: 2350, signal 172312/197463 (executing program)
2022/09/16 13:03:00 fetching corpus: 2400, signal 174094/198963 (executing program)
2022/09/16 13:03:00 fetching corpus: 2450, signal 175401/200192 (executing program)
2022/09/16 13:03:01 fetching corpus: 2500, signal 176364/201279 (executing program)
2022/09/16 13:03:01 fetching corpus: 2550, signal 176861/202075 (executing program)
2022/09/16 13:03:01 fetching corpus: 2600, signal 178286/203383 (executing program)
2022/09/16 13:03:01 fetching corpus: 2650, signal 179283/204366 (executing program)
2022/09/16 13:03:01 fetching corpus: 2700, signal 180829/205635 (executing program)
2022/09/16 13:03:01 fetching corpus: 2750, signal 181769/206644 (executing program)
2022/09/16 13:03:01 fetching corpus: 2800, signal 182938/207710 (executing program)
2022/09/16 13:03:02 fetching corpus: 2850, signal 184178/208804 (executing program)
2022/09/16 13:03:02 fetching corpus: 2900, signal 185104/209689 (executing program)
2022/09/16 13:03:02 fetching corpus: 2950, signal 185906/210473 (executing program)
2022/09/16 13:03:02 fetching corpus: 3000, signal 186679/211215 (executing program)
2022/09/16 13:03:02 fetching corpus: 3050, signal 187662/212048 (executing program)
2022/09/16 13:03:02 fetching corpus: 3100, signal 188587/212868 (executing program)
2022/09/16 13:03:02 fetching corpus: 3150, signal 189390/213557 (executing program)
2022/09/16 13:03:03 fetching corpus: 3200, signal 191213/214754 (executing program)
2022/09/16 13:03:03 fetching corpus: 3250, signal 192028/215536 (executing program)
2022/09/16 13:03:03 fetching corpus: 3300, signal 193171/216368 (executing program)
2022/09/16 13:03:03 fetching corpus: 3350, signal 194210/217141 (executing program)
2022/09/16 13:03:03 fetching corpus: 3400, signal 195069/217841 (executing program)
2022/09/16 13:03:03 fetching corpus: 3450, signal 196007/218535 (executing program)
2022/09/16 13:03:03 fetching corpus: 3500, signal 196688/219097 (executing program)
2022/09/16 13:03:04 fetching corpus: 3550, signal 197554/219738 (executing program)
2022/09/16 13:03:04 fetching corpus: 3600, signal 198458/220360 (executing program)
2022/09/16 13:03:04 fetching corpus: 3650, signal 199158/220921 (executing program)
2022/09/16 13:03:04 fetching corpus: 3700, signal 200094/221596 (executing program)
2022/09/16 13:03:04 fetching corpus: 3750, signal 200756/222111 (executing program)
2022/09/16 13:03:04 fetching corpus: 3800, signal 202041/222827 (executing program)
2022/09/16 13:03:04 fetching corpus: 3850, signal 202692/223338 (executing program)
2022/09/16 13:03:05 fetching corpus: 3900, signal 203522/223845 (executing program)
2022/09/16 13:03:05 fetching corpus: 3950, signal 204700/224440 (executing program)
2022/09/16 13:03:05 fetching corpus: 4000, signal 205987/225079 (executing program)
2022/09/16 13:03:05 fetching corpus: 4050, signal 207165/225635 (executing program)
2022/09/16 13:03:05 fetching corpus: 4100, signal 207847/226166 (executing program)
2022/09/16 13:03:05 fetching corpus: 4150, signal 208299/226508 (executing program)
2022/09/16 13:03:05 fetching corpus: 4200, signal 208945/226926 (executing program)
2022/09/16 13:03:06 fetching corpus: 4250, signal 209666/227346 (executing program)
2022/09/16 13:03:06 fetching corpus: 4300, signal 210348/227783 (executing program)
2022/09/16 13:03:06 fetching corpus: 4350, signal 210873/228097 (executing program)
2022/09/16 13:03:06 fetching corpus: 4400, signal 211319/228401 (executing program)
2022/09/16 13:03:06 fetching corpus: 4450, signal 211885/228699 (executing program)
2022/09/16 13:03:06 fetching corpus: 4500, signal 212539/229012 (executing program)
2022/09/16 13:03:06 fetching corpus: 4550, signal 213283/229355 (executing program)
2022/09/16 13:03:06 fetching corpus: 4600, signal 213859/229605 (executing program)
2022/09/16 13:03:07 fetching corpus: 4650, signal 214421/229889 (executing program)
2022/09/16 13:03:07 fetching corpus: 4700, signal 215059/230155 (executing program)
2022/09/16 13:03:07 fetching corpus: 4750, signal 215610/230396 (executing program)
2022/09/16 13:03:07 fetching corpus: 4800, signal 216194/230670 (executing program)
2022/09/16 13:03:07 fetching corpus: 4850, signal 216735/230936 (executing program)
2022/09/16 13:03:07 fetching corpus: 4900, signal 217259/231166 (executing program)
2022/09/16 13:03:07 fetching corpus: 4950, signal 217942/231401 (executing program)
2022/09/16 13:03:07 fetching corpus: 5000, signal 219002/231757 (executing program)
2022/09/16 13:03:08 fetching corpus: 5050, signal 219416/231946 (executing program)
2022/09/16 13:03:08 fetching corpus: 5100, signal 220272/232225 (executing program)
2022/09/16 13:03:08 fetching corpus: 5150, signal 220850/232404 (executing program)
2022/09/16 13:03:08 fetching corpus: 5200, signal 221413/232564 (executing program)
2022/09/16 13:03:08 fetching corpus: 5250, signal 222261/232797 (executing program)
2022/09/16 13:03:08 fetching corpus: 5300, signal 222932/233057 (executing program)
2022/09/16 13:03:08 fetching corpus: 5350, signal 223559/233189 (executing program)
2022/09/16 13:03:08 fetching corpus: 5400, signal 223938/233292 (executing program)
2022/09/16 13:03:09 fetching corpus: 5450, signal 224550/233398 (executing program)
2022/09/16 13:03:09 fetching corpus: 5500, signal 225203/233537 (executing program)
2022/09/16 13:03:09 fetching corpus: 5550, signal 225533/233648 (executing program)
2022/09/16 13:03:09 fetching corpus: 5600, signal 226072/233775 (executing program)
2022/09/16 13:03:09 fetching corpus: 5650, signal 227013/233827 (executing program)
2022/09/16 13:03:09 fetching corpus: 5655, signal 227033/233827 (executing program)
2022/09/16 13:03:09 fetching corpus: 5655, signal 227033/233827 (executing program)
2022/09/16 13:03:12 starting 8 fuzzer processes
13:03:12 executing program 0:
prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ff6000/0x1000)=nil)

