Warning: Permanently added '[localhost]:43143' (ECDSA) to the list of known hosts.
2022/09/12 17:58:55 fuzzer started
2022/09/12 17:58:56 dialing manager at localhost:38027
syzkaller login: [   35.804721] cgroup: Unknown subsys name 'net'
[   35.893921] cgroup: Unknown subsys name 'rlimit'
2022/09/12 17:59:10 syscalls: 2215
2022/09/12 17:59:10 code coverage: enabled
2022/09/12 17:59:10 comparison tracing: enabled
2022/09/12 17:59:10 extra coverage: enabled
2022/09/12 17:59:10 setuid sandbox: enabled
2022/09/12 17:59:10 namespace sandbox: enabled
2022/09/12 17:59:10 Android sandbox: enabled
2022/09/12 17:59:10 fault injection: enabled
2022/09/12 17:59:10 leak checking: enabled
2022/09/12 17:59:10 net packet injection: enabled
2022/09/12 17:59:10 net device setup: enabled
2022/09/12 17:59:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 17:59:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 17:59:10 USB emulation: enabled
2022/09/12 17:59:10 hci packet injection: enabled
2022/09/12 17:59:10 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 17:59:10 802.15.4 emulation: enabled
2022/09/12 17:59:10 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 17:59:11 fetching corpus: 46, signal 28884/32434 (executing program)
2022/09/12 17:59:11 fetching corpus: 96, signal 44750/49701 (executing program)
2022/09/12 17:59:11 fetching corpus: 146, signal 55813/62104 (executing program)
2022/09/12 17:59:11 fetching corpus: 196, signal 62277/69880 (executing program)
2022/09/12 17:59:11 fetching corpus: 246, signal 69900/78744 (executing program)
2022/09/12 17:59:11 fetching corpus: 296, signal 74756/84833 (executing program)
2022/09/12 17:59:11 fetching corpus: 346, signal 78643/89944 (executing program)
2022/09/12 17:59:11 fetching corpus: 396, signal 81449/93979 (executing program)
2022/09/12 17:59:12 fetching corpus: 446, signal 87090/100572 (executing program)
2022/09/12 17:59:12 fetching corpus: 496, signal 91883/106306 (executing program)
2022/09/12 17:59:12 fetching corpus: 546, signal 95515/110960 (executing program)
2022/09/12 17:59:12 fetching corpus: 596, signal 99213/115543 (executing program)
2022/09/12 17:59:12 fetching corpus: 646, signal 103614/120783 (executing program)
2022/09/12 17:59:12 fetching corpus: 695, signal 106599/124647 (executing program)
2022/09/12 17:59:13 fetching corpus: 745, signal 108519/127497 (executing program)
2022/09/12 17:59:13 fetching corpus: 795, signal 111055/130904 (executing program)
2022/09/12 17:59:13 fetching corpus: 845, signal 112915/133664 (executing program)
2022/09/12 17:59:13 fetching corpus: 895, signal 116134/137646 (executing program)
2022/09/12 17:59:13 fetching corpus: 945, signal 117869/140253 (executing program)
2022/09/12 17:59:13 fetching corpus: 995, signal 120849/143875 (executing program)
2022/09/12 17:59:13 fetching corpus: 1045, signal 123438/147150 (executing program)
2022/09/12 17:59:14 fetching corpus: 1095, signal 126145/150426 (executing program)
2022/09/12 17:59:14 fetching corpus: 1145, signal 129267/154042 (executing program)
2022/09/12 17:59:14 fetching corpus: 1195, signal 131066/156542 (executing program)
2022/09/12 17:59:14 fetching corpus: 1245, signal 133395/159441 (executing program)
2022/09/12 17:59:14 fetching corpus: 1295, signal 135500/162109 (executing program)
2022/09/12 17:59:14 fetching corpus: 1345, signal 137280/164517 (executing program)
2022/09/12 17:59:14 fetching corpus: 1395, signal 139650/167316 (executing program)
2022/09/12 17:59:15 fetching corpus: 1445, signal 141459/169688 (executing program)
2022/09/12 17:59:15 fetching corpus: 1495, signal 143239/172004 (executing program)
2022/09/12 17:59:15 fetching corpus: 1545, signal 145339/174551 (executing program)
2022/09/12 17:59:15 fetching corpus: 1595, signal 146600/176361 (executing program)
2022/09/12 17:59:15 fetching corpus: 1645, signal 148743/178846 (executing program)
2022/09/12 17:59:15 fetching corpus: 1695, signal 150181/180755 (executing program)
2022/09/12 17:59:15 fetching corpus: 1745, signal 151590/182698 (executing program)
2022/09/12 17:59:15 fetching corpus: 1795, signal 153163/184719 (executing program)
2022/09/12 17:59:16 fetching corpus: 1845, signal 155310/187116 (executing program)
2022/09/12 17:59:16 fetching corpus: 1895, signal 157012/189173 (executing program)
2022/09/12 17:59:16 fetching corpus: 1945, signal 158253/190887 (executing program)
2022/09/12 17:59:16 fetching corpus: 1995, signal 160478/193260 (executing program)
2022/09/12 17:59:16 fetching corpus: 2044, signal 161472/194750 (executing program)
2022/09/12 17:59:16 fetching corpus: 2094, signal 162936/196569 (executing program)
2022/09/12 17:59:16 fetching corpus: 2144, signal 164344/198266 (executing program)
2022/09/12 17:59:17 fetching corpus: 2194, signal 165850/200081 (executing program)
2022/09/12 17:59:17 fetching corpus: 2244, signal 166998/201638 (executing program)
2022/09/12 17:59:17 fetching corpus: 2294, signal 168074/203046 (executing program)
2022/09/12 17:59:17 fetching corpus: 2344, signal 169829/204960 (executing program)
2022/09/12 17:59:17 fetching corpus: 2394, signal 171696/206851 (executing program)
2022/09/12 17:59:17 fetching corpus: 2444, signal 172936/208404 (executing program)
2022/09/12 17:59:17 fetching corpus: 2494, signal 174825/210241 (executing program)
