
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:10452' (ECDSA) to the list of known hosts.
2022/09/20 13:06:06 fuzzer started
2022/09/20 13:06:06 dialing manager at localhost:34957
syzkaller login: [   35.945627] cgroup: Unknown subsys name 'net'
[   36.047194] cgroup: Unknown subsys name 'rlimit'
2022/09/20 13:06:19 syscalls: 2215
2022/09/20 13:06:19 code coverage: enabled
2022/09/20 13:06:19 comparison tracing: enabled
2022/09/20 13:06:19 extra coverage: enabled
2022/09/20 13:06:19 setuid sandbox: enabled
2022/09/20 13:06:19 namespace sandbox: enabled
2022/09/20 13:06:19 Android sandbox: enabled
2022/09/20 13:06:19 fault injection: enabled
2022/09/20 13:06:19 leak checking: enabled
2022/09/20 13:06:19 net packet injection: enabled
2022/09/20 13:06:19 net device setup: enabled
2022/09/20 13:06:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/20 13:06:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/20 13:06:19 USB emulation: enabled
2022/09/20 13:06:19 hci packet injection: enabled
2022/09/20 13:06:19 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220920                                          )
2022/09/20 13:06:19 802.15.4 emulation: enabled
2022/09/20 13:06:19 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/20 13:06:19 fetching corpus: 50, signal 34778/38148 (executing program)
2022/09/20 13:06:19 fetching corpus: 100, signal 41588/46445 (executing program)
2022/09/20 13:06:19 fetching corpus: 150, signal 53186/59250 (executing program)
2022/09/20 13:06:20 fetching corpus: 200, signal 59913/67191 (executing program)
2022/09/20 13:06:20 fetching corpus: 250, signal 66102/74470 (executing program)
2022/09/20 13:06:20 fetching corpus: 300, signal 71686/81097 (executing program)
2022/09/20 13:06:20 fetching corpus: 350, signal 76261/86723 (executing program)
2022/09/20 13:06:20 fetching corpus: 400, signal 79864/91357 (executing program)
2022/09/20 13:06:20 fetching corpus: 450, signal 84393/96817 (executing program)
2022/09/20 13:06:20 fetching corpus: 500, signal 88141/101416 (executing program)
2022/09/20 13:06:20 fetching corpus: 550, signal 92773/106737 (executing program)
2022/09/20 13:06:21 fetching corpus: 600, signal 96506/111223 (executing program)
2022/09/20 13:06:21 fetching corpus: 650, signal 100255/115666 (executing program)
2022/09/20 13:06:21 fetching corpus: 700, signal 102212/118428 (executing program)
2022/09/20 13:06:21 fetching corpus: 750, signal 105758/122537 (executing program)
2022/09/20 13:06:21 fetching corpus: 800, signal 107799/125359 (executing program)
2022/09/20 13:06:21 fetching corpus: 850, signal 110884/128956 (executing program)
2022/09/20 13:06:21 fetching corpus: 900, signal 113573/132183 (executing program)
2022/09/20 13:06:22 fetching corpus: 950, signal 115792/134971 (executing program)
2022/09/20 13:06:22 fetching corpus: 1000, signal 118931/138538 (executing program)
2022/09/20 13:06:22 fetching corpus: 1050, signal 121145/141211 (executing program)
2022/09/20 13:06:22 fetching corpus: 1100, signal 122434/143151 (executing program)
2022/09/20 13:06:22 fetching corpus: 1150, signal 123784/145139 (executing program)
2022/09/20 13:06:22 fetching corpus: 1200, signal 126665/148224 (executing program)
2022/09/20 13:06:22 fetching corpus: 1250, signal 128631/150601 (executing program)
2022/09/20 13:06:22 fetching corpus: 1300, signal 131026/153302 (executing program)
2022/09/20 13:06:23 fetching corpus: 1350, signal 132611/155297 (executing program)
2022/09/20 13:06:23 fetching corpus: 1400, signal 135052/157908 (executing program)
2022/09/20 13:06:23 fetching corpus: 1450, signal 136815/159963 (executing program)
2022/09/20 13:06:23 fetching corpus: 1500, signal 138392/161881 (executing program)
2022/09/20 13:06:23 fetching corpus: 1550, signal 140436/164101 (executing program)
2022/09/20 13:06:23 fetching corpus: 1600, signal 142285/166113 (executing program)
2022/09/20 13:06:23 fetching corpus: 1650, signal 143628/167742 (executing program)
2022/09/20 13:06:23 fetching corpus: 1700, signal 144755/169198 (executing program)
2022/09/20 13:06:24 fetching corpus: 1750, signal 146321/170953 (executing program)
2022/09/20 13:06:24 fetching corpus: 1800, signal 147615/172477 (executing program)
2022/09/20 13:06:24 fetching corpus: 1850, signal 148988/174022 (executing program)
2022/09/20 13:06:24 fetching corpus: 1900, signal 150410/175619 (executing program)
2022/09/20 13:06:24 fetching corpus: 1950, signal 152117/177423 (executing program)
2022/09/20 13:06:24 fetching corpus: 2000, signal 153051/178651 (executing program)
2022/09/20 13:06:24 fetching corpus: 2050, signal 154507/180164 (executing program)
2022/09/20 13:06:25 fetching corpus: 2100, signal 155773/181571 (executing program)
2022/09/20 13:06:25 fetching corpus: 2150, signal 156677/182717 (executing program)
2022/09/20 13:06:25 fetching corpus: 2200, signal 157570/183887 (executing program)
2022/09/20 13:06:25 fetching corpus: 2250, signal 158647/185137 (executing program)
2022/09/20 13:06:25 fetching corpus: 2300, signal 159644/186327 (executing program)
2022/09/20 13:06:25 fetching corpus: 2350, signal 160591/187443 (executing program)
2022/09/20 13:06:25 fetching corpus: 2400, signal 161282/188399 (executing program)
2022/09/20 13:06:25 fetching corpus: 2450, signal 163898/190442 (executing program)