13:03:12 executing program 1:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4)

13:03:12 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:03:12 executing program 4:
io_setup(0x5, &(0x7f0000001540))

13:03:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0)
setitimer(0x2, 0x0, &(0x7f0000002400))
add_key(&(0x7f0000002440)='ceph\x00', &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)='C', 0x1, 0xfffffffffffffffc)

13:03:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0)

13:03:12 executing program 6:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'trusted:'}, 0xffffffffffffff1d, 0xffffffffffffffff)

[   74.225306] audit: type=1400 audit(1663333392.417:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:03:12 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4)

[   75.551127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.553166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.556961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.558484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.559740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.560784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.562170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.563312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.563793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.568288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.568936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.570975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.574607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.579428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.588885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.594355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.595654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.596759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   75.598294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.599406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   75.600725] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   75.602669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   75.603715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   75.604748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   75.606264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.607272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   75.608390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   75.609442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   75.611185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.612368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   75.614908] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.615979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.617408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   75.618819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   75.619981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   75.621768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.626474] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   75.626943] Bluetooth: hci2: HCI_REQ-0x0c1a
[   75.628889] Bluetooth: hci0: HCI_REQ-0x0c1a
[   75.628908] Bluetooth: hci4: HCI_REQ-0x0c1a
[   75.633658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   75.634961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   75.636061] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   75.637233] Bluetooth: hci1: HCI_REQ-0x0c1a
[   75.641854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.642061] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   75.647755] Bluetooth: hci7: HCI_REQ-0x0c1a
[   75.650340] Bluetooth: hci6: HCI_REQ-0x0c1a
[   75.653184] Bluetooth: hci5: HCI_REQ-0x0c1a
[   77.620668] Bluetooth: hci3: Opcode 0x c03 failed: -110
[   77.685311] Bluetooth: hci7: command 0x0409 tx timeout
[   77.685340] Bluetooth: hci2: command 0x0409 tx timeout
[   77.686202] Bluetooth: hci6: command 0x0409 tx timeout
[   77.686903] Bluetooth: hci5: command 0x0409 tx timeout
[   77.688353] Bluetooth: hci4: command 0x0409 tx timeout
[   77.688983] Bluetooth: hci1: command 0x0409 tx timeout
[   77.689673] Bluetooth: hci0: command 0x0409 tx timeout
[   79.732652] Bluetooth: hci6: command 0x041b tx timeout
[   79.733142] Bluetooth: hci7: command 0x041b tx timeout
[   79.733639] Bluetooth: hci0: command 0x041b tx timeout
[   79.733779] Bluetooth: hci1: command 0x041b tx timeout
[   79.734070] Bluetooth: hci2: command 0x041b tx timeout
[   79.734549] Bluetooth: hci4: command 0x041b tx timeout
[   79.736231] Bluetooth: hci5: command 0x041b tx timeout
[   80.940602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.941855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.942846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.945581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.949659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.951742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.965556] Bluetooth: hci3: HCI_REQ-0x0c1a
[   81.780611] Bluetooth: hci2: command 0x040f tx timeout
[   81.780645] Bluetooth: hci5: command 0x040f tx timeout
[   81.781630] Bluetooth: hci4: command 0x040f tx timeout
[   81.782045] Bluetooth: hci1: command 0x040f tx timeout
[   81.782639] Bluetooth: hci7: command 0x040f tx timeout
[   81.783173] Bluetooth: hci0: command 0x040f tx timeout
[   81.783817] Bluetooth: hci6: command 0x040f tx timeout
[   82.997609] Bluetooth: hci3: command 0x0409 tx timeout
[   83.828604] Bluetooth: hci5: command 0x0419 tx timeout
[   83.828622] Bluetooth: hci6: command 0x0419 tx timeout
[   83.829181] Bluetooth: hci2: command 0x0419 tx timeout
[   83.831300] Bluetooth: hci0: command 0x0419 tx timeout
[   83.831764] Bluetooth: hci7: command 0x0419 tx timeout
[   83.832175] Bluetooth: hci1: command 0x0419 tx timeout
[   83.834673] Bluetooth: hci4: command 0x0419 tx timeout
[   85.044702] Bluetooth: hci3: command 0x041b tx timeout
[   87.092582] Bluetooth: hci3: command 0x040f tx timeout
[   89.140694] Bluetooth: hci3: command 0x0419 tx timeout
13:04:06 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:06 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:06 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:06 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:06 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:07 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