2022/09/12 17:59:18 fetching corpus: 2544, signal 176227/211810 (executing program)
2022/09/12 17:59:18 fetching corpus: 2594, signal 176925/212883 (executing program)
2022/09/12 17:59:18 fetching corpus: 2644, signal 177620/214050 (executing program)
2022/09/12 17:59:18 fetching corpus: 2694, signal 178631/215290 (executing program)
2022/09/12 17:59:18 fetching corpus: 2744, signal 179413/216425 (executing program)
2022/09/12 17:59:18 fetching corpus: 2794, signal 180306/217605 (executing program)
2022/09/12 17:59:18 fetching corpus: 2844, signal 181516/218895 (executing program)
2022/09/12 17:59:19 fetching corpus: 2894, signal 182796/220218 (executing program)
2022/09/12 17:59:19 fetching corpus: 2944, signal 183435/221259 (executing program)
2022/09/12 17:59:19 fetching corpus: 2994, signal 184376/222419 (executing program)
2022/09/12 17:59:19 fetching corpus: 3044, signal 185218/223500 (executing program)
2022/09/12 17:59:19 fetching corpus: 3094, signal 186397/224772 (executing program)
2022/09/12 17:59:19 fetching corpus: 3144, signal 187147/225815 (executing program)
2022/09/12 17:59:19 fetching corpus: 3194, signal 188030/226859 (executing program)
2022/09/12 17:59:19 fetching corpus: 3244, signal 188987/227911 (executing program)
2022/09/12 17:59:19 fetching corpus: 3294, signal 189777/228924 (executing program)
2022/09/12 17:59:20 fetching corpus: 3344, signal 190323/229777 (executing program)
2022/09/12 17:59:20 fetching corpus: 3394, signal 191182/230767 (executing program)
2022/09/12 17:59:20 fetching corpus: 3444, signal 192233/231863 (executing program)
2022/09/12 17:59:20 fetching corpus: 3494, signal 193040/232847 (executing program)
2022/09/12 17:59:20 fetching corpus: 3544, signal 193947/233845 (executing program)
2022/09/12 17:59:20 fetching corpus: 3594, signal 195037/234866 (executing program)
2022/09/12 17:59:20 fetching corpus: 3644, signal 196172/235956 (executing program)
2022/09/12 17:59:21 fetching corpus: 3694, signal 197110/236936 (executing program)
2022/09/12 17:59:21 fetching corpus: 3744, signal 198201/237966 (executing program)
2022/09/12 17:59:21 fetching corpus: 3794, signal 198997/238796 (executing program)
2022/09/12 17:59:21 fetching corpus: 3844, signal 199705/239610 (executing program)
2022/09/12 17:59:21 fetching corpus: 3894, signal 200322/240377 (executing program)
2022/09/12 17:59:21 fetching corpus: 3944, signal 201315/241311 (executing program)
2022/09/12 17:59:21 fetching corpus: 3994, signal 202093/242171 (executing program)
2022/09/12 17:59:22 fetching corpus: 4044, signal 202690/242910 (executing program)
2022/09/12 17:59:22 fetching corpus: 4094, signal 203611/243815 (executing program)
2022/09/12 17:59:22 fetching corpus: 4144, signal 204379/244600 (executing program)
2022/09/12 17:59:22 fetching corpus: 4194, signal 204987/245325 (executing program)
2022/09/12 17:59:22 fetching corpus: 4244, signal 205528/245989 (executing program)
2022/09/12 17:59:22 fetching corpus: 4294, signal 206526/246842 (executing program)
2022/09/12 17:59:23 fetching corpus: 4344, signal 207278/247556 (executing program)
2022/09/12 17:59:23 fetching corpus: 4394, signal 208459/248431 (executing program)
2022/09/12 17:59:23 fetching corpus: 4444, signal 209518/249206 (executing program)
2022/09/12 17:59:23 fetching corpus: 4494, signal 210665/249988 (executing program)
2022/09/12 17:59:23 fetching corpus: 4544, signal 211717/250759 (executing program)
2022/09/12 17:59:23 fetching corpus: 4594, signal 212349/251344 (executing program)
2022/09/12 17:59:23 fetching corpus: 4644, signal 213100/252014 (executing program)
2022/09/12 17:59:24 fetching corpus: 4694, signal 214152/252684 (executing program)
2022/09/12 17:59:24 fetching corpus: 4744, signal 214604/253210 (executing program)
2022/09/12 17:59:24 fetching corpus: 4794, signal 215404/253872 (executing program)
2022/09/12 17:59:24 fetching corpus: 4844, signal 216039/254432 (executing program)
2022/09/12 17:59:24 fetching corpus: 4894, signal 216619/254963 (executing program)
2022/09/12 17:59:24 fetching corpus: 4944, signal 217048/255450 (executing program)
2022/09/12 17:59:24 fetching corpus: 4994, signal 217869/256086 (executing program)
2022/09/12 17:59:24 fetching corpus: 5044, signal 218809/256660 (executing program)
2022/09/12 17:59:25 fetching corpus: 5094, signal 219508/257213 (executing program)
2022/09/12 17:59:25 fetching corpus: 5144, signal 220582/257851 (executing program)
2022/09/12 17:59:25 fetching corpus: 5194, signal 221336/258387 (executing program)
2022/09/12 17:59:25 fetching corpus: 5244, signal 221839/258813 (executing program)
2022/09/12 17:59:25 fetching corpus: 5294, signal 223073/259377 (executing program)
2022/09/12 17:59:25 fetching corpus: 5344, signal 223884/259910 (executing program)
2022/09/12 17:59:26 fetching corpus: 5394, signal 224723/260483 (executing program)
2022/09/12 17:59:26 fetching corpus: 5444, signal 225571/261028 (executing program)
2022/09/12 17:59:26 fetching corpus: 5494, signal 226133/261408 (executing program)
2022/09/12 17:59:26 fetching corpus: 5544, signal 226813/261886 (executing program)
2022/09/12 17:59:26 fetching corpus: 5594, signal 227281/262291 (executing program)
2022/09/12 17:59:26 fetching corpus: 5644, signal 227817/262648 (executing program)