2022/09/20 13:06:26 fetching corpus: 2500, signal 165189/191649 (executing program)
2022/09/20 13:06:26 fetching corpus: 2550, signal 166562/192904 (executing program)
2022/09/20 13:06:26 fetching corpus: 2600, signal 167634/193979 (executing program)
2022/09/20 13:06:26 fetching corpus: 2650, signal 168842/195100 (executing program)
2022/09/20 13:06:26 fetching corpus: 2700, signal 170368/196384 (executing program)
2022/09/20 13:06:26 fetching corpus: 2750, signal 171528/197417 (executing program)
2022/09/20 13:06:27 fetching corpus: 2800, signal 172574/198406 (executing program)
2022/09/20 13:06:27 fetching corpus: 2850, signal 173434/199284 (executing program)
2022/09/20 13:06:27 fetching corpus: 2900, signal 174481/200208 (executing program)
2022/09/20 13:06:27 fetching corpus: 2950, signal 175360/201060 (executing program)
2022/09/20 13:06:27 fetching corpus: 3000, signal 176273/201903 (executing program)
2022/09/20 13:06:27 fetching corpus: 3050, signal 177976/203094 (executing program)
2022/09/20 13:06:27 fetching corpus: 3100, signal 178981/203916 (executing program)
2022/09/20 13:06:28 fetching corpus: 3150, signal 179858/204701 (executing program)
2022/09/20 13:06:28 fetching corpus: 3200, signal 180721/205442 (executing program)
2022/09/20 13:06:28 fetching corpus: 3250, signal 181782/206235 (executing program)
2022/09/20 13:06:28 fetching corpus: 3300, signal 182868/206986 (executing program)
2022/09/20 13:06:28 fetching corpus: 3350, signal 183779/207691 (executing program)
2022/09/20 13:06:28 fetching corpus: 3400, signal 185731/208765 (executing program)
2022/09/20 13:06:28 fetching corpus: 3450, signal 186965/209553 (executing program)
2022/09/20 13:06:29 fetching corpus: 3500, signal 188174/210373 (executing program)
2022/09/20 13:06:29 fetching corpus: 3550, signal 188899/210928 (executing program)
2022/09/20 13:06:29 fetching corpus: 3600, signal 189740/211546 (executing program)
2022/09/20 13:06:29 fetching corpus: 3650, signal 190550/212114 (executing program)
2022/09/20 13:06:29 fetching corpus: 3700, signal 191309/212647 (executing program)
2022/09/20 13:06:29 fetching corpus: 3750, signal 192136/213136 (executing program)
2022/09/20 13:06:29 fetching corpus: 3800, signal 193031/213631 (executing program)
2022/09/20 13:06:29 fetching corpus: 3850, signal 193844/214135 (executing program)
2022/09/20 13:06:30 fetching corpus: 3900, signal 194974/214826 (executing program)
2022/09/20 13:06:30 fetching corpus: 3950, signal 195832/215322 (executing program)
2022/09/20 13:06:30 fetching corpus: 4000, signal 196332/215686 (executing program)
2022/09/20 13:06:30 fetching corpus: 4050, signal 197159/216148 (executing program)
2022/09/20 13:06:30 fetching corpus: 4100, signal 198115/216593 (executing program)
2022/09/20 13:06:30 fetching corpus: 4150, signal 199297/217088 (executing program)
2022/09/20 13:06:30 fetching corpus: 4200, signal 199786/217399 (executing program)
2022/09/20 13:06:30 fetching corpus: 4250, signal 200800/217881 (executing program)
2022/09/20 13:06:31 fetching corpus: 4300, signal 201642/218251 (executing program)
2022/09/20 13:06:31 fetching corpus: 4350, signal 202072/218517 (executing program)
2022/09/20 13:06:31 fetching corpus: 4400, signal 202855/218881 (executing program)
2022/09/20 13:06:31 fetching corpus: 4450, signal 203534/219207 (executing program)
2022/09/20 13:06:31 fetching corpus: 4500, signal 204104/219511 (executing program)
2022/09/20 13:06:31 fetching corpus: 4550, signal 204824/219805 (executing program)
2022/09/20 13:06:31 fetching corpus: 4600, signal 205428/220094 (executing program)
2022/09/20 13:06:31 fetching corpus: 4650, signal 206285/220396 (executing program)
2022/09/20 13:06:31 fetching corpus: 4700, signal 207008/220648 (executing program)
2022/09/20 13:06:32 fetching corpus: 4750, signal 207437/220855 (executing program)
2022/09/20 13:06:32 fetching corpus: 4800, signal 207960/221061 (executing program)
2022/09/20 13:06:32 fetching corpus: 4850, signal 209010/221299 (executing program)
2022/09/20 13:06:32 fetching corpus: 4900, signal 209567/221488 (executing program)
2022/09/20 13:06:32 fetching corpus: 4950, signal 209972/221677 (executing program)
2022/09/20 13:06:32 fetching corpus: 5000, signal 210494/221854 (executing program)
2022/09/20 13:06:32 fetching corpus: 5050, signal 211352/222034 (executing program)
2022/09/20 13:06:32 fetching corpus: 5100, signal 211999/222233 (executing program)
2022/09/20 13:06:33 fetching corpus: 5150, signal 213007/222387 (executing program)
2022/09/20 13:06:33 fetching corpus: 5200, signal 213663/222529 (executing program)
2022/09/20 13:06:33 fetching corpus: 5250, signal 214817/222663 (executing program)
2022/09/20 13:06:33 fetching corpus: 5300, signal 215386/222785 (executing program)
2022/09/20 13:06:33 fetching corpus: 5350, signal 216315/223167 (executing program)
2022/09/20 13:06:33 fetching corpus: 5400, signal 216967/223270 (executing program)
2022/09/20 13:06:33 fetching corpus: 5440, signal 217281/223298 (executing program)
2022/09/20 13:06:33 fetching corpus: 5440, signal 217281/223298 (executing program)
2022/09/20 13:06:36 starting 8 fuzzer processes
13:06:36 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00')
pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x1)