13:04:07 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000000000000}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x7)
close(r0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
clock_gettime(0x0, &(0x7f0000000040))

13:04:07 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
nanosleep(&(0x7f00000002c0), 0x0)

[  129.101344] audit: type=1400 audit(1663333447.293:7): avc:  denied  { open } for  pid=3786 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  129.103374] audit: type=1400 audit(1663333447.293:8): avc:  denied  { kernel } for  pid=3786 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  129.111248] ------------[ cut here ]------------
[  129.111271] 
[  129.111275] ======================================================
[  129.111278] WARNING: possible circular locking dependency detected
[  129.111283] 6.0.0-rc5-next-20220916 #1 Not tainted
[  129.111289] ------------------------------------------------------
[  129.111292] syz-executor.2/3787 is trying to acquire lock:
[  129.111298] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  129.111335] 
[  129.111335] but task is already holding lock:
[  129.111338] ffff88800d4f5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  129.111365] 
[  129.111365] which lock already depends on the new lock.
[  129.111365] 
[  129.111369] 
[  129.111369] the existing dependency chain (in reverse order) is:
[  129.111372] 
[  129.111372] -> #3 (&ctx->lock){....}-{2:2}:
[  129.111386]        _raw_spin_lock+0x2a/0x40
[  129.111403]        __perf_event_task_sched_out+0x53b/0x18d0
[  129.111415]        __schedule+0xedd/0x2470
[  129.111426]        schedule+0xda/0x1b0
[  129.111436]        exit_to_user_mode_prepare+0x114/0x1a0
[  129.111456]        syscall_exit_to_user_mode+0x19/0x40
[  129.111473]        do_syscall_64+0x48/0x90
[  129.111487]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  129.111507] 
[  129.111507] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  129.111521]        _raw_spin_lock_nested+0x30/0x40
[  129.111536]        raw_spin_rq_lock_nested+0x1e/0x30
[  129.111549]        task_fork_fair+0x63/0x4d0
[  129.111566]        sched_cgroup_fork+0x3d0/0x540
[  129.111579]        copy_process+0x4183/0x6e20
[  129.111590]        kernel_clone+0xe7/0x890
[  129.111600]        user_mode_thread+0xad/0xf0
[  129.111610]        rest_init+0x24/0x250
[  129.111626]        arch_call_rest_init+0xf/0x14
[  129.111638]        start_kernel+0x4c1/0x4e6
[  129.111648]        secondary_startup_64_no_verify+0xe0/0xeb
[  129.111662] 
[  129.111662] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  129.111676]        _raw_spin_lock_irqsave+0x39/0x60
[  129.111691]        try_to_wake_up+0xab/0x1920
[  129.111703]        up+0x75/0xb0
[  129.111714]        __up_console_sem+0x6e/0x80
[  129.111730]        console_unlock+0x46a/0x590
[  129.111745]        vt_ioctl+0x2822/0x2ca0
[  129.111759]        tty_ioctl+0x7c4/0x1700
[  129.111770]        __x64_sys_ioctl+0x19a/0x210
[  129.111786]        do_syscall_64+0x3b/0x90
[  129.111799]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  129.111816] 
[  129.111816] -> #0 ((console_sem).lock){....}-{2:2}:
[  129.111829]        __lock_acquire+0x2a02/0x5e70
[  129.111845]        lock_acquire+0x1a2/0x530
[  129.111860]        _raw_spin_lock_irqsave+0x39/0x60
[  129.111875]        down_trylock+0xe/0x70
[  129.111887]        __down_trylock_console_sem+0x3b/0xd0
[  129.111903]        vprintk_emit+0x16b/0x560
[  129.111919]        vprintk+0x84/0xa0
[  129.111934]        _printk+0xba/0xf1
[  129.111952]        report_bug.cold+0x72/0xab
[  129.111965]        handle_bug+0x3c/0x70
[  129.111977]        exc_invalid_op+0x14/0x50
[  129.111990]        asm_exc_invalid_op+0x16/0x20
[  129.112009]        group_sched_out.part.0+0x2c7/0x460
[  129.112021]        ctx_sched_out+0x8f1/0xc10
[  129.112031]        __perf_event_task_sched_out+0x6d0/0x18d0
[  129.112044]        __schedule+0xedd/0x2470
[  129.112054]        schedule+0xda/0x1b0
[  129.112063]        exit_to_user_mode_prepare+0x114/0x1a0
[  129.112082]        syscall_exit_to_user_mode+0x19/0x40
[  129.112098]        do_syscall_64+0x48/0x90
[  129.112111]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  129.112128] 
[  129.112128] other info that might help us debug this:
[  129.112128] 
[  129.112131] Chain exists of:
[  129.112131]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  129.112131] 
[  129.112146]  Possible unsafe locking scenario:
[  129.112146] 
[  129.112148]        CPU0                    CPU1
[  129.112151]        ----                    ----
[  129.112153]   lock(&ctx->lock);
[  129.112158]                                lock(&rq->__lock);
[  129.112165]                                lock(&ctx->lock);
[  129.112171]   lock((console_sem).lock);
[  129.112177] 
[  129.112177]  *** DEADLOCK ***
[  129.112177] 
[  129.112179] 2 locks held by syz-executor.2/3787:
[  129.112186]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  129.112211]  #1: ffff88800d4f5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  129.112239] 
[  129.112239] stack backtrace:
[  129.112242] CPU: 0 PID: 3787 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1
[  129.112254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  129.112262] Call Trace:
[  129.112266]  <TASK>
[  129.112271]  dump_stack_lvl+0x8b/0xb3
[  129.112286]  check_noncircular+0x263/0x2e0
[  129.112302]  ? format_decode+0x26c/0xb50
[  129.112317]  ? print_circular_bug+0x450/0x450
[  129.112334]  ? enable_ptr_key_workfn+0x20/0x20
[  129.112349]  ? perf_trace_lock+0x308/0x560
[  129.112363]  ? format_decode+0x26c/0xb50
[  129.112379]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  129.112397]  __lock_acquire+0x2a02/0x5e70
[  129.112420]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  129.112444]  lock_acquire+0x1a2/0x530
[  129.112460]  ? down_trylock+0xe/0x70
[  129.112475]  ? rcu_read_unlock+0x40/0x40
[  129.112497]  ? vprintk+0x84/0xa0