2022/09/12 17:59:26 fetching corpus: 5694, signal 228268/262999 (executing program)
2022/09/12 17:59:27 fetching corpus: 5744, signal 229312/263418 (executing program)
2022/09/12 17:59:27 fetching corpus: 5794, signal 229856/263807 (executing program)
2022/09/12 17:59:27 fetching corpus: 5844, signal 230420/264199 (executing program)
2022/09/12 17:59:27 fetching corpus: 5894, signal 230998/264564 (executing program)
2022/09/12 17:59:27 fetching corpus: 5944, signal 231450/264888 (executing program)
2022/09/12 17:59:27 fetching corpus: 5994, signal 232348/265285 (executing program)
2022/09/12 17:59:27 fetching corpus: 6044, signal 232794/265597 (executing program)
2022/09/12 17:59:28 fetching corpus: 6094, signal 233461/265895 (executing program)
2022/09/12 17:59:28 fetching corpus: 6144, signal 233990/266178 (executing program)
2022/09/12 17:59:28 fetching corpus: 6194, signal 234520/266478 (executing program)
2022/09/12 17:59:28 fetching corpus: 6244, signal 234920/266755 (executing program)
2022/09/12 17:59:28 fetching corpus: 6294, signal 236146/267206 (executing program)
2022/09/12 17:59:28 fetching corpus: 6344, signal 236587/267469 (executing program)
2022/09/12 17:59:28 fetching corpus: 6394, signal 236993/267692 (executing program)
2022/09/12 17:59:28 fetching corpus: 6444, signal 237486/267939 (executing program)
2022/09/12 17:59:29 fetching corpus: 6494, signal 238107/268108 (executing program)
2022/09/12 17:59:29 fetching corpus: 6544, signal 238628/268122 (executing program)
2022/09/12 17:59:29 fetching corpus: 6594, signal 239040/268126 (executing program)
2022/09/12 17:59:29 fetching corpus: 6644, signal 239354/268131 (executing program)
2022/09/12 17:59:29 fetching corpus: 6694, signal 239808/268151 (executing program)
2022/09/12 17:59:29 fetching corpus: 6744, signal 240314/268204 (executing program)
2022/09/12 17:59:29 fetching corpus: 6794, signal 240776/268212 (executing program)
2022/09/12 17:59:29 fetching corpus: 6844, signal 241158/268289 (executing program)
2022/09/12 17:59:30 fetching corpus: 6894, signal 241720/268298 (executing program)
2022/09/12 17:59:30 fetching corpus: 6944, signal 242310/268303 (executing program)
2022/09/12 17:59:30 fetching corpus: 6994, signal 243063/268322 (executing program)
2022/09/12 17:59:30 fetching corpus: 7044, signal 243838/268329 (executing program)
2022/09/12 17:59:30 fetching corpus: 7094, signal 244207/268356 (executing program)
2022/09/12 17:59:30 fetching corpus: 7144, signal 244497/268367 (executing program)
2022/09/12 17:59:30 fetching corpus: 7194, signal 245039/268370 (executing program)
2022/09/12 17:59:31 fetching corpus: 7244, signal 245380/268408 (executing program)
2022/09/12 17:59:31 fetching corpus: 7294, signal 245796/268438 (executing program)
2022/09/12 17:59:31 fetching corpus: 7344, signal 246339/268453 (executing program)
2022/09/12 17:59:31 fetching corpus: 7394, signal 246766/268476 (executing program)
2022/09/12 17:59:31 fetching corpus: 7444, signal 247691/268522 (executing program)
2022/09/12 17:59:31 fetching corpus: 7494, signal 248202/268536 (executing program)
2022/09/12 17:59:32 fetching corpus: 7544, signal 248523/268537 (executing program)
2022/09/12 17:59:32 fetching corpus: 7594, signal 249263/268549 (executing program)
2022/09/12 17:59:32 fetching corpus: 7644, signal 249645/268562 (executing program)
2022/09/12 17:59:32 fetching corpus: 7694, signal 250188/268580 (executing program)
2022/09/12 17:59:32 fetching corpus: 7744, signal 250712/268617 (executing program)
2022/09/12 17:59:32 fetching corpus: 7794, signal 251094/268619 (executing program)
2022/09/12 17:59:32 fetching corpus: 7843, signal 251594/268627 (executing program)
2022/09/12 17:59:32 fetching corpus: 7893, signal 251918/268645 (executing program)
2022/09/12 17:59:33 fetching corpus: 7943, signal 252531/268731 (executing program)
2022/09/12 17:59:33 fetching corpus: 7993, signal 252942/268738 (executing program)
2022/09/12 17:59:33 fetching corpus: 8043, signal 253591/268771 (executing program)
2022/09/12 17:59:33 fetching corpus: 8093, signal 254221/268779 (executing program)
2022/09/12 17:59:33 fetching corpus: 8143, signal 254870/268954 (executing program)
2022/09/12 17:59:33 fetching corpus: 8193, signal 255174/268958 (executing program)
2022/09/12 17:59:33 fetching corpus: 8243, signal 255717/268974 (executing program)
2022/09/12 17:59:34 fetching corpus: 8293, signal 256063/268975 (executing program)
2022/09/12 17:59:34 fetching corpus: 8343, signal 256374/268977 (executing program)
2022/09/12 17:59:34 fetching corpus: 8393, signal 256752/268987 (executing program)
2022/09/12 17:59:34 fetching corpus: 8443, signal 257143/268991 (executing program)
2022/09/12 17:59:34 fetching corpus: 8493, signal 257590/269011 (executing program)
2022/09/12 17:59:34 fetching corpus: 8543, signal 258118/269021 (executing program)
2022/09/12 17:59:34 fetching corpus: 8593, signal 258521/269140 (executing program)
2022/09/12 17:59:34 fetching corpus: 8627, signal 258756/269145 (executing program)
2022/09/12 17:59:34 fetching corpus: 8627, signal 258756/269145 (executing program)
2022/09/12 17:59:37 starting 8 fuzzer processes
17:59:37 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffffff)
sendfile(r0, r0, 0x0, 0x100000)