13:06:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:06:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:06:36 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@vsock, 0x80)

13:06:36 executing program 4:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x220c80, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x2, &(0x7f00000000c0))

[   65.288365] audit: type=1400 audit(1663679196.173:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:06:36 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

13:06:36 executing program 7:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000)

13:06:36 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

[   66.584996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.586770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.589028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.590093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.591527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.592618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.596099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.598640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.600605] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.602084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.603347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.604821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.610079] Bluetooth: hci0: HCI_REQ-0x0c1a
[   66.618193] Bluetooth: hci1: HCI_REQ-0x0c1a
[   66.647891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.655265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.657652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.659578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.669047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.670572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.671576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.675282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.678011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.678380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.681362] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.683034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.684942] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.688599] Bluetooth: hci3: HCI_REQ-0x0c1a
[   66.689772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.701242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   66.712193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   66.714223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   66.716222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   66.718721] Bluetooth: hci2: HCI_REQ-0x0c1a
[   66.721814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   66.724785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   66.726596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   66.728384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   66.729801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   66.734025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.735174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.736326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   66.737415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.738540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.742363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   66.749789] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.754782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.755948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.757095] Bluetooth: hci6: HCI_REQ-0x0c1a
[   66.764863] Bluetooth: hci7: HCI_REQ-0x0c1a
[   66.779557] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.783641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   66.787627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.789125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   66.800821] Bluetooth: hci4: HCI_REQ-0x0c1a
[   66.804039] Bluetooth: hci5: HCI_REQ-0x0c1a
[   68.663480] Bluetooth: hci0: command 0x0409 tx timeout
[   68.725946] Bluetooth: hci3: command 0x0409 tx timeout
[   68.727530] Bluetooth: hci2: command 0x0409 tx timeout
[   68.728764] Bluetooth: hci1: command 0x0409 tx timeout
[   68.789979] Bluetooth: hci7: command 0x0409 tx timeout
[   68.854004] Bluetooth: hci6: command 0x0409 tx timeout
[   68.854891] Bluetooth: hci4: command 0x0409 tx timeout
[   68.917916] Bluetooth: hci5: command 0x0409 tx timeout
[   70.710002] Bluetooth: hci0: command 0x041b tx timeout
[   70.774098] Bluetooth: hci1: command 0x041b tx timeout
[   70.774970] Bluetooth: hci2: command 0x041b tx timeout
[   70.775712] Bluetooth: hci3: command 0x041b tx timeout
[   70.837988] Bluetooth: hci7: command 0x041b tx timeout
[   70.901986] Bluetooth: hci4: command 0x041b tx timeout
[   70.902820] Bluetooth: hci6: command 0x041b tx timeout
[   70.966081] Bluetooth: hci5: command 0x041b tx timeout
[   72.757984] Bluetooth: hci0: command 0x040f tx timeout
[   72.821915] Bluetooth: hci3: command 0x040f tx timeout
[   72.822609] Bluetooth: hci2: command 0x040f tx timeout
[   72.823166] Bluetooth: hci1: command 0x040f tx timeout
[   72.885969] Bluetooth: hci7: command 0x040f tx timeout
[   72.950057] Bluetooth: hci6: command 0x040f tx timeout
[   72.950640] Bluetooth: hci4: command 0x040f tx timeout
[   73.014007] Bluetooth: hci5: command 0x040f tx timeout
[   74.805977] Bluetooth: hci0: command 0x0419 tx timeout
[   74.869987] Bluetooth: hci1: command 0x0419 tx timeout
[   74.870458] Bluetooth: hci2: command 0x0419 tx timeout
[   74.871361] Bluetooth: hci3: command 0x0419 tx timeout
[   74.933907] Bluetooth: hci7: command 0x0419 tx timeout
[   74.997951] Bluetooth: hci4: command 0x0419 tx timeout
[   74.998446] Bluetooth: hci6: command 0x0419 tx timeout
[   75.062050] Bluetooth: hci5: command 0x0419 tx timeout
13:07:31 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0xfff, 0x0)

13:07:31 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0xfff, 0x0)

13:07:31 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0xfff, 0x0)

13:07:31 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0xfff, 0x0)

13:07:32 executing program 7:
getgroups(0x1, &(0x7f0000000080)=[0xee00])

13:07:32 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

[  121.402790] audit: type=1400 audit(1663679252.288:7): avc:  denied  { block_suspend } for  pid=3818 comm="syz-executor.7" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
13:07:32 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:32 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