[  129.112515]  _raw_spin_lock_irqsave+0x39/0x60
[  129.112531]  ? down_trylock+0xe/0x70
[  129.112544]  down_trylock+0xe/0x70
[  129.112557]  ? vprintk+0x84/0xa0
[  129.112574]  __down_trylock_console_sem+0x3b/0xd0
[  129.112591]  vprintk_emit+0x16b/0x560
[  129.112610]  vprintk+0x84/0xa0
[  129.112627]  _printk+0xba/0xf1
[  129.112645]  ? record_print_text.cold+0x16/0x16
[  129.112668]  ? report_bug.cold+0x66/0xab
[  129.112683]  ? group_sched_out.part.0+0x2c7/0x460
[  129.112694]  report_bug.cold+0x72/0xab
[  129.112710]  handle_bug+0x3c/0x70
[  129.112724]  exc_invalid_op+0x14/0x50
[  129.112739]  asm_exc_invalid_op+0x16/0x20
[  129.112756] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  129.112769] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  129.112780] RSP: 0018:ffff888041957c48 EFLAGS: 00010006
[  129.112789] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  129.112797] RDX: ffff88801f2d5040 RSI: ffffffff81566027 RDI: 0000000000000005
[  129.112805] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  129.112812] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800d4f5400
[  129.112820] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  129.112832]  ? group_sched_out.part.0+0x2c7/0x460
[  129.112846]  ? group_sched_out.part.0+0x2c7/0x460
[  129.112859]  ctx_sched_out+0x8f1/0xc10
[  129.112872]  __perf_event_task_sched_out+0x6d0/0x18d0
[  129.112889]  ? lock_is_held_type+0xd7/0x130
[  129.112908]  ? __perf_cgroup_move+0x160/0x160
[  129.112919]  ? set_next_entity+0x304/0x550
[  129.112937]  ? update_curr+0x267/0x740
[  129.112955]  ? lock_is_held_type+0xd7/0x130
[  129.112974]  __schedule+0xedd/0x2470
[  129.112989]  ? io_schedule_timeout+0x150/0x150
[  129.113002]  ? __x64_sys_futex_time32+0x480/0x480
[  129.113017]  schedule+0xda/0x1b0
[  129.113029]  exit_to_user_mode_prepare+0x114/0x1a0
[  129.113049]  syscall_exit_to_user_mode+0x19/0x40
[  129.113067]  do_syscall_64+0x48/0x90
[  129.113081]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  129.113099] RIP: 0033:0x7f9f51866b19
[  129.113107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  129.113118] RSP: 002b:00007f9f4eddc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  129.113129] RAX: 0000000000000001 RBX: 00007f9f51979f68 RCX: 00007f9f51866b19
[  129.113137] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f51979f6c
[  129.113144] RBP: 00007f9f51979f60 R08: 000000000000000e R09: 0000000000000000
[  129.113151] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9f51979f6c
[  129.113158] R13: 00007ffe99aeefef R14: 00007f9f4eddc300 R15: 0000000000022000
[  129.113173]  </TASK>
[  129.168079] WARNING: CPU: 0 PID: 3787 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  129.168772] Modules linked in:
[  129.169017] CPU: 0 PID: 3787 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1
[  129.169626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  129.170453] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  129.170868] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  129.172233] RSP: 0018:ffff888041957c48 EFLAGS: 00010006
[  129.172629] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  129.173153] RDX: ffff88801f2d5040 RSI: ffffffff81566027 RDI: 0000000000000005
[  129.173686] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  129.174210] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800d4f5400
[  129.174746] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  129.175299] FS:  00007f9f4eddc700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  129.175904] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.176337] CR2: 00007fcf698b1028 CR3: 0000000040956000 CR4: 0000000000350ef0
[  129.176877] Call Trace:
[  129.177081]  <TASK>
[  129.177254]  ctx_sched_out+0x8f1/0xc10
[  129.177551]  __perf_event_task_sched_out+0x6d0/0x18d0
[  129.177942]  ? lock_is_held_type+0xd7/0x130
[  129.178283]  ? __perf_cgroup_move+0x160/0x160
[  129.178622]  ? set_next_entity+0x304/0x550
[  129.178955]  ? update_curr+0x267/0x740
[  129.179259]  ? lock_is_held_type+0xd7/0x130
[  129.179588]  __schedule+0xedd/0x2470
[  129.179875]  ? io_schedule_timeout+0x150/0x150
[  129.180222]  ? __x64_sys_futex_time32+0x480/0x480
[  129.180586]  schedule+0xda/0x1b0
[  129.180849]  exit_to_user_mode_prepare+0x114/0x1a0
[  129.181231]  syscall_exit_to_user_mode+0x19/0x40
[  129.181591]  do_syscall_64+0x48/0x90
[  129.181885]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  129.182278] RIP: 0033:0x7f9f51866b19
[  129.182565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  129.183933] RSP: 002b:00007f9f4eddc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  129.184499] RAX: 0000000000000001 RBX: 00007f9f51979f68 RCX: 00007f9f51866b19
[  129.185030] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f51979f6c
[  129.185568] RBP: 00007f9f51979f60 R08: 000000000000000e R09: 0000000000000000
[  129.186098] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9f51979f6c
[  129.186624] R13: 00007ffe99aeefef R14: 00007f9f4eddc300 R15: 0000000000022000
[  129.187167]  </TASK>
[  129.187345] irq event stamp: 972
[  129.187597] hardirqs last  enabled at (971): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  129.188296] hardirqs last disabled at (972): [<ffffffff8424c965>] __schedule+0x1225/0x2470
[  129.188900] softirqs last  enabled at (708): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  129.189545] softirqs last disabled at (673): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  129.190180] ---[ end trace 0000000000000000 ]---
[  131.272906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.275630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.276399] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  131.782018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.782852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:04:10 executing program 0:
prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ff6000/0x1000)=nil)