17:59:37 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x2)

[   77.222959] audit: type=1400 audit(1663005577.675:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:59:37 executing program 2:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x20082000)
keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0})
keyctl$setperm(0x5, r0, 0x0)
add_key$keyring(&(0x7f0000001540), 0x0, 0x0, 0x0, r0)

17:59:37 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0xced6e64430e3c7df, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@remote}, @in6=@private2}}}, 0xf8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)='k', 0x1}, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

17:59:37 executing program 4:
r0 = syz_io_uring_setup(0x6d05, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0)

17:59:37 executing program 5:
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000290000000008000000000000000000000000000000000000000007002e2f66696c65300001004000000000000000000000000000002100000007002e2f66696c653000000000000000000000000000b4e9"], 0x68)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

17:59:37 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c00000002000000000000fb030000000c00040000000004"], 0x2c}], 0x1}, 0x0)

17:59:37 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x19)

[   78.516314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.524564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.526548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.529823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.539297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.541800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.548039] Bluetooth: hci0: HCI_REQ-0x0c1a
[   78.550789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.552335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.553601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.556816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.558151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.559337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.565251] Bluetooth: hci1: HCI_REQ-0x0c1a
[   78.614163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.652125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.654852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.657773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.659348] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.660039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.660882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.662374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.663794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.664976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.665749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.666491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.667152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.671763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.672833] Bluetooth: hci2: HCI_REQ-0x0c1a
[   78.673051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.675547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.676820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.678445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.679817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.681060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.683834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.697207] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.698478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.699960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.702006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.703044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.704755] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.707019] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   78.708283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   78.709724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   78.711080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.712775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.713956] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   78.715237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   78.727503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.729728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.735920] Bluetooth: hci6: HCI_REQ-0x0c1a
[   78.736282] Bluetooth: hci7: HCI_REQ-0x0c1a
[   78.737053] Bluetooth: hci3: HCI_REQ-0x0c1a
[   78.742997] Bluetooth: hci5: HCI_REQ-0x0c1a
[   78.753499] Bluetooth: hci4: HCI_REQ-0x0c1a
[   80.595188] Bluetooth: hci1: command 0x0409 tx timeout
[   80.595207] Bluetooth: hci0: command 0x0409 tx timeout
[   80.728553] Bluetooth: hci2: command 0x0409 tx timeout
[   80.786494] Bluetooth: hci7: command 0x0409 tx timeout
[   80.787459] Bluetooth: hci6: command 0x0409 tx timeout
[   80.787470] Bluetooth: hci4: command 0x0409 tx timeout
[   80.787881] Bluetooth: hci3: command 0x0409 tx timeout
[   80.788784] Bluetooth: hci5: command 0x0409 tx timeout
[   82.642503] Bluetooth: hci1: command 0x041b tx timeout
[   82.643080] Bluetooth: hci0: command 0x041b tx timeout
[   82.770702] Bluetooth: hci2: command 0x041b tx timeout
[   82.834484] Bluetooth: hci5: command 0x041b tx timeout
[   82.835031] Bluetooth: hci3: command 0x041b tx timeout
[   82.835528] Bluetooth: hci4: command 0x041b tx timeout
[   82.835969] Bluetooth: hci6: command 0x041b tx timeout
[   82.836435] Bluetooth: hci7: command 0x041b tx timeout
[   84.690490] Bluetooth: hci0: command 0x040f tx timeout
[   84.691957] Bluetooth: hci1: command 0x040f tx timeout
[   84.819124] Bluetooth: hci2: command 0x040f tx timeout
[   84.882499] Bluetooth: hci7: command 0x040f tx timeout
[   84.883016] Bluetooth: hci6: command 0x040f tx timeout
[   84.883968] Bluetooth: hci4: command 0x040f tx timeout
[   84.884681] Bluetooth: hci3: command 0x040f tx timeout
[   84.885139] Bluetooth: hci5: command 0x040f tx timeout
[   86.738500] Bluetooth: hci1: command 0x0419 tx timeout
[   86.738991] Bluetooth: hci0: command 0x0419 tx timeout
[   86.866661] Bluetooth: hci2: command 0x0419 tx timeout
[   86.930475] Bluetooth: hci5: command 0x0419 tx timeout
[   86.930962] Bluetooth: hci3: command 0x0419 tx timeout
[   86.932004] Bluetooth: hci4: command 0x0419 tx timeout
[   86.932469] Bluetooth: hci6: command 0x0419 tx timeout
[   86.932990] Bluetooth: hci7: command 0x0419 tx timeout
18:00:32 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x19)

18:00:32 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x19)

18:00:32 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x19)

18:00:32 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000040000380000000000000000000000000020"], 0x38)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

[  132.649214] process 'syz-executor.7' launched './file1' with NULL argv: empty string added
[  132.830710] netlink: 'syz-executor.6': attribute type 4 has an invalid length.
18:00:33 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c00000002000000000000fb030000000c00040000000004"], 0x2c}], 0x1}, 0x0)

[  132.939147] netlink: 'syz-executor.6': attribute type 4 has an invalid length.
18:00:33 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000040000380000000000000000000000000020"], 0x38)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

18:00:33 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c00000002000000000000fb030000000c00040000000004"], 0x2c}], 0x1}, 0x0)

[  133.064865] netlink: 'syz-executor.6': attribute type 4 has an invalid length.
18:00:33 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c00000002000000000000fb030000000c00040000000004"], 0x2c}], 0x1}, 0x0)

[  133.189193] netlink: 'syz-executor.6': attribute type 4 has an invalid length.
[  134.591235] syz-executor.0 (3909) used greatest stack depth: 24032 bytes left
[  134.591895] syz-executor.0 (3905) used greatest stack depth: 23304 bytes left
18:00:35 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffffff)
sendfile(r0, r0, 0x0, 0x100000)

18:00:35 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x2)

18:00:35 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0xced6e64430e3c7df, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@remote}, @in6=@private2}}}, 0xf8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)='k', 0x1}, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

18:00:35 executing program 5:
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000290000000008000000000000000000000000000000000000000007002e2f66696c65300001004000000000000000000000000000002100000007002e2f66696c653000000000000000000000000000b4e9"], 0x68)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

18:00:35 executing program 6:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x1, 0xf989, 0x1, 0x0, 0x0)

18:00:35 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

18:00:35 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000040000380000000000000000000000000020"], 0x38)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

18:00:35 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)

18:00:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xb4, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00')

18:00:35 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000040000380000000000000000000000000020"], 0x38)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

18:00:35 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x2)