[  121.825624] audit: type=1400 audit(1663679252.711:8): avc:  denied  { open } for  pid=3846 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  121.827579] audit: type=1400 audit(1663679252.711:9): avc:  denied  { kernel } for  pid=3846 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  121.844496] ------------[ cut here ]------------
[  121.844516] 
[  121.844520] ======================================================
[  121.844524] WARNING: possible circular locking dependency detected
[  121.844528] 6.0.0-rc6-next-20220920 #1 Not tainted
[  121.844534] ------------------------------------------------------
[  121.844537] syz-executor.1/3847 is trying to acquire lock:
[  121.844544] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  121.844584] 
[  121.844584] but task is already holding lock:
[  121.844586] ffff88803fb08420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  121.844614] 
[  121.844614] which lock already depends on the new lock.
[  121.844614] 
[  121.844617] 
[  121.844617] the existing dependency chain (in reverse order) is:
[  121.844620] 
[  121.844620] -> #3 (&ctx->lock){....}-{2:2}:
[  121.844634]        _raw_spin_lock+0x2a/0x40
[  121.844653]        __perf_event_task_sched_out+0x53b/0x18d0
[  121.844666]        __schedule+0xedd/0x2470
[  121.844678]        schedule+0xda/0x1b0
[  121.844690]        exit_to_user_mode_prepare+0x114/0x1a0
[  121.844702]        syscall_exit_to_user_mode+0x19/0x40
[  121.844713]        do_syscall_64+0x48/0x90
[  121.844728]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  121.844748] 
[  121.844748] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  121.844761]        _raw_spin_lock_nested+0x30/0x40
[  121.844778]        raw_spin_rq_lock_nested+0x1e/0x30
[  121.844791]        task_fork_fair+0x63/0x4d0
[  121.844807]        sched_cgroup_fork+0x3d0/0x540
[  121.844821]        copy_process+0x4183/0x6e20
[  121.844835]        kernel_clone+0xe7/0x890
[  121.844844]        user_mode_thread+0xad/0xf0
[  121.844854]        rest_init+0x24/0x250
[  121.844864]        arch_call_rest_init+0xf/0x14
[  121.844879]        start_kernel+0x4c1/0x4e6
[  121.844891]        secondary_startup_64_no_verify+0xe0/0xeb
[  121.844905] 
[  121.844905] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  121.844919]        _raw_spin_lock_irqsave+0x39/0x60
[  121.844936]        try_to_wake_up+0xab/0x1930
[  121.844949]        up+0x75/0xb0
[  121.844960]        __up_console_sem+0x6e/0x80
[  121.844975]        console_unlock+0x46a/0x590
[  121.844991]        do_con_write+0xc05/0x1d50
[  121.845003]        con_write+0x21/0x40
[  121.845013]        n_tty_write+0x4d4/0xfe0
[  121.845026]        file_tty_write.constprop.0+0x49c/0x8f0
[  121.845039]        vfs_write+0x9c3/0xd90
[  121.845057]        ksys_write+0x127/0x250
[  121.845074]        do_syscall_64+0x3b/0x90
[  121.845089]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  121.845108] 
[  121.845108] -> #0 ((console_sem).lock){....}-{2:2}:
[  121.845121]        __lock_acquire+0x2a02/0x5e70
[  121.845137]        lock_acquire+0x1a2/0x530
[  121.845153]        _raw_spin_lock_irqsave+0x39/0x60
[  121.845170]        down_trylock+0xe/0x70
[  121.845182]        __down_trylock_console_sem+0x3b/0xd0
[  121.845198]        vprintk_emit+0x16b/0x560
[  121.845214]        vprintk+0x84/0xa0
[  121.845230]        _printk+0xba/0xf1
[  121.845240]        report_bug.cold+0x72/0xab
[  121.845255]        handle_bug+0x3c/0x70
[  121.845270]        exc_invalid_op+0x14/0x50
[  121.845285]        asm_exc_invalid_op+0x16/0x20
[  121.845295]        group_sched_out.part.0+0x2c7/0x460
[  121.845306]        ctx_sched_out+0x8f1/0xc10
[  121.845316]        __perf_event_task_sched_out+0x6d0/0x18d0
[  121.845328]        __schedule+0xedd/0x2470
[  121.845340]        schedule+0xda/0x1b0
