fe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:47:27 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:27 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:27 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:27 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:47:27 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x0, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:47:41 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:47:41 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:47:41 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:47:41 executing program 7:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:47:41 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

[ 2349.028867] loop2: detected capacity change from 0 to 256
[ 2349.044394] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:47:41 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)

21:47:41 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:41 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:41 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:57 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:47:57 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:47:57 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)

21:47:57 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:57 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)

21:47:57 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)

21:47:57 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:47:57 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:47:57 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:47:57 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:09 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:09 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4])

21:48:09 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:09 executing program 4:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:09 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:09 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:09 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:09 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 2:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

[ 2377.425762] loop4: detected capacity change from 0 to 256
21:48:10 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4])

[ 2377.448404] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:48:10 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:10 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x0, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:10 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:10 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:22 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:22 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:22 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x0, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:22 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:22 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:22 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:22 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4])

21:48:22 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4])

21:48:23 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:23 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x0, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:23 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:23 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:23 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:23 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

[ 2390.526578] loop4: detected capacity change from 0 to 256
[ 2390.534564] loop0: detected capacity change from 0 to 256
[ 2390.548338] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[ 2390.573144] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:48:38 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:38 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:38 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:38 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:38 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:38 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

21:48:38 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

21:48:38 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:38 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:38 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:52 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:52 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

21:48:52 executing program 5:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:48:52 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:52 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:52 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:52 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:52 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

[ 2419.899995] loop4: detected capacity change from 0 to 256
21:48:52 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

[ 2419.967600] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:48:52 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00'])

21:48:52 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

21:48:52 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:48:52 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:52 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:52 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:48:52 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:48:52 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB])

21:49:06 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:06 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:06 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00'])

21:49:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:06 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:06 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:06 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:06 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00'])

21:49:06 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:06 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:18 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:18 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:18 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hN'])

21:49:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:18 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:18 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:18 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:18 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:19 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hN'])

21:49:19 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:19 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:19 executing program 6:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:35 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:35 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hN'])

21:49:35 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:35 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:35 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:35 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:35 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

[ 2463.074847] loop0: detected capacity change from 0 to 256
21:49:35 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNtt'])

21:49:35 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:35 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNtt'])

21:49:50 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:50 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:50 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNtt'])

21:49:50 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:50 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:49:50 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp'])

21:49:50 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:49:50 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:49:50 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:03 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp'])

21:50:03 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp'])

21:50:03 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:03 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:03 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:03 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:03 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

[ 2490.588005] loop2: detected capacity change from 0 to 256
[ 2490.600646] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:50:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:03 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp'])

21:50:16 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:16 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:16 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp'])

21:50:16 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:16 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:16 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:16 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:16 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:16 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:16 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:16 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:29 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:29 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:29 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:29 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:29 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:29 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:29 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:44 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:44 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:44 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:44 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:44 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:44 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:44 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:44 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:44 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:44 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:44 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:45 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:45 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:45 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:45 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:45 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:45 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:45 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:57 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:57 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:57 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:57 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:50:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:57 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:57 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:50:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:50:57 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{0x0}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:10 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:10 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:10 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:10 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:26 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:26 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:26 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:26 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:26 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:26 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:26 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:26 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f73668925430008012000040000", 0x13}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:27 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:27 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:27 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

[ 2574.403602] loop0: detected capacity change from 0 to 256
[ 2574.440814] FAT-fs (loop0): invalid media value (0x00)
[ 2574.441880] FAT-fs (loop0): Can't find a valid FAT filesystem
21:51:40 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f73668925430008012000040000", 0x13}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 7:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:40 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:40 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:40 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:40 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:40 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f73668925430008012000040000", 0x13}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f73668925430008012000040000", 0x13}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 7:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

[ 2588.058864] loop0: detected capacity change from 0 to 256
[ 2588.084202] FAT-fs (loop0): invalid media value (0x00)
[ 2588.085022] FAT-fs (loop0): Can't find a valid FAT filesystem
21:51:40 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:40 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:40 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

[ 2588.243231] loop2: detected capacity change from 0 to 256
[ 2588.274249] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:51:53 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:53 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:51:53 executing program 7:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:53 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

[ 2600.351512] loop3: detected capacity change from 0 to 256
[ 2600.374967] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:51:53 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:53 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:51:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:51:53 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:07 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:07 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:07 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:07 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 7:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 7:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:21 executing program 6:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:21 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:33 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r1, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:33 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:33 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:33 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:33 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

[ 2641.255162] loop2: detected capacity change from 0 to 256
21:52:33 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

[ 2641.333877] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
21:52:49 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r3, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:49 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001800000180000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:49 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:49 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:49 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:52:50 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:52:50 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:50 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:50 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:50 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:50 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:52:50 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:52:50 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:52:50 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:03 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:03 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:03 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:03 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:03 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:03 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:03 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:03 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:03 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:03 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:03 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:17 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x4883, 0x0)