[  135.206010] audit: type=1400 audit(1663005635.658:7): avc:  denied  { open } for  pid=3999 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.207495] audit: type=1400 audit(1663005635.658:8): avc:  denied  { kernel } for  pid=3999 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  135.220897] ------------[ cut here ]------------
[  135.220918] 
[  135.220921] ======================================================
[  135.220925] WARNING: possible circular locking dependency detected
[  135.220930] 6.0.0-rc5-next-20220912 #1 Not tainted
[  135.220936] ------------------------------------------------------
[  135.220939] syz-executor.2/4000 is trying to acquire lock:
[  135.220946] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  135.220984] 
[  135.220984] but task is already holding lock:
[  135.220987] ffff88800e9ce020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  135.221015] 
[  135.221015] which lock already depends on the new lock.
[  135.221015] 
[  135.221019] 
[  135.221019] the existing dependency chain (in reverse order) is:
[  135.221022] 
[  135.221022] -> #3 (&ctx->lock){....}-{2:2}:
[  135.221036]        _raw_spin_lock+0x2a/0x40
[  135.221053]        __perf_event_task_sched_out+0x53b/0x18d0
[  135.221066]        __schedule+0xedd/0x2470
[  135.221075]        schedule+0xda/0x1b0
[  135.221085]        exit_to_user_mode_prepare+0x114/0x1a0
[  135.221106]        syscall_exit_to_user_mode+0x19/0x40
[  135.221124]        do_syscall_64+0x48/0x90
[  135.221137]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.221155] 
[  135.221155] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  135.221169]        _raw_spin_lock_nested+0x30/0x40
[  135.221183]        raw_spin_rq_lock_nested+0x1e/0x30
[  135.221197]        task_fork_fair+0x63/0x4d0
[  135.221214]        sched_cgroup_fork+0x3d0/0x540
[  135.221229]        copy_process+0x3f9e/0x6df0
[  135.221240]        kernel_clone+0xe7/0x890
[  135.221249]        user_mode_thread+0xad/0xf0
[  135.221262]        rest_init+0x24/0x250
[  135.221278]        arch_call_rest_init+0xf/0x14
[  135.221298]        start_kernel+0x4c1/0x4e6
[  135.221314]        secondary_startup_64_no_verify+0xe0/0xeb
[  135.221329] 
[  135.221329] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  135.221343]        _raw_spin_lock_irqsave+0x39/0x60
[  135.221358]        try_to_wake_up+0xab/0x1920
[  135.221376]        up+0x75/0xb0
[  135.221387]        __up_console_sem+0x6e/0x80
[  135.221404]        console_unlock+0x46a/0x590
[  135.221420]        do_con_write+0xc05/0x1d50
[  135.221432]        con_write+0x21/0x40
[  135.221441]        n_tty_write+0x4d4/0xfe0
[  135.221455]        file_tty_write.constprop.0+0x49c/0x8f0
[  135.221467]        vfs_write+0x9c3/0xd90
[  135.221485]        ksys_write+0x127/0x250
[  135.221502]        do_syscall_64+0x3b/0x90
[  135.221515]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.221532] 
[  135.221532] -> #0 ((console_sem).lock){....}-{2:2}:
[  135.221546]        __lock_acquire+0x2a02/0x5e70
[  135.221563]        lock_acquire+0x1a2/0x530
[  135.221579]        _raw_spin_lock_irqsave+0x39/0x60
[  135.221596]        down_trylock+0xe/0x70
[  135.221609]        __down_trylock_console_sem+0x3b/0xd0
[  135.221625]        vprintk_emit+0x16b/0x560
[  135.221642]        vprintk+0x84/0xa0
[  135.221658]        _printk+0xba/0xf1
[  135.221676]        report_bug.cold+0x72/0xab
[  135.221688]        handle_bug+0x3c/0x70
[  135.221701]        exc_invalid_op+0x14/0x50
[  135.221714]        asm_exc_invalid_op+0x16/0x20
[  135.221730]        group_sched_out.part.0+0x2c7/0x460
[  135.221741]        ctx_sched_out+0x8f1/0xc10
[  135.221750]        __perf_event_task_sched_out+0x6d0/0x18d0
[  135.221763]        __schedule+0xedd/0x2470
[  135.221772]        schedule+0xda/0x1b0
[  135.221781]        exit_to_user_mode_prepare+0x114/0x1a0
[  135.221800]        syscall_exit_to_user_mode+0x19/0x40
[  135.221817]        do_syscall_64+0x48/0x90
[  135.221830]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.221846] 
[  135.221846] other info that might help us debug this:
[  135.221846] 
[  135.221850] Chain exists of:
[  135.221850]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  135.221850] 
[  135.221865]  Possible unsafe locking scenario:
[  135.221865] 
[  135.221867]        CPU0                    CPU1
[  135.221870]        ----                    ----
[  135.221872]   lock(&ctx->lock);
[  135.221878]                                lock(&rq->__lock);
[  135.221884]                                lock(&ctx->lock);
[  135.221890]   lock((console_sem).lock);
[  135.221896] 
[  135.221896]  *** DEADLOCK ***
[  135.221896] 
[  135.221898] 2 locks held by syz-executor.2/4000:
[  135.221905]  #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  135.221930]  #1: ffff88800e9ce020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  135.221958] 
[  135.221958] stack backtrace:
[  135.221961] CPU: 0 PID: 4000 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1
[  135.221973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  135.221983] Call Trace:
[  135.221986]  <TASK>
[  135.221990]  dump_stack_lvl+0x8b/0xb3
[  135.222005]  check_noncircular+0x263/0x2e0
[  135.222021]  ? format_decode+0x26c/0xb50
[  135.222036]  ? print_circular_bug+0x450/0x450
[  135.222054]  ? enable_ptr_key_workfn+0x20/0x20
[  135.222068]  ? format_decode+0x26c/0xb50
[  135.222084]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  135.222102]  __lock_acquire+0x2a02/0x5e70
[  135.222124]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  135.222147]  lock_acquire+0x1a2/0x530
[  135.222164]  ? down_trylock+0xe/0x70
[  135.222179]  ? rcu_read_unlock+0x40/0x40
[  135.222200]  ? vprintk+0x84/0xa0
[  135.222218]  _raw_spin_lock_irqsave+0x39/0x60
[  135.222234]  ? down_trylock+0xe/0x70
[  135.222247]  down_trylock+0xe/0x70
[  135.222261]  ? vprintk+0x84/0xa0
[  135.222278]  __down_trylock_console_sem+0x3b/0xd0
[  135.222296]  vprintk_emit+0x16b/0x560
[  135.222315]  vprintk+0x84/0xa0
[  135.222333]  _printk+0xba/0xf1
[  135.222351]  ? record_print_text.cold+0x16/0x16
[  135.222373]  ? report_bug.cold+0x66/0xab
[  135.222389]  ? group_sched_out.part.0+0x2c7/0x460
[  135.222401]  report_bug.cold+0x72/0xab
[  135.222418]  handle_bug+0x3c/0x70
[  135.222432]  exc_invalid_op+0x14/0x50
[  135.222446]  asm_exc_invalid_op+0x16/0x20
[  135.222463] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  135.222477] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  135.222488] RSP: 0018:ffff8880428ffc48 EFLAGS: 00010006
[  135.222497] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  135.222505] RDX: ffff888042109ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[  135.222513] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  135.222520] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e9ce000
[  135.222528] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  135.222539]  ? group_sched_out.part.0+0x2c7/0x460
[  135.222552]  ? group_sched_out.part.0+0x2c7/0x460
[  135.222565]  ctx_sched_out+0x8f1/0xc10
[  135.222578]  __perf_event_task_sched_out+0x6d0/0x18d0
[  135.222593]  ? lock_is_held_type+0xd7/0x130
[  135.222612]  ? __perf_cgroup_move+0x160/0x160
[  135.222624]  ? set_next_entity+0x304/0x550
[  135.222642]  ? update_curr+0x267/0x740
[  135.222661]  ? lock_is_held_type+0xd7/0x130
[  135.222679]  __schedule+0xedd/0x2470
[  135.222692]  ? io_schedule_timeout+0x150/0x150
[  135.222704]  ? __x64_sys_futex_time32+0x480/0x480
[  135.222718]  schedule+0xda/0x1b0
[  135.222729]  exit_to_user_mode_prepare+0x114/0x1a0
[  135.222750]  syscall_exit_to_user_mode+0x19/0x40
[  135.222768]  do_syscall_64+0x48/0x90
[  135.222781]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.222799] RIP: 0033:0x7fec345eab19
[  135.222807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.222818] RSP: 002b:00007fec31b60218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.222829] RAX: 0000000000000001 RBX: 00007fec346fdf68 RCX: 00007fec345eab19
[  135.222836] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec346fdf6c
[  135.222844] RBP: 00007fec346fdf60 R08: 000000000000000e R09: 0000000000000000
[  135.222851] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fec346fdf6c
[  135.222858] R13: 00007ffc1237deaf R14: 00007fec31b60300 R15: 0000000000022000
[  135.222871]  </TASK>
18:00:35 executing program 5:
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000290000000008000000000000000000000000000000000000000007002e2f66696c65300001004000000000000000000000000000002100000007002e2f66696c653000000000000000000000000000b4e9"], 0x68)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