[  121.845352]        exit_to_user_mode_prepare+0x114/0x1a0
[  121.845363]        syscall_exit_to_user_mode+0x19/0x40
[  121.845374]        do_syscall_64+0x48/0x90
[  121.845389]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  121.845408] 
[  121.845408] other info that might help us debug this:
[  121.845408] 
[  121.845410] Chain exists of:
[  121.845410]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  121.845410] 
[  121.845425]  Possible unsafe locking scenario:
[  121.845425] 
[  121.845427]        CPU0                    CPU1
[  121.845429]        ----                    ----
[  121.845431]   lock(&ctx->lock);
[  121.845437]                                lock(&rq->__lock);
[  121.845443]                                lock(&ctx->lock);
[  121.845449]   lock((console_sem).lock);
[  121.845455] 
[  121.845455]  *** DEADLOCK ***
[  121.845455] 
[  121.845456] 2 locks held by syz-executor.1/3847:
[  121.845463]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  121.845491]  #1: ffff88803fb08420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  121.845519] 
[  121.845519] stack backtrace:
[  121.845521] CPU: 0 PID: 3847 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1
[  121.845534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  121.845542] Call Trace:
[  121.845545]  <TASK>
[  121.845549]  dump_stack_lvl+0x8b/0xb3
[  121.845566]  check_noncircular+0x263/0x2e0
[  121.845582]  ? format_decode+0x26c/0xb50
[  121.845597]  ? print_circular_bug+0x450/0x450
[  121.845614]  ? enable_ptr_key_workfn+0x20/0x20
[  121.845629]  ? perf_swevent_event+0x6c/0x550
[  121.845648]  ? format_decode+0x26c/0xb50
[  121.845664]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  121.845681]  __lock_acquire+0x2a02/0x5e70
[  121.845703]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  121.845725]  lock_acquire+0x1a2/0x530
[  121.845742]  ? down_trylock+0xe/0x70
[  121.845756]  ? lock_release+0x750/0x750
[  121.845777]  ? vprintk+0x84/0xa0
[  121.845795]  _raw_spin_lock_irqsave+0x39/0x60
[  121.845812]  ? down_trylock+0xe/0x70
[  121.845826]  down_trylock+0xe/0x70
[  121.845839]  ? vprintk+0x84/0xa0
[  121.845855]  __down_trylock_console_sem+0x3b/0xd0
[  121.845873]  vprintk_emit+0x16b/0x560
[  121.845891]  vprintk+0x84/0xa0
[  121.845909]  _printk+0xba/0xf1
[  121.845919]  ? record_print_text.cold+0x16/0x16
[  121.845934]  ? report_bug.cold+0x66/0xab
[  121.845950]  ? group_sched_out.part.0+0x2c7/0x460
[  121.845962]  report_bug.cold+0x72/0xab
[  121.845979]  handle_bug+0x3c/0x70
[  121.845995]  exc_invalid_op+0x14/0x50
[  121.846011]  asm_exc_invalid_op+0x16/0x20
[  121.846023] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  121.846036] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  121.846048] RSP: 0018:ffff888041697c48 EFLAGS: 00010006
[  121.846057] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  121.846064] RDX: ffff88801f48b580 RSI: ffffffff815662c7 RDI: 0000000000000005
[  121.846072] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001
[  121.846079] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88803fb08400
[  121.846087] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002
[  121.846098]  ? group_sched_out.part.0+0x2c7/0x460
[  121.846111]  ? group_sched_out.part.0+0x2c7/0x460
[  121.846124]  ctx_sched_out+0x8f1/0xc10
[  121.846137]  __perf_event_task_sched_out+0x6d0/0x18d0
[  121.846153]  ? lock_is_held_type+0xd7/0x130
[  121.846165]  ? __perf_cgroup_move+0x160/0x160
[  121.846177]  ? set_next_entity+0x304/0x550
[  121.846195]  ? update_curr+0x267/0x740
[  121.846213]  ? lock_is_held_type+0xd7/0x130
[  121.846225]  __schedule+0xedd/0x2470
[  121.846241]  ? io_schedule_timeout+0x150/0x150
[  121.846255]  ? trace_rcu_dyntick+0x1a7/0x250
[  121.846276]  schedule+0xda/0x1b0
[  121.846290]  exit_to_user_mode_prepare+0x114/0x1a0