21:53:17 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:53:17 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:17 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:53:17 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:53:17 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:53:17 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, 0x0, 0x4883, 0x0)

21:53:17 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:53:17 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])

21:53:17 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:17 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:53:17 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:17 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:17 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, 0x0, 0x4883, 0x0)

21:53:17 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:17 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:53:29 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:29 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:29 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:29 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:53:29 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

21:53:29 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:29 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, 0x0, 0x4883, 0x0)

21:53:29 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:53:29 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

[ 2696.943767] FAULT_INJECTION: forcing a failure.
[ 2696.943767] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2696.945750] CPU: 1 PID: 12074 Comm: syz-executor.7 Not tainted 6.0.0-rc1-next-20220818 #1
[ 2696.946988] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521
[ 2696.948230] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 12074, name: syz-executor.7
[ 2696.949414] preempt_count: 0, expected: 0
[ 2696.949989] RCU nest depth: 0, expected: 0
[ 2696.950579] 1 lock held by syz-executor.7/12074:
[ 2696.951271]  #0: ffff88800f598868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[ 2696.952467] irq event stamp: 262
[ 2696.952943] hardirqs last  enabled at (261): [<ffffffff812bd8c8>] __up_console_sem+0x78/0x80
[ 2696.954143] hardirqs last disabled at (262): [<ffffffff84123196>] dump_stack_lvl+0x2e/0xb3
[ 2696.955302] softirqs last  enabled at (256): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2696.956471] softirqs last disabled at (251): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2696.957655] CPU: 1 PID: 12074 Comm: syz-executor.7 Not tainted 6.0.0-rc1-next-20220818 #1
[ 2696.965203] FAULT_INJECTION: forcing a failure.
[ 2696.965203] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2696.967117] CPU: 1 PID: 12075 Comm: syz-executor.6 Not tainted 6.0.0-rc1-next-20220818 #1
[ 2696.967912] FAULT_INJECTION: forcing a failure.
[ 2696.967912] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2696.980033] syz-executor.7[12074] cmdline: /syz-executor.7 exec
[ 2696.980966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2696.982664] Call Trace:
[ 2696.983054]  <TASK>
[ 2696.983443]  dump_stack_lvl+0x8b/0xb3
[ 2696.984041]  __might_resched.cold+0x222/0x26b
[ 2696.984747]  down_read_killable+0x75/0x490
[ 2696.985427]  ? down_read_interruptible+0x490/0x490
[ 2696.986179]  __access_remote_vm+0xac/0x6f0
[ 2696.986871]  ? follow_phys+0x2c0/0x2c0
[ 2696.987499]  ? do_raw_spin_lock+0x121/0x260
[ 2696.988162]  ? rwlock_bug.part.0+0x90/0x90
[ 2696.988841]  ? lock_release+0x3b2/0x750
[ 2696.989485]  ? __up_console_sem+0x47/0x80
[ 2696.990159]  get_mm_cmdline.part.0+0x214/0x600
[ 2696.990876]  ? dname_to_vma_addr.isra.0+0x360/0x360
[ 2696.991683]  ? _raw_spin_unlock_irqrestore+0x33/0x60
[ 2696.992507]  get_task_cmdline_kernel+0x1e9/0x230
[ 2696.993227]  dump_stack_print_cmdline.part.0+0x82/0x150
[ 2696.994070]  ? _atomic_dec_and_lock_irqsave+0x150/0x150
[ 2696.994907]  ? __wake_up_klogd.part.0+0xc5/0xf0
[ 2696.995713]  ? dump_stack_print_info+0xc6/0x190
[ 2696.996454]  dump_stack_print_info+0x185/0x190
[ 2696.997159]  dump_stack_lvl+0x7f/0xb3
[ 2696.997773]  should_fail.cold+0x5/0xa
[ 2696.998397]  _copy_to_user+0x2a/0x140
[ 2696.998981]  simple_read_from_buffer+0xcc/0x160
[ 2696.999729]  proc_fail_nth_read+0x198/0x230
[ 2697.000402]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.001166]  ? security_file_permission+0xb1/0xe0
[ 2697.001944]  vfs_read+0x253/0x930
[ 2697.002504]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.003315]  ? kernel_read+0x1c0/0x1c0
[ 2697.003937]  ? __fget_files+0x270/0x450
[ 2697.004603]  ksys_read+0x127/0x250
[ 2697.005161]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2697.005885]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.006680]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.007513]  do_syscall_64+0x3b/0x90
[ 2697.008099]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2697.008904] RIP: 0033:0x7f2fb3af769c
[ 2697.009482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2697.012126] RSP: 002b:00007f2fb1099170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2697.013253] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2fb3af769c
[ 2697.014328] RDX: 000000000000000f RSI: 00007f2fb10991e0 RDI: 0000000000000006
[ 2697.015386] RBP: 00007f2fb10991d0 R08: 0000000000000000 R09: 0000000000000000
[ 2697.016444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2697.017503] R13: 00007ffd16f9775f R14: 00007f2fb1099300 R15: 0000000000022000
[ 2697.018614]  </TASK>
[ 2697.025449] syz-executor.6[12075] cmdline: /syz-executor.6 exec
[ 2697.026404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2697.028074] Call Trace:
[ 2697.028489]  <TASK>
[ 2697.028829]  dump_stack_lvl+0x8b/0xb3
[ 2697.029436]  should_fail.cold+0x5/0xa
[ 2697.030030]  _copy_from_user+0x2a/0x170
[ 2697.030660]  kstrtouint_from_user+0xac/0x170
[ 2697.031365]  ? kstrtouint+0x120/0x120
[ 2697.031960]  ? lock_acquire+0x1b2/0x530
[ 2697.032598]  proc_fail_nth_write+0x78/0x220
[ 2697.033244]  ? proc_task_getattr+0x1f0/0x1f0
[ 2697.033945]  ? lock_is_held_type+0xd7/0x130
[ 2697.034626]  vfs_write+0x2cb/0xd90
[ 2697.035195]  ? proc_task_getattr+0x1f0/0x1f0
[ 2697.035891]  ? __ia32_sys_pread64+0x220/0x220
[ 2697.036620]  ? __fget_files+0x270/0x450
[ 2697.037254]  ksys_write+0x127/0x250
[ 2697.037837]  ? __ia32_sys_read+0xb0/0xb0
[ 2697.038496]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.039307]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.040089]  do_syscall_64+0x3b/0x90
[ 2697.040685]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2697.041484] RIP: 0033:0x7fa7307355ff
[ 2697.042037] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2697.044703] RSP: 002b:00007fa72dcd7170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2697.045851] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa7307355ff
[ 2697.046925] RDX: 0000000000000001 RSI: 00007fa72dcd71e0 RDI: 0000000000000006
[ 2697.048011] RBP: 00007fa72dcd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2697.049082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2697.050153] R13: 00007ffd252912af R14: 00007fa72dcd7300 R15: 0000000000022000
[ 2697.051303]  </TASK>
21:53:29 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 2)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})