18:00:35 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0xced6e64430e3c7df, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@remote}, @in6=@private2}}}, 0xf8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)='k', 0x1}, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

[  135.279096] WARNING: CPU: 0 PID: 4000 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  135.279117] Modules linked in:
[  135.279123] CPU: 0 PID: 4000 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220912 #1
[  135.279135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  135.279143] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  135.279156] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
18:00:35 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0xced6e64430e3c7df, 0x0, 0x0, {{{@in6=@remote, @in=@broadcast}, {@in=@remote}, @in6=@private2}}}, 0xf8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)='k', 0x1}, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

[  135.279168] RSP: 0018:ffff8880428ffc48 EFLAGS: 00010006
[  135.279178] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  135.279186] RDX: ffff888042109ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[  135.279194] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[  135.279201] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e9ce000
18:00:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"})
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1)
r1 = socket(0x11, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1})
bind$packet(r1, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000150000000c00018008000300000000002800018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)

[  135.279209] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  135.279220] FS:  00007fec31b60700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  135.279232] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.279241] CR2: 00007f22687c4940 CR3: 000000001a4cc000 CR4: 0000000000350ef0
[  135.279250] Call Trace:
[  135.279253]  <TASK>
[  135.279258]  ctx_sched_out+0x8f1/0xc10
[  135.279271]  __perf_event_task_sched_out+0x6d0/0x18d0
[  135.279287]  ? lock_is_held_type+0xd7/0x130
[  135.279306]  ? __perf_cgroup_move+0x160/0x160
[  135.279318]  ? set_next_entity+0x304/0x550
[  135.279336]  ? update_curr+0x267/0x740
[  135.279355]  ? lock_is_held_type+0xd7/0x130
[  135.279374]  __schedule+0xedd/0x2470
[  135.279387]  ? io_schedule_timeout+0x150/0x150
[  135.279400]  ? __x64_sys_futex_time32+0x480/0x480
[  135.279413]  schedule+0xda/0x1b0
18:00:35 executing program 3:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

[  135.279424]  exit_to_user_mode_prepare+0x114/0x1a0
[  135.279446]  syscall_exit_to_user_mode+0x19/0x40
[  135.279464]  do_syscall_64+0x48/0x90
[  135.279478]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  135.279496] RIP: 0033:0x7fec345eab19
[  135.279505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.279516] RSP: 002b:00007fec31b60218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.279528] RAX: 0000000000000001 RBX: 00007fec346fdf68 RCX: 00007fec345eab19
[  135.279536] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec346fdf6c
[  135.279544] RBP: 00007fec346fdf60 R08: 000000000000000e R09: 0000000000000000
[  135.279551] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fec346fdf6c
[  135.279559] R13: 00007ffc1237deaf R14: 00007fec31b60300 R15: 0000000000022000
[  135.279572]  </TASK>
[  135.279576] irq event stamp: 840
[  135.279580] hardirqs last  enabled at (839): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  135.279605] hardirqs last disabled at (840): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  135.279619] softirqs last  enabled at (554): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  135.279640] softirqs last disabled at (457): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  135.279660] ---[ end trace 0000000000000000 ]---
[  135.424704] audit: type=1400 audit(1663005635.877:9): avc:  denied  { write } for  pid=3999 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
18:00:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffffff)
sendfile(r0, r0, 0x0, 0x100000)

18:00:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"})
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1)
r1 = socket(0x11, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1})
bind$packet(r1, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000150000000c00018008000300000000002800018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)

18:00:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xb4, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00')

18:00:36 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x2)

18:00:36 executing program 3:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

18:00:36 executing program 5:
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000290000000008000000000000000000000000000000000000000007002e2f66696c65300001004000000000000000000000000000002100000007002e2f66696c653000000000000000000000000000b4e9"], 0x68)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

18:00:36 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

18:00:36 executing program 6:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x1, 0xf989, 0x1, 0x0, 0x0)

18:00:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xb4, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00')

18:00:36 executing program 1:
membarrier(0x10, 0x0)

18:00:36 executing program 5:
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x44032, 0xffffffffffffffff, 0x0)
fork()

18:00:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"})
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1)
r1 = socket(0x11, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1})
bind$packet(r1, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000150000000c00018008000300000000002800018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)

18:00:36 executing program 1:
membarrier(0x10, 0x0)

18:00:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xb4, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00')

18:00:36 executing program 5:
waitid(0x1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0))
read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
fork()
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0)

18:00:36 executing program 3:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

[  136.641413] hrtimer: interrupt took 25388 ns
18:00:37 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffffff)
sendfile(r0, r0, 0x0, 0x100000)

18:00:37 executing program 1:
membarrier(0x10, 0x0)

18:00:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_complete(0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"})
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1)
r1 = socket(0x11, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1})
bind$packet(r1, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000150000000c00018008000300000000002800018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)

18:00:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f00000005c0)='./file1\x00', 0x2)
sendfile(r1, r0, 0x0, 0xfffffdef)

18:00:37 executing program 3:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil)
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

18:00:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

18:00:37 executing program 6:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x1, 0xf989, 0x1, 0x0, 0x0)

18:00:37 executing program 1:
membarrier(0x10, 0x0)

18:00:37 executing program 1:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[  137.125494] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value
[  137.146996] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value
18:00:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:37 executing program 1:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[  137.254022] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value
18:00:37 executing program 7:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[  137.392835] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value
18:00:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x2}]})

18:00:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x2}]})

18:00:38 executing program 6:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x1, 0xf989, 0x1, 0x0, 0x0)