13:04:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004b40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x24}}, 0x0)

13:04:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0)
setitimer(0x2, 0x0, &(0x7f0000002400))
add_key(&(0x7f0000002440)='ceph\x00', &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)='C', 0x1, 0xfffffffffffffffc)

[  132.649552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.650315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.664475] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
13:04:10 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x1b, &(0x7f0000000000)={0x77359400}, 0x10)

13:04:10 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000180)={@multicast2, @local}, 0xc)

13:04:10 executing program 2:
r0 = getpid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$inet(0x2, 0xa, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0)
r2 = fork()
kcmp(r0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
nanosleep(&(0x7f00000002c0), 0x0)

13:04:10 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

13:04:11 executing program 0:
prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ff6000/0x1000)=nil)

13:04:11 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x1b, &(0x7f0000000000)={0x77359400}, 0x10)

13:04:11 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00')
pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x1)

13:04:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
nanosleep(&(0x7f00000002c0), 0x0)

13:04:11 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
setresuid(0xee00, 0x0, 0x0)

13:04:11 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000180)={@multicast2, @local}, 0xc)

13:04:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0)
setitimer(0x2, 0x0, &(0x7f0000002400))
add_key(&(0x7f0000002440)='ceph\x00', &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)='C', 0x1, 0xfffffffffffffffc)

13:04:11 executing program 2:
r0 = getpid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$inet(0x2, 0xa, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0)
r2 = fork()
kcmp(r0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:11 executing program 0:
prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ff6000/0x1000)=nil)

13:04:11 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000180)={@multicast2, @local}, 0xc)

13:04:11 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
setresuid(0xee00, 0x0, 0x0)

[  133.245866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.247234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:04:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
nanosleep(&(0x7f00000002c0), 0x0)

13:04:11 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x1b, &(0x7f0000000000)={0x77359400}, 0x10)

13:04:11 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}], 0x20}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:11 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000180)={@multicast2, @local}, 0xc)

13:04:11 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
setresuid(0xee00, 0x0, 0x0)

13:04:11 executing program 2:
r0 = getpid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$inet(0x2, 0xa, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0)
r2 = fork()
kcmp(r0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:11 executing program 2:
r0 = getpid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$inet(0x2, 0xa, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0)
r2 = fork()
kcmp(r0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:11 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x1b, &(0x7f0000000000)={0x77359400}, 0x10)