[  121.846302]  syscall_exit_to_user_mode+0x19/0x40
[  121.846314]  do_syscall_64+0x48/0x90
[  121.846330]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  121.846357] RIP: 0033:0x7f34cfb78b19
[  121.846365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.846376] RSP: 002b:00007f34cd0ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.846387] RAX: 0000000000000001 RBX: 00007f34cfc8bf68 RCX: 00007f34cfb78b19
[  121.846394] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34cfc8bf6c
[  121.846402] RBP: 00007f34cfc8bf60 R08: 000000000000000e R09: 0000000000000000
[  121.846409] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f34cfc8bf6c
[  121.846416] R13: 00007ffc62554a7f R14: 00007f34cd0ee300 R15: 0000000000022000
[  121.846429]  </TASK>
[  121.903723] WARNING: CPU: 0 PID: 3847 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  121.904418] Modules linked in:
[  121.904666] CPU: 0 PID: 3847 Comm: syz-executor.1 Not tainted 6.0.0-rc6-next-20220920 #1
[  121.905275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  121.906126] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  121.906559] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  121.907935] RSP: 0018:ffff888041697c48 EFLAGS: 00010006
[  121.908341] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  121.908886] RDX: ffff88801f48b580 RSI: ffffffff815662c7 RDI: 0000000000000005
[  121.909428] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001
[  121.909977] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88803fb08400
[  121.910518] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002
[  121.911064] FS:  00007f34cd0ee700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  121.911668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.912116] CR2: 00007f73cd4548e0 CR3: 000000000c3d2000 CR4: 0000000000350ef0
[  121.912656] Call Trace:
[  121.912854]  <TASK>
[  121.913033]  ctx_sched_out+0x8f1/0xc10
[  121.913333]  __perf_event_task_sched_out+0x6d0/0x18d0
[  121.913731]  ? lock_is_held_type+0xd7/0x130
[  121.914067]  ? __perf_cgroup_move+0x160/0x160
[  121.914418]  ? set_next_entity+0x304/0x550
[  121.914752]  ? update_curr+0x267/0x740
[  121.915059]  ? lock_is_held_type+0xd7/0x130
[  121.915387]  __schedule+0xedd/0x2470
[  121.915675]  ? io_schedule_timeout+0x150/0x150
[  121.916029]  ? trace_rcu_dyntick+0x1a7/0x250
[  121.916379]  schedule+0xda/0x1b0
[  121.916644]  exit_to_user_mode_prepare+0x114/0x1a0
[  121.917023]  syscall_exit_to_user_mode+0x19/0x40
[  121.917387]  do_syscall_64+0x48/0x90
[  121.917684]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  121.918082] RIP: 0033:0x7f34cfb78b19
[  121.918382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.919749] RSP: 002b:00007f34cd0ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.920321] RAX: 0000000000000001 RBX: 00007f34cfc8bf68 RCX: 00007f34cfb78b19
[  121.920861] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34cfc8bf6c
[  121.921405] RBP: 00007f34cfc8bf60 R08: 000000000000000e R09: 0000000000000000
[  121.921938] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f34cfc8bf6c
[  121.922479] R13: 00007ffc62554a7f R14: 00007f34cd0ee300 R15: 0000000000022000
[  121.923022]  </TASK>
[  121.923204] irq event stamp: 752
[  121.923464] hardirqs last  enabled at (751): [<ffffffff8133f8f9>] exit_to_user_mode_prepare+0x109/0x1a0
[  121.924163] hardirqs last disabled at (752): [<ffffffff8424c195>] __schedule+0x1225/0x2470
[  121.924784] softirqs last  enabled at (484): [<ffffffff811709ab>] __irq_exit_rcu+0x11b/0x180
[  121.925421] softirqs last disabled at (479): [<ffffffff811709ab>] __irq_exit_rcu+0x11b/0x180
[  121.926058] ---[ end trace 0000000000000000 ]---
13:07:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:34 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@vsock, 0x80)