18:00:38 executing program 1:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

18:00:38 executing program 7:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

18:00:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x2}]})

18:00:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:38 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  138.018847] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value
[  138.029149] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value
18:00:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x2}]})

18:00:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:38 executing program 7:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

18:00:38 executing program 1:
r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='.\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x709bc021}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
request_key(&(0x7f00000018c0)='pkcs7_test\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)='func', r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@multicast2, @private}, 0xc)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000006c0)='./file1\x00', 0x100, 0x1, &(0x7f0000001780)=[{0x0}], 0x0, &(0x7f0000001800)={[{@nodots}, {@dots}, {@dots}, {@fat=@nocase}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r2, r3, &(0x7f0000001880)=0x6, 0x6)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)="dd0c38e37a785c448d0517f0a1c482b51de102be6f87070cc5d35ff6f2bb08c0830002000010658a85f144f2518eb9d60b32dc99b80e35c848ab7aab66f59ae6bc14bb2b73e8796d67f6e19cdb", 0x4d}, {&(0x7f0000000600)="df46fdf964a9dbe579d22f8da68c6eec45f3c6e2f59d65875147a8a3aa88aa6b3535db68a662b1ee5fdc2fe5cdf6eeb8e8b6660ec12ee2384f8c05e888bf7d4c0e1e6ce7be9ffca5a6c20bb43d6954cf8f3131516e484c33f2e573da7586c164b3bccfa4d6b2e89debd9c3775195c6d228e8559d5cfddb7d4d2be449bc6741751c5bff01aa4383845cb1b2c119405868246f233855925d454f79c3cb243461d2f0bb2a9c", 0xa4}], 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

18:00:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

[  138.121642] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value
18:00:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

[  138.164762] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value
18:00:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:38 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)

18:00:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:39 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
bind$inet6(r0, &(0x7f00000044c0)={0xa, 0x0, 0x0, @dev}, 0x1c)

18:00:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:39 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:39 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0)

18:00:39 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x33, 0x0, @private2, @local, {[], @echo_request}}}}}, 0x0)

18:00:39 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66", 0x7c}], 0x1)

18:00:39 executing program 4:
r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x401c5820, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8800000})

18:00:39 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}}, 0x0)

18:00:39 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0)

18:00:39 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, "839cdef64b251a43"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

18:00:39 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000005c0)={0xd, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

18:00:39 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0)

18:00:39 executing program 1:
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})

18:00:39 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:apt_var_log_t:s0\x00', 0x23)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010011"])

18:00:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240))
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pivot_root(&(0x7f00000001c0)='./file1\x00', 0x0)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

18:00:39 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0)

18:00:39 executing program 6:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000001900)=[{}], 0x1, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0), 0x8)

18:00:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:39 executing program 1:
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})

18:00:39 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_complete(r1)
syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd=r0, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r9, 0x0)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

18:00:39 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:apt_var_log_t:s0\x00', 0x23)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010011"])

18:00:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0))

18:00:39 executing program 1:
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})

18:00:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0))

18:00:39 executing program 6:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000001900)=[{}], 0x1, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0), 0x8)

18:00:39 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x24499204})

18:00:39 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:apt_var_log_t:s0\x00', 0x23)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010011"])

18:00:40 executing program 1:
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})

18:00:40 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x24499204})

18:00:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0))

18:00:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f00000003c0)='./file1\x00', 0x9)

18:00:40 executing program 1:
utime(0x0, 0xfffffffffffffffd)

18:00:40 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x24499204})

18:00:40 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

18:00:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0))

18:00:40 executing program 6:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000001900)=[{}], 0x1, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0), 0x8)

18:00:40 executing program 4:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:apt_var_log_t:s0\x00', 0x23)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010011"])

18:00:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

18:00:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000003740)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}], 0x20}}], 0x2, 0x0)

[  139.795418] loop7: detected capacity change from 0 to 256
[  139.822743] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
18:00:40 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x24499204})

18:00:40 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0xfffffffffffffffc, 0x0)

18:00:40 executing program 6:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000001900)=[{}], 0x1, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0), 0x8)

18:00:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  139.913959] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
18:00:40 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000280)={[{@resgid}]})

18:00:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$setstatus(r1, 0x4, 0x82000)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

18:00:40 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f000000d500), 0x8)

18:00:40 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0xfffffffffffffffc, 0x0)

18:00:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

18:00:40 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00')

18:00:40 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

18:00:40 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000300))

[  140.357288] EXT4-fs (sda): re-mounted. Quota mode: none.
[  140.361005] EXT4-fs (sda): re-mounted. Quota mode: none.
18:00:41 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0xfffffffffffffffc, 0x0)

18:00:41 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000300))

18:00:41 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

18:00:41 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

18:00:41 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$setstatus(r1, 0x4, 0x82000)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

18:00:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x40, 0x1d, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, 0x40}}, 0x0)

18:00:41 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0)

18:00:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0)

[  140.769164] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
18:00:41 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0xfffffffffffffffc, 0x0)

18:00:41 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000300))

18:00:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0)

18:00:41 executing program 2:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff)

18:00:41 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$setstatus(r1, 0x4, 0x82000)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

18:00:41 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="5ad51909000000000000001590923ec9e14eee814b0d127deb", @ANYRES32, @ANYRES64=r0])
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480), 0x1)
sendfile(r2, r1, 0x0, 0xfffffdef)

18:00:41 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5405, &(0x7f0000000040))

[  141.013943] loop7: detected capacity change from 0 to 40
18:00:41 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000300))

[  141.618355] syz-executor.7: attempt to access beyond end of device
[  141.618355] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  141.620284] Buffer I/O error on dev loop7, logical block 10, lost async page write
18:00:42 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

18:00:42 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$setstatus(r1, 0x4, 0x82000)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

18:00:42 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x68002, 0x0)
write(r0, &(0x7f0000000300)='2l', 0x2)

18:00:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0)

18:00:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0)

18:00:42 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

18:00:42 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

18:00:42 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="5ad51909000000000000001590923ec9e14eee814b0d127deb", @ANYRES32, @ANYRES64=r0])
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480), 0x1)
sendfile(r2, r1, 0x0, 0xfffffdef)

18:00:42 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="5ad51909000000000000001590923ec9e14eee814b0d127deb", @ANYRES32, @ANYRES64=r0])
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480), 0x1)
sendfile(r2, r1, 0x0, 0xfffffdef)

18:00:42 executing program 0:
alarm(0x1)
alarm(0x0)

18:00:42 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

18:00:42 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

[  141.805323] loop5: detected capacity change from 0 to 40
18:00:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0)