13:04:11 executing program 4:
io_pgetevents(0x0, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffd8d})

13:04:11 executing program 6:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

13:04:11 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}], 0x20}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:11 executing program 7:
setresuid(0xee01, 0xee00, 0x0)
setresuid(0xee00, 0x0, 0x0)

13:04:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0)
setitimer(0x2, 0x0, &(0x7f0000002400))
add_key(&(0x7f0000002440)='ceph\x00', &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)='C', 0x1, 0xfffffffffffffffc)

13:04:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"])
pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff)
pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

13:04:12 executing program 7:
request_key(&(0x7f00000014c0)='user\x00', &(0x7f0000001500)={'syz', 0x0}, &(0x7f0000001540)='\\]]@*:-\x00', 0x0)

[  133.840353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.841254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:04:12 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}], 0x20}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:12 executing program 4:
io_pgetevents(0x0, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffd8d})

13:04:12 executing program 6:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

13:04:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"])
pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff)
pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

13:04:12 executing program 1:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

13:04:12 executing program 7:
request_key(&(0x7f00000014c0)='user\x00', &(0x7f0000001500)={'syz', 0x0}, &(0x7f0000001540)='\\]]@*:-\x00', 0x0)

13:04:12 executing program 6:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

13:04:12 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002100)="e2", 0x1}], 0x1, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}], 0x20}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:12 executing program 4:
io_pgetevents(0x0, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffd8d})

13:04:12 executing program 2:
kexec_load(0x0, 0x0, 0x0, 0xf29b7b0788b5aca1)

13:04:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:12 executing program 6:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

[  134.449109] loop3: detected capacity change from 0 to 264192
13:04:12 executing program 2:
syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[{&(0x7f0000000880)='~', 0x1}, {&(0x7f0000000940)='R', 0x1, 0x97ff5e1}, {&(0x7f0000000980)="b9", 0x1}], 0x0, 0x0)

13:04:12 executing program 7:
request_key(&(0x7f00000014c0)='user\x00', &(0x7f0000001500)={'syz', 0x0}, &(0x7f0000001540)='\\]]@*:-\x00', 0x0)

13:04:12 executing program 1:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

13:04:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"])
pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff)
pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

13:04:12 executing program 4:
io_pgetevents(0x0, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffd8d})

[  134.509365] loop2: detected capacity change from 0 to 94197
13:04:12 executing program 5:
personality(0x400000d)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0)

[  134.541757] loop2: detected capacity change from 0 to 94197
13:04:12 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0)

13:04:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"])
pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff)
pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

[  134.591497] loop6: detected capacity change from 0 to 264192
13:04:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:12 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1})
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1})
ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
syz_open_procfs(0x0, 0x0)

13:04:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

13:04:12 executing program 7:
request_key(&(0x7f00000014c0)='user\x00', &(0x7f0000001500)={'syz', 0x0}, &(0x7f0000001540)='\\]]@*:-\x00', 0x0)

[  134.685373] loop3: detected capacity change from 0 to 264192
[  134.687564] loop6: detected capacity change from 0 to 264192
13:04:12 executing program 1:
getcwd(&(0x7f0000000000)=""/231, 0xe7)
getcwd(&(0x7f0000000100)=""/230, 0xe6)
getcwd(&(0x7f0000000200)=""/151, 0x97)
getcwd(&(0x7f00000002c0)=""/218, 0xda)
getcwd(&(0x7f00000003c0)=""/211, 0xd3)
getcwd(&(0x7f00000004c0)=""/4096, 0x1000)
getcwd(&(0x7f00000014c0)=""/48, 0x30)
getcwd(&(0x7f0000001540)=""/227, 0xe3)
getcwd(&(0x7f0000001640)=""/25, 0x19)
getcwd(&(0x7f0000001680)=""/222, 0xde)
getcwd(&(0x7f0000001780)=""/206, 0xce)
getcwd(&(0x7f0000001880)=""/85, 0x55)
getcwd(&(0x7f0000001900)=""/184, 0xb8)
getcwd(&(0x7f00000019c0)=""/164, 0xa4)
getcwd(&(0x7f0000001a80)=""/94, 0x5e)
getcwd(&(0x7f0000001b00)=""/188, 0xbc)
getcwd(&(0x7f0000001bc0)=""/157, 0x9d)
getcwd(&(0x7f0000001c80)=""/225, 0xe1)
getcwd(&(0x7f0000001d80), 0x0)

[  134.836226] loop6: detected capacity change from 0 to 264192
13:04:13 executing program 0:
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}})
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
socketpair(0x0, 0x0, 0x0, 0x0)

13:04:13 executing program 4:
r0 = timerfd_create(0x9, 0x0)
close(r0)

13:04:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

13:04:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:13 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1})
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1})
ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
syz_open_procfs(0x0, 0x0)

13:04:13 executing program 7:
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x47)

[  134.841773] loop3: detected capacity change from 0 to 264192
13:04:13 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0)

[  135.016007] loop3: detected capacity change from 0 to 264192
13:04:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300))

13:04:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x300, 0x0, 0x0)

13:04:13 executing program 7:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