13:07:34 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:34 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

13:07:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@vsock, 0x80)

13:07:34 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

[  124.135847] hrtimer: interrupt took 15799 ns
13:07:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

13:07:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@vsock, 0x80)

13:07:35 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

13:07:35 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x40800}, 0x0, 0x2, r0, 0x2)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
write$sndseq(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_create1(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})

13:07:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:35 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:36 executing program 2:
setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000015c0)=""/4096, &(0x7f0000000100)=0x1000)

13:07:36 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 6:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

13:07:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = getpid()
tgkill(r2, r2, 0x0)
syncfs(r1)

13:07:36 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:36 executing program 2:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

13:07:36 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x15}]}, 0x10)

13:07:36 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4)
r1 = socket$netlink(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440))
r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0)
close_range(0xffffffffffffffff, r4, 0x0)
name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400)

13:07:36 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x8001)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff37, 0x0, 0x12, 0xc, 0x0, "23c2d80353e2f6a33c3e59015505ac0d65bc8b584c0564cf1252925367d826dee4aed502dc498a3d5c028f7b69f143afd05a4631a6ae553f096dd6e8a33af795", "970da5fd2a5ca37306ba38b5bc51fbc98a6fdf16294e20401cf1632175cc9150dad985aa02040d9d566fd3881b67dd89a5da4c3da629ed5abc60dce05e0c79f8", "367043bc1c4a0680996102355937587a7b0008000000000000035f223600", [0x1a5, 0x1]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffffff, 0x12, 0x9, 0x18, "0c085ee0d43737c7cce643311ec9d0b00b3e0eb0fd5250c5cd319444c5638d84f87683c5b18016b00b3a518f9239394dfd4370da74470a7db67281a92b689c2b", "f0f8f1a18f98bc2c801089c9c49ed0283be50f8eafce21d32f972cf2a96eed7d", [0x7]})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/138, 0x8a}], 0x6, &(0x7f0000001680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x3)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_complete(0x0)

13:07:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:36 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000f40)={0x0, 0x1})

[  125.715847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=260 sclass=netlink_tcpdiag_socket pid=4096 comm=syz-executor.5
13:07:36 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x4, 0x1, 0x401}, 0x14}}, 0x0)