18:00:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0)

18:00:42 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

18:00:42 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x16)

[  142.116114] syz-executor.5: attempt to access beyond end of device
[  142.116114] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  142.117364] Buffer I/O error on dev loop5, logical block 10, lost async page write
18:00:43 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

18:00:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0)

18:00:43 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x16)

18:00:43 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="5ad51909000000000000001590923ec9e14eee814b0d127deb", @ANYRES32, @ANYRES64=r0])
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480), 0x1)
sendfile(r2, r1, 0x0, 0xfffffdef)

18:00:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

18:00:43 executing program 3:
io_uring_setup(0x7c32, &(0x7f00000045c0)={0x0, 0x0, 0x2})

18:00:43 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="5ad51909000000000000001590923ec9e14eee814b0d127deb", @ANYRES32, @ANYRES64=r0])
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_setup(0x454c, &(0x7f0000000240))
setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480), 0x1)
sendfile(r2, r1, 0x0, 0xfffffdef)

18:00:43 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000002d40)={0x77359400})

[  142.689678] loop5: detected capacity change from 0 to 40
18:00:43 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x16)

18:00:43 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0}])
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)

[  142.745575] loop7: detected capacity change from 0 to 40
18:00:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
close(r0)

18:00:43 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x2c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x11, 0x0, 0x0, 0x0, @binary="d8c93112d53774fb2e1ea05d01"}, @nested={0x5, 0xa, 0x0, 0x1, [@generic="c9"]}]}, 0x2c}], 0x1}, 0x0)

[  142.777666] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
18:00:43 executing program 3:
io_uring_setup(0x7c32, &(0x7f00000045c0)={0x0, 0x0, 0x2})

18:00:43 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x16)

18:00:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0)

18:00:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
close(r0)

18:00:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10000, 0x11a)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x1ff, 0xa, &(0x7f0000001c40)=[{&(0x7f0000000340)="9984c7dd6c8a92d05297448f9844be68f038a7b0a1c2cf546e535b9cd8c8f51dd74ede9289d4e6a1314381fa5247acb6e1e1f75c7758083a649a8e2e0c1b6d85c745c72185b4b5edd657afcc64124c0bb703868a3f1031fc56be111639be3cf56557a8c85f2876aa33144c94b7acdac487cd4239163224ba2d1aa04f8d389396a4941e66b2e758ba4948037b8dd8efc6d572406cc0c5876fdc4d3a9030d0917c010d0ff7601611cc7b2c312d34edff7c75d525", 0xb3, 0xc3a}, {&(0x7f00000006c0)="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", 0xfc, 0x621}, {&(0x7f00000007c0)="90ad455e464fbe93ec1af7ebf205d4f27c488cac96ffccc7dbfdd76dc99776349bbededfb05560d82552d2b82c6ecbbb49b6f192e2d1b4421d7b4fa4f6751bf1378a64cee9a283261b5daa9bab203692c774c03771f4ee3f77973b7aa6cfff2e7db17603412ccf22683ac5c1c466114634dbf32100200e5f1a1d4ea9bf7cdc539e2de36191287c897754c585121e49703799fd8d744b198b7de1e92087caa29b793a8909ce6bc6c25d04507699017489c22ee4e0dbbfc79bd8a0fab659a7d6ae6dc576", 0xc3, 0x101}, {&(0x7f0000000400)="c271881e43aa8eae2e89f8366ed0743171235dc623ea4ecf8855ce0cedee93ee3f4f890f60be53c746fe55768dfea305a9f7c427b8970969913eae06faa1b8d47dd34569dac3d1ff8c60f00e2024ad8d9087233ba463a046f6df024855b3ed9d433cd8e3f460464dbbfd8ff109f6e34eb93a7ec21c60c7be0d0f03e1760a7acc1acb9b3f0eb9152f3d81758b23e5b20c25627a7ffbc034", 0x97, 0xfffffffffffffff8}, {&(0x7f00000008c0)="9f92dc714f4608f3ce59b7cc317bb5b631cadd6c2776659f35eed7ed72387524f5305c617392ee438b68371cfe092bbf3f9c9833f906ef23c8de43a1278171f3ff109ec60e0c7728ae73660b91f7107b726359e07c3fd2e98ac37e3965339d4b5495dac0b2411e2c810ab10a89184f8f152969beb83e3b07ad1453770eabdbbebb0d2f300dbd5c662351bc1a8d9efc975bbb1870f424ec2ac03445fd2d7b267ffcfdc5dbb4b7666a1da97a1495", 0xad, 0x2}, {&(0x7f0000000980)="98ef4e8dc06a94c2a516ccce8b23352459d486159e663668df8f383c38a0c85c8605bf5086911c51cf57193a826a1793ec54dbbef2207f52f7be860080d04a8f2bec53185c7ffb1461a51ad0a512fa54f7c7876ccb12db141842f447763709100c0e25e8a323b990f2844d6de29f9599b6dd68f78206a2190bee88191b6b4c4d99fef6bd2c2dec5e375cb4c76a60d32bfa6dc72795", 0x95, 0x80000000000}, {&(0x7f0000000a40)="74ccbcd140d9759f145832f3e9aad2de548281460ad1722e5edf247fbda9873b81deddd4a23472daf5523bc97cf92ddff4f094fc4686b0cba9484766348f187e7792ee72315c30a2322309cd0580fce1d6cd76ddd9a4d47349792eb66e756b5d3cc20d7444b9ed5ee2427efdbb4a63cb31758bfe40ae80fb474423569ef434", 0x7f, 0x3}, {&(0x7f0000000b00)="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
VM DIAGNOSIS:
18:00:36  Registers:
info registers vcpu 0
RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880428ff698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001
R12=000000000000005d R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fec31b60700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f22687c4940 CR3=000000001a4cc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fec346d17c0 00007fec346d17c8
YMM02=0000000000000000 0000000000000000 00007fec346d17e0 00007fec346d17c0
YMM03=0000000000000000 0000000000000000 00007fec346d17c8 00007fec346d17c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000065d6e583 RCX=0000000000000000 RDX=ffff888042588000
RSI=ffffffff83ff8de3 RDI=0000000000000006 RBP=000000000000000f RSP=ffff88800c0d7630
R8 =0000000000000006 R9 =000000000000000f R10=000000000000000f R11=0000000000000000
R12=dffffc0000000000 R13=ffffffff84de5dc0 R14=000000000000000f R15=ffff88802edaea74
RIP=ffffffff84603b00 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555557362400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e225000 CR3=0000000042438000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973
YMM03=0000000000000000 0000000000000000 0004000000000000 0300020000000000
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000