13:04:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:13 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
getresuid(&(0x7f0000001800), 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002400)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
getgid()
syz_mount_image$tmpfs(&(0x7f0000004800), &(0x7f0000004840)='./file0\x00', 0x0, 0x3, &(0x7f0000005ac0)=[{&(0x7f0000004880)="735355607921f3555fa3045345b2bbb1556a1b1060cbc0fc8ffe55a4357d587f925b74ca007cb99c364c3d52faef54bfc42a4e0e16e70b09f739daa301e82b70503a114ca6521736f7ac4e80149a51bf92236960820ef330660945d8ba6417724e33ee1b2d5674a4", 0x68, 0xf149}, {0x0}, {0x0}], 0x2, &(0x7f0000005b80)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x36]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x6b, 0x0, 0x0]}}, {@huge_advise}], [{@smackfsdef={'smackfsdef', 0x3d, 'blkio.bfq.sectors_recursive\x00'}}, {@measure}, {@obj_user={'obj_user', 0x3d, 'blkio.bfq.sectors_recursive\x00'}}]})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005c80)='cpuset.effective_cpus\x00', 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000007ac0))
syz_mount_image$msdos(&(0x7f0000007b00), &(0x7f0000007b40)='./file0/file0\x00', 0x80, 0x1, &(0x7f0000007c80)=[{&(0x7f0000007b80)="ba", 0x1, 0x1f}], 0x216001, &(0x7f0000007cc0)={[{@fat=@codepage={'codepage', 0x3d, '950'}}, {@nodots}], [{@seclabel}, {@obj_type}, {@subj_role={'subj_role', 0x3d, 'blkio.bfq.sectors_recursive\x00'}}]})

13:04:13 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1})
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1})
ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
syz_open_procfs(0x0, 0x0)

[  135.037360] loop1: detected capacity change from 0 to 241
[  135.038360] tmpfs: Bad value for 'uid'
[  135.059385] loop1: detected capacity change from 0 to 241
[  135.060559] tmpfs: Bad value for 'uid'
13:04:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x158)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

[  135.068523] hrtimer: interrupt took 19437 ns
13:04:13 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@flowinfo={{0x14, 0x29, 0xb, 0x450}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x30}}], 0x2, 0x0)

13:04:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000040))

13:04:13 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000300000020"], 0x24, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2)

13:04:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x2, 0x0, 0x0, @binary="d8c931"}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0)

13:04:13 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)

13:04:13 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1})
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1})
ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
syz_open_procfs(0x0, 0x0)

13:04:13 executing program 3:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

13:04:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:13 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@flowinfo={{0x14, 0x29, 0xb, 0x450}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x30}}], 0x2, 0x0)

13:04:13 executing program 5:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000040))

13:04:13 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)

13:04:13 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000300000020"], 0x24, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2)

13:04:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:13 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@flowinfo={{0x14, 0x29, 0xb, 0x450}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x30}}], 0x2, 0x0)

13:04:13 executing program 7:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:13 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@flowinfo={{0x14, 0x29, 0xb, 0x450}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x30}}], 0x2, 0x0)

13:04:13 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)

13:04:13 executing program 2:
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000014c0)='user\x00', &(0x7f0000001500)={'syz', 0x0}, 0x0, 0x0)

13:04:13 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000040))

13:04:13 executing program 5:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:13 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000300000020"], 0x24, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2)

13:04:13 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)

13:04:13 executing program 2:
timer_create(0xa, 0x0, 0x0)

13:04:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:14 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000040))

13:04:14 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)

13:04:14 executing program 5:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:14 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(r0, r0)
setreuid(0x0, 0x0)

13:04:14 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000300000020"], 0x24, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2)

13:04:14 executing program 2:
timer_create(0xa, 0x0, 0x0)

13:04:14 executing program 7:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

13:04:14 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:14 executing program 6:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)

13:04:14 executing program 2:
timer_create(0xa, 0x0, 0x0)

13:04:14 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:14 executing program 6:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)

13:04:14 executing program 2:
timer_create(0xa, 0x0, 0x0)

13:04:14 executing program 3:
syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20200000}}, 0x20, 0x0, 0x0)

13:04:14 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd)
keyctl$chown(0x4, r0, 0xee00, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}, 0x21, r0, '\x00', @c})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa0600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10a46, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000))
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340))

13:04:14 executing program 1:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:14 executing program 6:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)

13:04:14 executing program 7:
r0 = socket$inet6(0xa, 0x801, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket(0x23, 0x5, 0x401)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
shmdt(0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
sendto$unix(r3, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r6=>r1, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})

[  136.545173] audit: type=1400 audit(1663333454.726:9): avc:  denied  { write } for  pid=4258 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:04:15 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

13:04:15 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:04:15 executing program 3:
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)

13:04:15 executing program 1:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:15 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f0000000240)=@md5={0x1, "98289e38134fe8f4e7e8268356ebf6a7"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup(r2)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000b3040454041297a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000079"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="681100001c00010029bd7000fcdbdf2533"], 0x1168}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'})
pipe2(&(0x7f0000000340), 0x80000)
fcntl$setown(r0, 0x8, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

13:04:15 executing program 6:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)