[ 2697.183887] syz-executor.7[12074] cmdline: /syz-executor.7 exec
[ 2697.184863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2697.186504] Call Trace:
[ 2697.186883]  <TASK>
[ 2697.187244]  dump_stack_lvl+0x8b/0xb3
[ 2697.187866]  should_fail.cold+0x5/0xa
[ 2697.188470]  _copy_to_user+0x2a/0x140
[ 2697.189038]  simple_read_from_buffer+0xcc/0x160
[ 2697.189758]  proc_fail_nth_read+0x198/0x230
[ 2697.190417]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.191148]  ? security_file_permission+0xb1/0xe0
[ 2697.191894]  vfs_read+0x253/0x930
[ 2697.192446]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.193193]  ? kernel_read+0x1c0/0x1c0
[ 2697.193824]  ? __fget_files+0x270/0x450
[ 2697.194482]  ksys_read+0x127/0x250
[ 2697.195034]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2697.195775]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.196576]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.197383]  do_syscall_64+0x3b/0x90
[ 2697.197964]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2697.198776] RIP: 0033:0x7f2fb3af769c
[ 2697.199397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2697.202056] RSP: 002b:00007f2fb1099170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2697.203225] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2fb3af769c
[ 2697.204300] RDX: 000000000000000f RSI: 00007f2fb10991e0 RDI: 0000000000000006
[ 2697.205360] RBP: 00007f2fb10991d0 R08: 0000000000000000 R09: 0000000000000000
[ 2697.206439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2697.207542] R13: 00007ffd16f9775f R14: 00007f2fb1099300 R15: 0000000000022000
[ 2697.208650]  </TASK>
[ 2697.209013] CPU: 0 PID: 12076 Comm: syz-executor.5 Tainted: G        W          6.0.0-rc1-next-20220818 #1
21:53:29 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x49, 0x5, 0x7, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x6, 0x3, 0x6, 0x0, 0xc7b, 0x401, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r2, 0xb)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x800, 0x0, '\x00', 0x1, &(0x7f00000003c0)})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x6f7ea30fecb517fb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x28, 0x2, 0x4, 0x4, 0x2, 0x200, 0x80, 0x0, 0x0, 0x0, 0xebd8}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[])
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)

21:53:29 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (fail_nth: 3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:29 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x3000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])