13:07:36 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000480), 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  125.724647] loop3: detected capacity change from 0 to 40
13:07:36 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

[  125.769499] audit: type=1400 audit(1663679256.655:10): avc:  denied  { write } for  pid=4105 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:07:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

13:07:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xc, 0x28, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0)

13:07:36 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

[  125.867088] loop5: detected capacity change from 0 to 256
[  125.876283] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  125.886789] netlink: 'syz-executor.0': attribute type 40 has an invalid length.
13:07:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:36 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0)

13:07:36 executing program 7:
setuid(0x0)

13:07:36 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r0, 0x101, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@chsw_timing={0x68, 0x4}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @device_b}}]}]}, 0x44}}, 0x0)

13:07:36 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000680)={'HL\x00'}, &(0x7f00000006c0)=0x1e)

[  126.160479] syz-executor.3: attempt to access beyond end of device
[  126.160479] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  126.162229] Buffer I/O error on dev loop3, logical block 10, lost async page write
[  126.198808] syz-executor.3: attempt to access beyond end of device
[  126.198808] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  126.200416] Buffer I/O error on dev loop3, logical block 10, lost async page write
[  126.212474] syz-executor.3 (4101) used greatest stack depth: 24600 bytes left
[  126.298239] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
fallocate(r0, 0x8, 0x7000, 0x8000000)

13:07:37 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

13:07:37 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

13:07:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0)

13:07:37 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, 0x0, 0x0)

13:07:37 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

13:07:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000480), 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:07:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

[  126.352687] loop3: detected capacity change from 0 to 40
[  126.382495] loop5: detected capacity change from 0 to 256
[  126.398194] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0)

13:07:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

[  126.478112] loop7: detected capacity change from 0 to 256
[  126.488430] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

13:07:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0)

13:07:37 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

13:07:37 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

[  126.692378] syz-executor.3: attempt to access beyond end of device
[  126.692378] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  126.695472] Buffer I/O error on dev loop3, logical block 10, lost async page write
[  126.735538] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  126.773051] syz-executor.3 (4142) used greatest stack depth: 24472 bytes left
[  126.774053] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  126.823251] loop5: detected capacity change from 0 to 256
13:07:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000480), 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:07:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

13:07:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

13:07:37 executing program 4:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

13:07:37 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

13:07:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

13:07:37 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

[  126.836071] loop7: detected capacity change from 0 to 256
[  126.841980] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  126.843113] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

13:07:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000480), 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  127.056345] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

[  127.066489] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

[  127.108520] loop5: detected capacity change from 0 to 256
13:07:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r1 = gettid()
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001)
r3 = getpgid(0x0)
ptrace(0x8, r3)
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
getpgid(r1)
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00')

[  127.115660] loop7: detected capacity change from 0 to 256
13:07:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
pipe(0x0)
llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001)
mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x7fffffff)

[  127.125100] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  127.132619] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
13:07:38 executing program 1:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

13:07:38 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x12)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xf523}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340))
fallocate(0xffffffffffffffff, 0xb, 0x0, 0x101)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00')

13:07:38 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0)

[  127.545240] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  127.566329] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  127.905737] syz-executor.0 (4186) used greatest stack depth: 24152 bytes left
13:07:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000480), 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:07:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40
VM DIAGNOSIS:
13:07:33  Registers:
info registers vcpu 0
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1551 RDI=ffffffff87643ba0 RBP=ffffffff87643b60 RSP=ffff888041697698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001
R12=0000000000000061 R13=ffffffff87643b60 R14=0000000000000010 R15=ffffffff822b1540
RIP=ffffffff822b15a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f34cd0ee700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f73cd4548e0 CR3=000000000c3d2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f34cfc5f7c0 00007f34cfc5f7c8
YMM02=0000000000000000 0000000000000000 00007f34cfc5f7e0 00007f34cfc5f7c0
YMM03=0000000000000000 0000000000000000 00007f34cfc5f7c8 00007f34cfc5f7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0e0b4e0 RDX=0000000000000000
RSI=ffffffff8134f33b RDI=0000000000000001 RBP=00007fb6129f1d82 RSP=ffff88801a08f380
R8 =0000000000000007 R9 =ffffffffff600000 R10=00007fb6129f1000 R11=000000000003603d
R12=ffff88801a08f4b8 R13=0000000000000000 R14=ffff88801f48d040 R15=0000000000000cc0
RIP=ffffffff8120614a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb6129d0028 CR3=000000001a924000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e
YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000