13:04:15 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd)
keyctl$chown(0x4, r0, 0xee00, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}, 0x21, r0, '\x00', @c})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa0600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10a46, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000))
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340))

13:04:15 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

13:04:15 executing program 3:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

[  136.898310] loop5: detected capacity change from 0 to 40
[  136.947936] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.5'.
13:04:15 executing program 1:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:15 executing program 6:
timerfd_create(0x0, 0x2)

13:04:15 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
flock(r0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup2(r1, r0)

13:04:15 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x7})

13:04:15 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

[  137.595324] syz-executor.5: attempt to access beyond end of device
[  137.595324] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  137.599914] Buffer I/O error on dev loop5, logical block 10, lost async page write
13:04:15 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd)
keyctl$chown(0x4, r0, 0xee00, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}, 0x21, r0, '\x00', @c})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa0600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10a46, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000))
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340))

13:04:15 executing program 6:
timerfd_create(0x0, 0x2)

13:04:15 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb8, 0x1109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2e9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil)

13:04:15 executing program 1:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13:04:15 executing program 7:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

13:04:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

[  137.654068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.655276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
13:04:15 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f0000000240)=@md5={0x1, "98289e38134fe8f4e7e8268356ebf6a7"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup(r2)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000b3040454041297a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000079"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="681100001c00010029bd7000fcdbdf2533"], 0x1168}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'})
pipe2(&(0x7f0000000340), 0x80000)
fcntl$setown(r0, 0x8, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

13:04:15 executing program 3:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

[  137.742685] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.5'.
13:04:15 executing program 6:
timerfd_create(0x0, 0x2)

13:04:15 executing program 7:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

13:04:16 executing program 1:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

13:04:16 executing program 3:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

13:04:16 executing program 6:
timerfd_create(0x0, 0x2)

[  138.157809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.158879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.597784] syz-executor.5 (4326) used greatest stack depth: 24656 bytes left
13:04:16 executing program 1:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

13:04:16 executing program 7:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

13:04:16 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd)
keyctl$chown(0x4, r0, 0xee00, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}, 0x21, r0, '\x00', @c})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000c40)=ANY=[], 0x820)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x8, 0x5, 0x40, 0x0, 0x2000000000000, 0xa0600, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10a46, 0xe4, 0x7, 0x0, 0x7, 0xffff, 0x1, 0x0, 0x9, 0x0, 0x169}, r2, 0x3, 0xffffffffffffffff, 0xf)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000))
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340))

13:04:16 executing program 6:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

13:04:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:04:16 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f0000000240)=@md5={0x1, "98289e38134fe8f4e7e8268356ebf6a7"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup(r2)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000b3040454041297a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000079"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="681100001c00010029bd7000fcdbdf2533"], 0x1168}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'})
pipe2(&(0x7f0000000340), 0x80000)
fcntl$setown(r0, 0x8, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

13:04:16 executing program 3:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

13:04:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f0000000240)=@md5={0x1, "98289e38134fe8f4e7e8268356ebf6a7"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup(r2)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000b3040454041297a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000079"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="681100001c00010029bd7000fcdbdf2533"], 0x1168}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'})
pipe2(&(0x7f0000000340), 0x80000)
fcntl$setown(r0, 0x8, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[  138.684042] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.0'.
[  138.723381] loop5: detected capacity change from 0 to 40
13:04:16 executing program 7:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

[  138.768885] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.5'.
13:04:16 executing program 6:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

13:04:17 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$security_ima(0x0, &(0x7f0000000180), &(0x7f0000000240)=@md5={0x1, "98289e38134fe8f4e7e8268356ebf6a7"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup(r2)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000b3040454041297a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000079"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="681100001c00010029bd7000fcdbdf2533"], 0x1168}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'})
pipe2(&(0x7f0000000340), 0x80000)
fcntl$setown(r0, 0x8, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

13:04:17 executing program 1:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2285, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x8, 0x217a, 0x0, 0xffffffffffffffff})

[  138.866685] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.3'.
13:04:17 executing program 6:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)

13:04:17 executing program 7:
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
read$eventfd(r1, &(0x7f0000000080), 0x8)
read$eventfd(r1, &(0x7f0000000000), 0x8)
write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8)


VM DIAGNOSIS:
13:04:07  Registers:
info registers vcpu 0
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888041957698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001
R12=0000000000000065 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240
RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9f4eddc700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf698b1028 CR3=0000000040956000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f9f5194d7c0 00007f9f5194d7c8
YMM02=0000000000000000 0000000000000000 00007f9f5194d7e0 00007f9f5194d7c0
YMM03=0000000000000000 0000000000000000 00007f9f5194d7c8 00007f9f5194d7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000080000001 RBX=ffff8880184f7d88 RCX=0000000080000001 RDX=ffff88800f305040
RSI=ffffffff8169a557 RDI=0000000000000007 RBP=ffffea000011f540 RSP=ffff8880184f7b60
R8 =0000000000000007 R9 =0000000000002000 R10=0000000000000000 R11=0000000000000001
R12=80000000047d5025 R13=ffff88801dbc5c30 R14=0000000000000000 R15=ffffea000011f540
RIP=ffffffff8146174d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3c22d4e894 CR3=0000000040b9a000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d
YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000