21:53:29 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d71642c7266646e6f3d89332fa22c2fcdfa0b6bc35e1aae3667c5031cffce3345f5f103b509c47945aabcd704bcc060d2f9e4dde762e793de3160644372675b160de8ecc752e548848b1299a39cb1d6037064e0cddad15df901240d523eaf918f9d4018bf98a7351bf671235c5dc4233df9840ea638678091025234c811ab25c431b1e960c0be1512cf3992c67f5b91598b969dac77829d50b6", @ANYRESHEX, @ANYBLOB="2c77606e6f3d00acfe079d5fcf107658cafb29d38091d81d2529683b29d5fec6fe2890a6df8b31fe0a24ba7ad39918fc9511407546b89c00a8b043b7712f278f700f4ed259d435f9bbdc925769e50b4be1d8742fd9ab0994d6bfa4a1a353b0bce6608e1225803c1295881bbcf71a671534a165cfdc2182240f5634d0a85159f8f038c191a943856215e1f6ac56d8c2686e812761d5492da2e2f80355ddb39178878adad409928e6c349a6373d6f626f273c7f148f7116b96cb65bdea0b79d6eb51984e27701c8a627edbf4a60fbc4e23a4641b31fc093affe598568c42462dd91f5e9a16bfe0f897e62a6e73b6ed733420d66909b0b06603d4a0f507c663f131bb539b3fc75dbdd06a5da5c390a031a02a4a8b67dbc6f4826198c3d1961b39af1b7a789b9e09e8f2d4d47b8237bbdf064972f0daad3ebc125e6b9a3a26e1", @ANYRESHEX, @ANYBLOB="d88f97a36d266e27a36a12a20dd33d62e9937a078f"])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "63d96b14c3d6235c"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000180000018000000", @ANYRES32=r4, @ANYBLOB=' /file0\x00\x00<hNttp\x00'])

21:53:29 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 4)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB])
syz_open_dev$tty20(0xc, 0x4, 0x0)

[ 2697.381602] syz-executor.5[12076] cmdline: /syz-executor.5 exec
[ 2697.382122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2697.383011] Call Trace:
[ 2697.383216]  <TASK>
[ 2697.383422]  dump_stack_lvl+0x8b/0xb3
[ 2697.383739]  should_fail.cold+0x5/0xa
[ 2697.384055]  _copy_to_user+0x2a/0x140
[ 2697.384381]  simple_read_from_buffer+0xcc/0x160
[ 2697.384754]  proc_fail_nth_read+0x198/0x230
[ 2697.385105]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.385506]  ? security_file_permission+0xb1/0xe0
[ 2697.385887]  vfs_read+0x253/0x930
[ 2697.386175]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2697.386578]  ? kernel_read+0x1c0/0x1c0
[ 2697.386892]  ? __fget_files+0x270/0x450
[ 2697.387223]  ksys_read+0x127/0x250
[ 2697.387525]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2697.387886]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.388301]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.388699]  do_syscall_64+0x3b/0x90
[ 2697.389003]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2697.389424] RIP: 0033:0x7f6df3cc069c
[ 2697.389710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2697.391070] RSP: 002b:00007f6df1262170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2697.391689] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6df3cc069c
[ 2697.392226] RDX: 000000000000000f RSI: 00007f6df12621e0 RDI: 0000000000000006
[ 2697.392780] RBP: 00007f6df12621d0 R08: 0000000000000000 R09: 0000000000000000
[ 2697.393338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2697.393870] R13: 00007ffe22afc30f R14: 00007f6df1262300 R15: 0000000000022000
[ 2697.394443]  </TASK>

VM DIAGNOSIS:
21:53:29  Registers:
info registers vcpu 0
RAX=1ffff11008d07300 RBX=00007f479b300000 RCX=0000000000000000 RDX=ffff888046478000
RSI=ffffffff8168ee32 RDI=0000000000000006 RBP=ffff888046839800 RSP=ffff888045adf718
R8 =0000000000000006 R9 =00007f479b300000 R10=00007f479b30c000 R11=0000000000000001
R12=ffff888045adfa30 R13=ffffea0000cf9a00 R14=dffffc0000000000 R15=00007f479b30c000
RIP=ffffffff8168ee3e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc43f9b850 CR3=00000000101fa000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=ffffed10089a0e36 RBX=1ffff110089a0e36 RCX=ffffffff81297e2f RDX=dffffc0000000000
RSI=ffff8880447c2540 RDI=ffff8880447c1b00 RBP=ffff8880447c2540 RSP=ffff888044d07178
R8 =0000000000000000 R9 =ffffffff86ca57e7 R10=fffffbfff0d94afc R11=0000000000000001
R12=0000000000000008 R13=ffff8880447c2540 R14=ffff8880447c24a0 R15=dffffc0000000000
RIP=ffffffff81294351 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa72dcf8700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2fb1098f78 CR3=0000000045498000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000